Re: My initiative to detect worms that send spam

2004-06-12 Thread Dan Aloni
On Thu, Jun 10, 2004 at 12:55:04AM +0300, David Harel wrote: > Some time ago I asked this group about an idea of mine to track smtp > activity. >[snip] > The program /usr/local/mozilla/mozilla-bin pid 15914 > sends SMTP message using tcp Protocol to > Remote_Address 212.117.129.230 Very nice.

RE: My initiative to detect worms that send spam

2004-06-10 Thread Kovriga, Gregory
June 10, 2004 11:30 AM To: Linux-IL mailing list Subject: Re: My initiative to detect worms that send spam Hi, Kovriga, Gregory wrote: >Hi, >couldn't you get the same logging capabilities by closing outgoing SMTP >connections (using iptables) for users other than "smtp" a

Re: My initiative to detect worms that send spam

2004-06-10 Thread David Harel
dida Sent: Thursday, June 10, 2004 3:18 AM To: 'David Harel'; 'Linux-IL mailing list' Subject: RE: My initiative to detect worms that send spam I think it's a nice idea. Might I suggest a similar solution that seems to me more airtight. If you already have access to the s

RE: My initiative to detect worms that send spam

2004-06-09 Thread Kovriga, Gregory
L PROTECTED] On Behalf Of Tzahi Fadida Sent: Thursday, June 10, 2004 3:18 AM To: 'David Harel'; 'Linux-IL mailing list' Subject: RE: My initiative to detect worms that send spam I think it's a nice idea. Might I suggest a similar solution that seems to me more airtight. If you

RE: My initiative to detect worms that send spam

2004-06-09 Thread Tzahi Fadida
I think it's a nice idea. Might I suggest a similar solution that seems to me more airtight. If you already have access to the smtp machine you might consider filtering all newly arriving mails to a temorary folder and your warning email that you send to the client will include a confirmation hyper