Hi, i'm a bit alerted. Up to now, messages containing windows executables didnt affect our users becouse all of them are english and users disgard them right away. neither did anyone ever respond to messages claiming to be from the ISP, since we are the ISP, and our support doesnt even speak english. Now i just saw a spike of spam/scam/ and virus messages in very well formed german. It's 200% spam all sudden. They all have a similar writing style, hence i assume they are from a single group trying to build up on german ground. We don't have clamav running (becouse of the mentioned low effect reason), should we start seting one up? Is there anything else that we should take care of in order to minimize the harm done by the likely comming waves? We're blocking IPs from dialups from countries no one receives mail here anyway. Should we start blocking dialups from our own country as well, or is it more likely that the spammers didnt change their source, but rather their target? I see an increase from actuall legitime senders, such as yahoo,gmx,gmail and a lot of midle size companies. I'm also looking into a 3rdparty who might be able to do the job for us, since i'm actually not the server admin, i just accidently happen to know unix. Yet i didnt find any trustworty company or organisation. Colorfull ads and closed source infrastructures dont realy convince me to trust my companys entire email trafic to someone.
-- best regards Arvid Ephraim Picciani Lead Software Engineer IB C SOLUTIONS LTD