Hi, Just a quick thought on that. Under XP the IP address can be spoofed.
Regards, Rick ----- Original Message ----- From: "Charles J. Boening" <[EMAIL PROTECTED]> To: "'Jason Haar'" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Sent: Thursday, May 02, 2002 5:49 PM Subject: RE: [Qmail-scanner-general]Klez Ahh ... But the beauty of it, is that you can reference the IP address against DHCP logs or radius logs or a list of static IP addresses and find the person really infected. I think as virus writers get more creative, the IP address will help more and more. I guess it really depends on how you're handling it from an administrative point. Been there, done that. I went through messages in the quarantine directory and piced out IP addresses and stopped quite a few Klez infections that way. It has merit. _______________________________________________________________ Have big pipes? SourceForge.net is looking for download mirrors. We supply the hardware. You get the recognition. Email Us: [EMAIL PROTECTED] _______________________________________________ Qmail-scanner-general mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
