Re: [MailServer Notification]To Recipient virus found and action taken.

From: Russell Coker (russellat_private)
Date: Mon Jun 30 2003 - 17:15:11 PDT

  • Next message: Russell Coker: "Re: [MailServer Notification]To Recipient virus found and action taken."

    On Tue, 1 Jul 2003 10:04, Antony Stone wrote:
    > On Tuesday 01 July 2003 12:54 am, Russell Coker wrote:
    > > Guys, what's going on here?
    > >
    > > Are these messages really originating with you as they claim or are they
    > > getting @wirex.com tacked on the end of the address?
    >
    > The Sobig virus spoofs the sender address, so what you see is not where it
    > appears to be from.
    
    Yes, we all know that.
    
    However those "notifications" about viruses are coming from mail.wirex.com.  
    Either a wirex server is running an anti-virus program and spamming their own 
    list, or their list server is obscuring the real origin of the messages.
    
    In either case they have to fix it.
    
    -- 
    http://www.coker.com.au/selinux/   My NSA Security Enhanced Linux packages
    http://www.coker.com.au/bonnie++/  Bonnie++ hard drive benchmark
    http://www.coker.com.au/postal/    Postal SMTP/POP benchmark
    http://www.coker.com.au/~russell/  My home page
    
    _______________________________________________
    linux-security-module mailing list
    linux-security-moduleat_private
    http://mail.wirex.com/mailman/listinfo/linux-security-module
    



    This archive was generated by hypermail 2b30 : Mon Jun 30 2003 - 17:16:06 PDT