Re: [SLUG] Stopping W32.Welchia with Linux?

From: Robin 'Roblimo' Miller (robin@roblimo.com)
Date: Wed Aug 20 2003 - 09:47:50 EDT


Ben Ostrowsky wrote:

>We're getting a silly number of copies of the W32.Welchia worm, and I know there
>are malware-finders that could work with postfix. What do you recommend for
>preventing worm-generated email from making it to the inboxes?
>

You can always filter it with spamassasin or another Bayesian program. I
have my Mozilla mail filters set to send all email with body copy "see
the attached file for details" to my "junk" folder.

This is a crude fix, but takes less than 10 seconds to implement and
works fine.

- Robin

-----------------------------------------------------------------------
This list is provided as an unmoderated internet service by Networked
Knowledge Systems (NKS). Views and opinions expressed in messages
posted are those of the author and do not necessarily reflect the
official policy or position of NKS or any of its employees.



This archive was generated by hypermail 2.1.3 : Fri Aug 01 2014 - 17:48:45 EDT