Re: (OT) Melissa Virus

1999-03-30 Thread Kai MacTane
Text written by Russ Allbery at 06:34 AM 3/30/99 -0800: > >as root. Windows just doesn't have a user other than root. Exactly! I came to Linux after a long while in the DOS/Windows world, starting from about DOS 5.0. (I used to be able to optimize DOS' memory usage well enough that MemMaker, whe

Re: OT: Melissa Virus

1999-03-30 Thread Mark Delany
>> >> qmail? One could argue that there should be a ~alias/.qmail-default >> >> installed as a default. >> >> >> > >> >Just out of curiosity, what should be in ~/.qmail-default? >> >> Something that stops a bounce that informs people about addresses that are >> invalid (and thus by inference) a

Re: OT: Melissa Virus

1999-03-30 Thread Russ Allbery
John Conover <[EMAIL PROTECTED]> writes: > What should be in ~alias/.qmail-default to do that? If you want to just not send out bounce messages for non-existent addresses, # will do. (I wouldn't recommend this for any large site, for obvious reasons.) -- Russ Allbery ([EMAIL PROTECTED])

Re: OT: Melissa Virus

1999-03-30 Thread John Conover
Mark Delany writes: > At 04:33 PM Tuesday 3/30/99, John Conover wrote: > >Mark Delany writes: > >> > >> Not too bad. Are there others that cannot be stopped with the standard > >> qmail? One could argue that there should be a ~alias/.qmail-default > >> installed as a default. > >> > > > >Just o

Re: OT: Melissa Virus

1999-03-30 Thread Mark Delany
At 04:33 PM Tuesday 3/30/99, John Conover wrote: >Mark Delany writes: >> >> Not too bad. Are there others that cannot be stopped with the standard >> qmail? One could argue that there should be a ~alias/.qmail-default >> installed as a default. >> > >Just out of curiosity, what should be in ~/.

Re: OT: Melissa Virus

1999-03-30 Thread Jeff Hayward
On Tue, 30 Mar 1999, Mark Delany wrote: >Delivered-To: headers. Good point, but external parties don't get to see those unless there's a bounce. I was going to add that allowing bounces is a possible leakage - perhaps I should say that now :> The main thing, IMO, that D-T: reve

Re: OT: Melissa Virus

1999-03-30 Thread Mark Delany
At 10:28 AM Tuesday 3/30/99, Jeff Hayward wrote: >On Tue, 30 Mar 1999, Mark Delany wrote: > > Examples? > > 1. uid (but not username!) in Received: > 2. qid & qp on 250 ok (they largely provide traffic analysis-type info) > 3. IP addresses and reverse names (possibly from a split DNS) i

Re: OT: Melissa Virus

1999-03-30 Thread John Conover
Mark Delany writes: > > Not too bad. Are there others that cannot be stopped with the standard > qmail? One could argue that there should be a ~alias/.qmail-default > installed as a default. > Just out of curiosity, what should be in ~/.qmail-default? Thanks, John -- John

Re: OT: Melissa Virus

1999-03-30 Thread Jeff Hayward
On Tue, 30 Mar 1999, Mark Delany wrote: Examples? 1. uid (but not username!) in Received: 2. qid & qp on 250 ok (they largely provide traffic analysis-type info) 3. IP addresses and reverse names (possibly from a split DNS) in Received: lines Delivered-To: headers. -- Jeff

Re: OT: Melissa Virus

1999-03-30 Thread Mark Delany
>>> bashing on this one is misplaced. This particular attack is not >>> Microsoft-specific in any way other than having happened to be written >> If document macros ran in a limited environment analagous to the Java >> sandbox, things would be a lot safer. > >Has *Java* even gotten their sandbox

Re: OT: Melissa Virus

1999-03-30 Thread Russ Allbery
ddb <[EMAIL PROTECTED]> writes: > Russ Allbery <[EMAIL PROTECTED]> writes: >> I'd like to back this up, and point out here that too much Microsoft >> bashing on this one is misplaced. This particular attack is not >> Microsoft-specific in any way other than having happened to be written >> again

OT: Melissa Virus

1999-03-30 Thread ddb
Russ Allbery <[EMAIL PROTECTED]> writes on 30 March 1999 at 01:04:26 -0800 > I'd like to back this up, and point out here that too much Microsoft > bashing on this one is misplaced. This particular attack is not > Microsoft-specific in any way other than having happened to be written > again