This is the Fix2001 virus and not spam. The person who is sending this mail
is probably unaware that they are infected. Basically, the virus
trawls through their address book, and sends this email to everyone it
finds. See http://www.datafellows.com/v-descs/fix2001.htm for more
info.
Blocking this type of email is an excellent idea - you need to
block all "admin_@" since it always picks the domain address of the
person it is sending to by forging the From: field
If possible some sort of 'this mail was blocked because it contains
the Fix2001 virus' error code would eventually help the other end to realise
they were infected, although this is of course more work.
Regards,
Alex
----- Original Message -----
From: Shashi Dahal <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, January 24, 2000 10:15 AM
Subject: Blocking Mails
Dear All,
Someone is spamming through my server.
The header file looks like:
Return-Path: <[EMAIL PROTECTED]>
Received: (qmail 14914 invoked from network); 24 Jan 2000 01:54:59 -0000
Received: from ram.wlink.com.np (HELO Pupi) (@202.79.32.33)
by trishakti.wlink.com.np with SMTP; 24 Jan 2000 01:54:59 -0000
Message-ID: <[EMAIL PROTECTED]>
From: Administrator <[EMAIL PROTECTED]>
Reply-To: [EMAIL PROTECTED]
X-Mailer: PUPI-MAIL v.0.1
MIME-Version: 1.0
To: [EMAIL PROTECTED]
Subject: Internet problem year 2000.
Content-Type: multipart/mixed; boundary="-GOODMAN"
My question is how can I block this type of address something like:
admin_@*.com
admin_@*.net
admin_@*.org
admin_@*.edu
Thanks in Advance
Shashi
____________________________________________________________________________
____
This message has been checked for all known viruses by the Star Screening
System
http://www.star.net.uk/stats.asp
________________________________________________________________________________
This message has been checked for all known viruses by the Star Screening System
http://www.star.net.uk/stats.asp
