From owner-freebsd-hackers@FreeBSD.ORG Mon Mar 1 11:43:15 2004 Return-Path: Delivered-To: freebsd-hackers@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 3852016A4CE for ; Mon, 1 Mar 2004 11:43:15 -0800 (PST) Received: from ion.gank.org (ion.gank.org [69.55.238.164]) by mx1.FreeBSD.org (Postfix) with ESMTP id EF25243D1D for ; Mon, 1 Mar 2004 11:43:14 -0800 (PST) (envelope-from craig@tobuj.gank.org) Received: from localhost (ion.gank.org [69.55.238.164]) by ion.gank.org (mail) with ESMTP id 37F602B301 for ; Mon, 1 Mar 2004 13:43:14 -0600 (CST) Received: from ion.gank.org ([69.55.238.164]) by localhost (ion.gank.org [69.55.238.164]) (amavisd-new, port 10024) with LMTP id 73159-03 for ; Mon, 1 Mar 2004 13:43:13 -0600 (CST) Received: from owen1492.uf.corelab.com (pix.corelab.com [12.45.169.2]) by ion.gank.org (mail) with ESMTP id F10532B2E6 for ; Mon, 1 Mar 2004 13:43:12 -0600 (CST) From: Craig Boston To: freebsd-hackers@freebsd.org Date: Mon, 1 Mar 2004 13:43:07 -0600 User-Agent: KMail/1.6 References: <20040301032856.GA10110@xor.obsecurity.org> In-Reply-To: MIME-Version: 1.0 Content-Disposition: inline Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Message-Id: <200403011343.08007.craig@tobuj.gank.org> X-Virus-Scanned: by amavisd-new at gank.org Subject: Re: SPAM/virii apparently from freeBSD addresses. X-BeenThere: freebsd-hackers@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Technical Discussions relating to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 01 Mar 2004 19:43:15 -0000 On Monday 01 March 2004 10:53 am, Dag-Erling Sm=F8rgrav wrote: > Swen and MyDoom are easy to detect and reject at the SMTP stage. The > fact that our mail servers don't do this is a PITA, as it forces list > subscribers to accept them as well (if you reject list mail because it > contains a virus, Mailman disables your subscription) Most of the Swens I get don't come from the list servers but are sent to my= =20 subscription address directly (probably grabbed from posts to the list). I have a separate address for each list to make sorting easier. When I set= up=20 freebsd-hackers, I was getting Swen sent to me within an hour of posting to= =20 the list for the first time. I filter it but it still wastes bandwidth... Craig