Actually that message was very useful to me. It gave me early warning about the virus by showing that it leaked through our email anti-virus and the code gave me some strings to scan for on our IDS. As a security professional, I never execute anything I get in email, but I do examine it with text only tools to look for problems. Don't you -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of [EMAIL PROTECTED] Sent: Tuesday, February 13, 2001 06:03 To: [EMAIL PROTECTED]; [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: RE: Importance: High I have to say that it is a pretty sad state of affairs when a mailing list that is dedicated to IT security issues falls foul of this type of problem. Is there any need to allow attachments on this forum? I assume that there is some form of content analysis performed on the traffic through this list.....? I would assume that most people on this list have some form of content analyser implemented on their mail gateway. I would further assume that if you were not covered when the first VBS was distributed then you were pretty soon afterwards ( weren't you? ). This is the responsible thing to do. I am sure that the guys who run this list would think so too. I know that this list is run (pretty smoothly) as a free service to us and the relevant T&Cs are in place, but people have been put on RBL for less. Is there a cheep and simple method you guys could implement by which attachments could be prohibited on this list? Cheers,Liam. > ---------- > From: Matt Rogghe > Sent: 12 February 2001 20:55 > To: 'Gary Rollie'; [EMAIL PROTECTED] > > That last post to here was a nasty little replicator script. Looks > like > it's just hitting the global address list so far on the exchange > server. > - > [To unsubscribe, send mail to [EMAIL PROTECTED] with > "unsubscribe firewalls" in the body of the message.] > - [To unsubscribe, send mail to [EMAIL PROTECTED] with "unsubscribe firewalls" in the body of the message.] - [To unsubscribe, send mail to [EMAIL PROTECTED] with "unsubscribe firewalls" in the body of the message.]
