Re: [Exim] Blocking sobig.f

Top Page
Delete this message
Reply to this message
Author: Alun
Date:  
To: jvanasco
CC: exim-users
Subject: Re: [Exim] Blocking sobig.f
--
jvanasco (jvanasco@???) said, in message
    <0844DF13-D3E2-11D7-B3DF-000393863D5E@???>:

>
> well here's a weird thing i'm seeing with sobig lately:
>
> I'm getting a lot of sobig messages WITHOUT the virus attachment
>
> I dunno wtf is going on -- maybe some external firewall that the sender
> is behind filters them out?
>
> Someone here has a couple hundered 'Wicked Screensaver' messages that
> just have 'See the attached file' and no attachment.
>
> Its ODD.


I believe these are, under some circumstance, generated directly by the
virused machine. We had a crop of machines infected here yesterday and I
was seeing such messages coming directly from them (before I firewalled
the lot).

Cheers,
Alun.

--
Alun Jones                       auj@???
Systems Support,                 (01970) 62 2494
Information Services,
University of Wales, Aberystwyth



--
[ Content of type application/pgp-signature deleted ]
--