Re: [squid-users] Re: *** VIRUS *** [squid-users] Server Report
On Fri, 6 Jul 2007, Henrik Nordstrom wrote: tor 2007-07-05 klockan 13:19 +0545 skrev Manoj_Rajkarnikar: On Tue, 1 Jan 2002, [EMAIL PROTECTED] wrote: Please do something about it. found worm in a message... Now the filters have been hardened a bit further, with the sideeffect that most non-text attachments will get rejected, at least until there is a proper virus scanner running.. Thanks. Sure hope no other virus makes through to the list. And no, I didn't send that virus. I agree. Received: from squid-cache.org (ppp-124.120.133.107.revip2.asianet.co.th [124.120.133.107]) by squid-cache.org (8.14.0/8.13.6) with ESMTP id l642GdEo067087 for squid-users@squid-cache.org; Tue, 3 Jul 2007 20:16:42 -0600 (MDT) (envelope-from [EMAIL PROTECTED]) Regards Henrik Manoj --
Re: [squid-users] Re: *** VIRUS *** [squid-users] Server Report
On Fri, Jul 06, 2007, Manoj_Rajkarnikar wrote: On Fri, 6 Jul 2007, Henrik Nordstrom wrote: tor 2007-07-05 klockan 13:19 +0545 skrev Manoj_Rajkarnikar: On Tue, 1 Jan 2002, [EMAIL PROTECTED] wrote: Please do something about it. found worm in a message... Now the filters have been hardened a bit further, with the sideeffect that most non-text attachments will get rejected, at least until there is a proper virus scanner running.. Thanks. Sure hope no other virus makes through to the list. That didn't quite work - it deferred all mail. I've taken it out from the mail configuration for the time being. Henrik, check the maillog for Syntax, you'll see what happened.. Its going to take a couple of hours at least to drain all the posts out of the queue. Adrian
Re: [squid-users] Re: *** VIRUS *** [squid-users] Server Report
tor 2007-07-05 klockan 13:19 +0545 skrev Manoj_Rajkarnikar: On Tue, 1 Jan 2002, [EMAIL PROTECTED] wrote: WARNING: This e-mail has been altered by MIMEDefang. Following this paragraph are indications of the actual changes made. For more information about your site's MIMEDefang policy, contact Vianet System Administrator [EMAIL PROTECTED]. For more information about MIMEDefang, see: http://www.roaringpenguin.com/mimedefang/enduser.php3 Dropped document.scr (application/octet-stream) containing virus Worm.SCO.A-1. Please do something about it. found worm in a message... Now the filters have been hardened a bit further, with the sideeffect that most non-text attachments will get rejected, at least until there is a proper virus scanner running.. And no, I didn't send that virus. Received: from squid-cache.org (ppp-124.120.133.107.revip2.asianet.co.th [124.120.133.107]) by squid-cache.org (8.14.0/8.13.6) with ESMTP id l642GdEo067087 for squid-users@squid-cache.org; Tue, 3 Jul 2007 20:16:42 -0600 (MDT) (envelope-from [EMAIL PROTECTED]) Regards Henrik signature.asc Description: Detta är en digitalt signerad meddelandedel
[squid-users] Re: *** VIRUS *** [squid-users] Server Report
On Tue, 1 Jan 2002, [EMAIL PROTECTED] wrote: WARNING: This e-mail has been altered by MIMEDefang. Following this paragraph are indications of the actual changes made. For more information about your site's MIMEDefang policy, contact Vianet System Administrator [EMAIL PROTECTED]. For more information about MIMEDefang, see: http://www.roaringpenguin.com/mimedefang/enduser.php3 Dropped document.scr (application/octet-stream) containing virus Worm.SCO.A-1. Please do something about it. found worm in a message... Thanks Manoj --
Re: [squid-users] Re: *** VIRUS *** [squid-users] Server Report
Hi, Manoj_Rajkarnikar wrote: On Tue, 1 Jan 2002, [EMAIL PROTECTED] wrote: WARNING: This e-mail has been altered by MIMEDefang. Following this paragraph are indications of the actual changes made. For more information about your site's MIMEDefang policy, contact Vianet System Administrator [EMAIL PROTECTED]. For more information about MIMEDefang, see: http://www.roaringpenguin.com/mimedefang/enduser.php3 Dropped document.scr (application/octet-stream) containing virus Worm.SCO.A-1. Please do something about it. found worm in a message... I seriously doubt Henrik sent out a worm and in any case, why are you reporting something that happened over 5 years ago? Neil. -- Neil Hillard[EMAIL PROTECTED] AgustaWestland http://www.whl.co.uk/ Disclaimer: This message does not necessarily reflect the views of Westland Helicopters Ltd.
Re: [squid-users] Re: *** VIRUS *** [squid-users] Server Report
Hi neil. On Thu, 5 Jul 2007, Neil A. Hillard wrote: Hi, Manoj_Rajkarnikar wrote: On Tue, 1 Jan 2002, [EMAIL PROTECTED] wrote: WARNING: This e-mail has been altered by MIMEDefang. Following this paragraph are indications of the actual changes made. For more information about your site's MIMEDefang policy, contact Vianet System Administrator [EMAIL PROTECTED]. For more information about MIMEDefang, see: http://www.roaringpenguin.com/mimedefang/enduser.php3 Dropped document.scr (application/octet-stream) containing virus Worm.SCO.A-1. Please do something about it. found worm in a message... I seriously doubt Henrik sent out a worm and in any case, why are you reporting something that happened over 5 years ago? I too don't believe its Henrik. But it made it here from the list and it came yesterday not 5 years ago. FYI, here's the log entries for that mail. Jul 4 08:21:26 dns1 sendmail[19416]: l642XwNU019416: from=[EMAIL PROTECTED], size=33846, class=0, nrcpts=1, msgi d=[EMAIL PROTECTED], proto=SMTP, daemon=MTA, relay=squid-cache.org [12.160.37.9] Jul 4 08:21:26 dns1 mimedefang.pl[17467]: Found Worm.SCO.A-1 from 12.160.37.9 Jul 4 08:21:26 dns1 clamd[23763]: /var/spool/MIMEDefang/mdefang-l642XwNU019416/Work/msg-17467-48.scr: Worm.SCO.A-1 FOUND Jul 4 08:21:26 dns1 clamd[23763]: /var/spool/MIMEDefang/mdefang-l642XwNU019416/Work/msg-17467-48.scr: Worm.SCO.A-1 FOUND Jul 4 08:21:26 dns1 mimedefang.pl[17467]: MDLOG,l642XwNU019416,mail_in,,,[EMAIL PROTECTED],[EMAIL PROTECTED] ,[squid-users] Server Report Jul 4 08:21:27 dns1 mimedefang.pl[17467]: filter: l642XwNU019416: drop_with_warning=1 Jul 4 08:21:26 dns1 sendmail[19416]: l642XwNU019416: Milter change: header Subject: from [squid-users] Server Report to *** VIRUS *** [squid-users] Server R eport Please disregard if this doesn't concern anyone. I wrote to the list because when a virus/worm is sent out the mailing list, its not one or ten or hundred users thats effected, its thousands or tens of thousands. Manoj. --
