Re: ATTACK TO MY SYSTEM

2003-09-23 Thread R. Joseph Newton
Matthew Harrison wrote: > no to create more spam with spam but in the last two days, the company > I work for has recieved: > > 798 You may have received one or two if you were subscribed. If so, they offered only information and a link to a page on the M$ website where information about a secur

RE: OT: RE: ATTACK TO MY SYSTEM

2003-09-23 Thread Dan Muey
> > I'd be interested to see how that works. Would you mind sharing? > Actually if I ever get around to it I'll be putting in a module. Keep watching http://search.cpan.org/author/DMUEY/ Nothing there now but soon, very soonyes my preciou > -Dan > > On Tue, 2003-09-23 at 17:05, Dan Mu

RE: OT: RE: ATTACK TO MY SYSTEM

2003-09-23 Thread Dan Anderson
I'd be interested to see how that works. Would you mind sharing? -Dan On Tue, 2003-09-23 at 17:05, Dan Muey wrote: > No thanks. I have a 99.9% fool proof system. > > Any email comes in and the sender is sent a notice to verify them selves. > Which they do via a web based form then it is passed

RE: OT: RE: ATTACK TO MY SYSTEM

2003-09-23 Thread Dan Muey
No thanks. I have a 99.9% fool proof system. Any email comes in and the sender is sent a notice to verify them selves. Which they do via a web based form then it is passed on. -That way autoreply functions don't automatically verify them. - what about submitting the form automatica

RE: OT: RE: ATTACK TO MY SYSTEM

2003-09-23 Thread Dan Anderson
> Don't 'Automatically' do anythign! There will be exploits and people > will find them. You need an example? Think Microsoft. If there was > no Microsoft there'd be no viruses. > > And what if a virus is behind the the server? Then you might whitelist > Virus and other evil addresses. Example:

RE: OT: RE: ATTACK TO MY SYSTEM

2003-09-23 Thread Dan Muey
> If you want to create a good filter solution do the following: > > 1. Automatically create whitelists -- when anyone from behind > your server sends out a message add the e-mail being sent to > to the whitelist. Then you know addresses which can be trusted. > Don't 'Automatically' do anythi

Re: OT: RE: ATTACK TO MY SYSTEM

2003-09-23 Thread Dan Anderson
If you want to create a good filter solution do the following: 1. Automatically create whitelists -- when anyone from behind your server sends out a message add the e-mail being sent to to the whitelist. Then you know addresses which can be trusted. 2. Filter all messages through something like

Re: ATTACK TO MY SYSTEM

2003-09-23 Thread Paul Johnson
On Tue, Sep 23, 2003 at 09:13:38AM -0500, Dan Muey wrote: > My most effective filter is to look for "September 2003, Cumulative Patch" > In the body and drop it, just fyi. So no point replying to this message then? -- Paul Johnson - [EMAIL PROTECTED] http://www.pjcj.net -- To unsubscribe, e-m

Re: ATTACK TO MY SYSTEM

2003-09-23 Thread Dan Anderson
Create a rule using your favorite mail client to delete all e-mails not addressed to your e-mail address (or any listservs you subscribe to). I've sent about a thousand spams to /dev/null today alone. :-D -Dan On Tue, 2003-09-23 at 05:13, german aracil boned wrote: > Please > >

Re: OT: RE: ATTACK TO MY SYSTEM

2003-09-23 Thread Daniel Staal
--On Tuesday, September 23, 2003 16:32 +0200 german aracil boned <[EMAIL PROTECTED]> wrote: Perl is the solution ;) I build an automatic system. This read mails from spam folder of my client, update a list with bad ip's (spamers) and update firewall with new ips. Now the attack to my system is v

Re: OT: RE: ATTACK TO MY SYSTEM

2003-09-23 Thread Jenda Krynicky
From: german aracil boned <[EMAIL PROTECTED]> > Perl is the solution ;) > > I build an automatic system. This read mails from spam folder of my > client, update a list with bad ip's (spamers) and update firewall with > new ips. Now the attack to my system is very small. I have more of > 1000 sende

RE: RE: ATTACK TO MY SYSTEM

2003-09-23 Thread Dan Muey
> > > > That reminds me Jenda, I've keep getting mail from you, > > I've been meaning to talk to you about that! > > > > > > For those of you who don't get that you simply must check out > > the Mail::Sender module. It's awesome! Oh and this might help > > explain my little sarcasm bit

Re: OT: RE: ATTACK TO MY SYSTEM

2003-09-23 Thread german aracil boned
Perl is the solution ;) I build an automatic system. This read mails from spam folder of my client, update a list with bad ip's (spamers) and update firewall with new ips. Now the attack to my system is very small. I have more of 1000 senders checked and with reyect connections to port 25. tha

OT: RE: ATTACK TO MY SYSTEM

2003-09-23 Thread Wiggins d'Anconia
On Tue, 23 Sep 2003 09:11:58 -0500, "Dan Muey" <[EMAIL PROTECTED]> wrote: > > > That reminds me Jenda, I've keep getting mail from you, > I've been meaning to talk to you about that! > > > For those of you who don't get that you s

Re: ATTACK TO MY SYSTEM

2003-09-23 Thread George Schlossnagle
On Tuesday, September 23, 2003, at 06:04 AM, Jenda Krynicky wrote: From: german aracil boned <[EMAIL PROTECTED]> Please help. I don't send any virus ! Shhh. I bet you don't get as many as I do :-} Learn to live with it, as long as there are stupid people on the Net there will be mail worms.

RE: ATTACK TO MY SYSTEM

2003-09-23 Thread Dan Muey
So what version of Perl are you runnign with with this? What do you mean what does that have to do with anythign? :) My most effective filter is to look for "September 2003, Cumulative Patch" In the body and drop it, just fyi. HTH DMuey > Please > > I have an important attack in my system! > I

RE: ATTACK TO MY SYSTEM

2003-09-23 Thread Dan Muey
> > Please help. I don't send any virus ! > > Shhh. I bet you don't get as many as I do :-} > That reminds me Jenda, I've keep getting mail from you, I've been meaning to talk to you about that! For those of you who don't get that you simply must check out the Mail::Send

RE: ATTACK TO MY SYSTEM

2003-09-23 Thread David J. Taylor
This is a little OT isn't it? A security forum might be of moore help. Eg [EMAIL PROTECTED] Best regards David Taylor Network Architect Routed Solutions Ph : +612 8920 9652 Mo : +614 1407 2098 Email : [EMAIL PROTECTED] WWW : www.routedsolutions.com.au -Original Message- From: german ara

Re: ATTACK TO MY SYSTEM

2003-09-23 Thread Matthew Harrison
no to create more spam with spam but in the last two days, the company I work for has recieved: 798 microsoft support emails, and we only have about 10 active email accounts on that domain. I am using an OpenBSD port (mail/bmf) to filter them out. On Tue, Sep 23, 2003 at 12:04:57PM +0200, Jenda

Re: ATTACK TO MY SYSTEM

2003-09-23 Thread Jenda Krynicky
From: german aracil boned <[EMAIL PROTECTED]> > Please > > I have an important attack in my system! > I received many mails from many nets! with virus attachment. > I don't have virus in my unix system. But people send mails with my > mail address. Please see mail's header. It's not from my system