[Top][All Lists]
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[OT] spam and worms
From: |
Han-Wen Nienhuys |
Subject: |
[OT] spam and worms |
Date: |
Wed, 3 Mar 2004 11:46:22 +0100 |
address@hidden writes:
> This trick doesn't seem to help, the ip:s seem to be faked somehow... each
> worm-infected message has a unique ip which its headers says it comes from.
Unfortunately, switching off the attachments hasn't really worked, and
in the meantime the traffic is only increasing.
A solution that I *can* offer to everyone is a small script, available
from
http://www.xs4all.nl/~hanwen/public/software/filter-zips.py
it will scan through a message looking for .exe, .pif and .scr files,
and looks inside .zips. It will mark suspicious messages with
X-Filter-Zip-Scanned: suspect
It has caught 91 copies of this particular worm since yesterday afternoon.
--
Han-Wen Nienhuys | address@hidden | http://www.xs4all.nl/~hanwen