Hy, To go OT a bit, what the hell is forging dns?
I know dns but forging.. Probabaly something simple though. :P D.C. ----- Original Message ----- From: "Bonno Bloksma" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Cc: "R. Scott Perry" <[EMAIL PROTECTED]> Sent: Tuesday, November 25, 2003 9:09 PM Subject: Re: [Declude.Virus] Current Forging Virus list > Hi, > > My list is a bit longer and isn't it Dumaru in stead of Dumar? > > FORGINGVIRUS Avril > FORGINGVIRUS Braid > FORGINGVIRUS Bridex > FORGINGVIRUS Bugbear > FORGINGVIRUS Dumaru > FORGINGVIRUS Fizzer > FORGINGVIRUS Gibe > FORGINGVIRUS Hybris > FORGINGVIRUS Klez > FORGINGVIRUS Lentin > FORGINGVIRUS Magistr > FORGINGVIRUS Mimail > FORGINGVIRUS Palyh > FORGINGVIRUS Sefex > FORGINGVIRUS Sober > FORGINGVIRUS Sobig > FORGINGVIRUS Swen > FORGINGVIRUS Yaha > > Scott, my list also longer then the list in the sender.eml file. You are > missing > Avril, Gibe, Hybris, Sefex and Swen. Are those not forging virusses? I only > add them to my list after receiving delivery errors which state "unkown > mailbox" or something like it. > > Also you have Dumar in stead of Dumaru. Sophos does not know a Dumar virus > but does know of a Dumaru virus. Same for F-prot. > > Maybe a good idea to have these standard in the virus.cfg file and adapt the > *.eml files into using the line SKIPIFSENDER [Forged], that way all > maintenance is done at one place, no need to update multiple eml files, no > confusing the user with invalid e-mail addresses. Of course you forging dns > server is even better but this is a good starting place for those that don't > want that for whatever reason. > > Groetjes, > > Bonno Bloksma > .... Back up my hard drive? How do I put it in reverse? > > ----- Original Message ----- > From: "Karen D. Oland" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Tuesday, November 25, 2003 7:46 PM > Subject: RE: [Declude.Virus] Current Forging Virus list > > > > I've also seen these identified with forged addresses: > > > > FORGINGVIRUS Mimail > > FORGINGVIRUS Dumar > > FORGINGVIRUS Sober > > FORGINGVIRUS Holar > > > > > Is this a good current list? > > > > > > FORGINGVIRUS Braid > > > FORGINGVIRUS Bridex > > > FORGINGVIRUS Bugbear > > > FORGINGVIRUS Hybris > > > FORGINGVIRUS Lentin > > > FORGINGVIRUS Klez > > > FORGINGVIRUS Magistr > > > FORGINGVIRUS Sobig > > > FORGINGVIRUS Vulnerability > > > FORGINGVIRUS Yaha > > > FORGINGVIRUS Fizzer > > > FORGINGVIRUS Palyh > > --- > > [This E-mail scanned for viruses by Declude Virus] > > > > --- > > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > > > --- > > This E-mail came from the Declude.Virus mailing list. To > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.Virus". The archives can be found > > at http://www.mail-archive.com. > > --- > > [This E-mail scanned for viruses by Declude Virus using f-prot and Sophos] > > > > > > --- > [This E-mail scanned for viruses by Declude Virus using f-prot and Sophos] > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus". The archives can be found > at http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
