On Tue, Jan 28, 2003 at 06:20:27AM +1030, Darren Freeman wrote:
> On Tue, 2003-01-28 at 02:16, Dr. Richard E. Hawkins wrote:
> > On Mon, Jan 27, 2003 at 04:41:18PM +0100, Andre Poenitz wrote:
> > > On Mon, Jan 27, 2003 at 10:35:29AM -0500, Dr. Richard E. Hawkins wrote:
> > > > I actually have a line for that addres in my filters that catches both
> > > > the direct spam and the stuff that comes here.  The only address I've
> > > > been bothered to do that for (thouhg once I get a few minutes to
> > > > understand one I found that checks for 90% 8 bit high characters . . .
> > 
> > > Nevertheless, these mails are fairly big, so this is annoying...
> > 
> > I never notice the size, sitting on top of a fat connectio :)  

Well, the user's list does not get it because they have a 60K message size
restriction.

> > 
> > Oh, and unlike everything else which goes to a spam folder, his go to
> > /dev/null . . .
> 
> ... which gives him the pleasure of being copied from buffer to buffer,
> finally ending up in kernel space, only to then be dropped ...

Well, with qmail you just drop it on the floor---no copying. In any case, I
just put in a filter which does not allow attachments with .pi or .pif
extensions.

> 
> far more than he deserves!
> 
> Why not give him a reply from /dev/zero instead? ;)
> 
> Or convince him to connect to your credit-card details, cleverly
> disguised as the CHARGEN port of a kick-arse server? Tell him it's
> encrypted, and to get it he first has to download the *whole* file ;)
> 

Please do not do anything like that.  Remember, spammers/blackhats are doing
this full time, and they will win if you openly take it up with them.  

Besides, the virus is probably coming to you from an infected site, and not
from the creator.  Looking into the list archive, none of the copies of the
"bigboss" viruses came from the same IP.

The address [EMAIL PROTECTED] of course is a fake, and has nothing to do with
where the copy of the virus you receive is coming from.

> Notice how discussing the spam takes up more of our time and bandwidth
> than the original spam did? =)
> 

Yes.  But it is not a spam, it is a virus, and as such should be taken care
of by your ISP.  

Of course, there is an ultimate solution to the virus/spam problem on my
end...  Time is better spent perhaps discussing that.

Mate

Reply via email to