Re: CRIME WORM_Sobig.A blocked but dealing with the residual address...

From: Tim Kramer (kramert@private)
Date: Mon Jan 20 2003 - 10:30:26 PST

  • Next message: Andrew Plato: "RE: CRIME WORM_Sobig.A blocked but dealing with the residual address..." 

    > My servers have been consistently visited by our new best friend
> "WORM_Sobig.A." Fortunately, our Filtering software has been able to
> block it. We are able to strip the attached file and all the contents
> but we are still receiving email from various IP hosts claiming to be
> "big@private". Any idea how I can filter this?
>
> I am unable to filter the address since the IP addresses are most likely
> forged and the sender addresses are constantly changing.

Which mail server are you using?

    This archive was generated by hypermail 2b30 : Mon Jan 20 2003 - 11:48:31 PST