It looks like you get the proper IP of the offending machine firing off these worms in the header (even though everything else is forged).
Is there any point in telling [EMAIL PROTECTED] that one of their DSL customers is spamming the Internet with noxious messages? Anyone have any experience regarding these warnings being responded to properly? I know you can often get educational and small business sys admins to take care of the problem (and often they're thankful of the warning), but I wonder if it's worth the effort to notify the big guys. If so, has anyone hacked together anything semi-automated to deal with this which doesn't produce unnecessary spam in cases where the real IP is masked? Jeffrey Moskot System Administrator [EMAIL PROTECTED] ------------------------------------------------------- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click _______________________________________________ Clamav-users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/clamav-users