On Sunday 14 March 2004 8:39 pm, Doug Hardie wrote:
> On Mar 14, 2004, at 11:57, jef moskot wrote:
> > It looks like you get the proper IP of the offending machine firing off
> > these worms in the header (even though everything else is forged).
> >
> > Is there any point in telling [EMAIL PROTECTED] that one of their DSL
> > customers is spamming the Internet with noxious messages? Anyone have
> > any experience regarding these warnings being responded to properly?
> >
> > I know you can often get educational and small business sys admins to
> > take care of the problem (and often they're thankful of the warning), but
> > I wonder if it's worth the effort to notify the big guys.
>
> It all depends on the person first receiving the notice at
> giantISP.com. If they feel they have to go to management, forget it.
> You will never get anything accomplished except for a string of denials
> that it came from their users. However, there are occasions were it
> gets seen by someone who knows what they are doing and takes care of
> the situation.
I got some good results out of sending such an advisory email to a few (~5)
ISPs late last year, after Sobig.F - the virus that was supposed to stop
around mid-September. Once the end date had passed, I found I was still
getting some from stupid users who had not only got the virus, and not
cleaned it off their machines, but had the clock on their PCs wrong by weeks
or even months.
I emailed the ISPs giving them the offending IP address and hostname (as
reported by the SMTP helo), and they responded positively (and the emails to
my domains stopped).
I wouldn't consider doing this as an automated response, though.
Regards,
Antony.
--
I don't know, maybe if we all waited then cosmic rays would write all our
software for us. Of course it might take a while.
- Ron Minnich, Los Alamos National Laboratory
Please reply to the list;
please don't CC me.
-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
_______________________________________________
Clamav-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/clamav-users
