From: "Jason R. Mastaler" <[EMAIL PROTECTED]> > Robin Lynn Frank <[EMAIL PROTECTED]> writes: > > > Thanks for that very complete explanation. Bagle.A came in just > > under 25k and the current MyDoom/SCO.A/Navarg is just under 35k. > > > > I think I'll cut back on CONFIRM_MAX_MESSAGE_SIZE and see how thast > > fares. > > MS worms weren't prevalent when I chose the 50k default, so it might > make sense to revisit that now. Or, do something else like delete > all attachments when including the copy of the sender's message. > Any opinions on this?
Some context in the confirmation request is always useful - i.e. to prove the request itself isn't SPAM. I was just wishing the other day for an include-the-original-message-with-stripped-attachments option because I'd noticed the worms coming in lower than 50K. I solved this by blocking .zip's as well as the usual extensions so no confirms went out, but only a few hours after this one started, so I guess I spammed some people with worms in the confirm requests:-( -- Stephen Warren, Software Engineer, Parama Networks, San Jose, CA [EMAIL PROTECTED] http://www.wwwdotorg.org/ _____________________________________________ tmda-users mailing list ([EMAIL PROTECTED]) http://tmda.net/lists/listinfo/tmda-users
