From owner-freebsd-security Mon Oct 29 8:40:55 2001 Delivered-To: freebsd-security@freebsd.org Received: from straylight.ringlet.net (sentinel.office1.bg [217.75.129.210]) by hub.freebsd.org (Postfix) with SMTP id 9BCC037B408 for ; Mon, 29 Oct 2001 08:40:50 -0800 (PST) Received: (qmail 4782 invoked by uid 1000); 29 Oct 2001 17:40:35 -0000 Date: Mon, 29 Oct 2001 19:40:35 +0200 From: Peter Pentchev To: Brett Glass Cc: Nils Holland , postmaster@daimi.au.dk, security@FreeBSD.ORG Subject: Re: VIRUS IN YOUR MAIL Message-ID: <20011029194035.B584@straylight.oblivion.bg> Mail-Followup-To: Brett Glass , Nils Holland , postmaster@daimi.au.dk, security@FreeBSD.ORG References: <20011029165515.L869-100000@jodie.ncptiddische.net> <200110291510.f9TFAuo25848@horse10.daimi.au.dk> <20011029165515.L869-100000@jodie.ncptiddische.net> <20011029190440.A584@straylight.oblivion.bg> <4.3.2.7.2.20011029093339.045f1520@localhost> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <4.3.2.7.2.20011029093339.045f1520@localhost>; from brett@lariat.org on Mon, Oct 29, 2001 at 09:35:19AM -0700 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Mon, Oct 29, 2001 at 09:35:19AM -0700, Brett Glass wrote: > At 10:04 AM 10/29/2001, Peter Pentchev wrote: > > >The problem is not virus scanners per se, the problem is *broken* virus > >scanners which do not send their automated replies to the right address. > > IMHO, it's a good idea, when a worm has been broadcast to a list, to > inform the members of that list. In my personal experience, this has > saved a lot of people from being infected. YMMV, but I don't think that > the scanner's behavior was inappropriate. It all depends on the dosage; I suppose you would not think that it would be a good thing for somebody to be able to DoS a list by sending a little virus and firing off 250 autoresponders? G'luck, Peter -- I had to translate this sentence into English because I could not read the original Sanskrit. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message