From owner-freebsd-security  Fri Jun 22  0:28: 8 2001
Delivered-To: freebsd-security@freebsd.org
Received: from sentry.granch.com (sentry.granch.com [212.109.197.55])
	by hub.freebsd.org (Postfix) with ESMTP id DD90437B408
	for <freebsd-security@freebsd.org>; Fri, 22 Jun 2001 00:28:01 -0700 (PDT)
	(envelope-from shelton@sentry.granch.com)
Received: (from shelton@localhost)
	by sentry.granch.com (8.11.4/8.11.3) id f5M7RbF09559;
	Fri, 22 Jun 2001 14:27:37 +0700 (NOVST)
	(envelope-from shelton)
Content-Type: text/plain;
  charset="koi8-r"
From: "Rashid N. Achilov" <shelton@sentry.granch.ru>
Organization: Granch Ltd.
To: faSty <fasty@i-sphere.com>
Subject: Re: need help filter this stupid virus. Sendmail didnt stop this.
Date: Fri, 22 Jun 2001 14:27:37 +0700
X-Mailer: KMail [version 1.2]
References: <20010620152023.C19358@i-sphere.com>
In-Reply-To: <20010620152023.C19358@i-sphere.com>
Cc: freebsd-security@freebsd.org
MIME-Version: 1.0
Message-Id: <01062214273702.09378@sentry.granch.com>
Content-Transfer-Encoding: 8bit
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

On Thursday 21 June 2001 05:20, you wrote:
> Hi there,
>
>  I need help, I tried filter on Sendmail to reject or discard when it
> match "From:hahaha@sexyfun.net" seem not success stop these stupid virus
> email and it kept coming back repeat like every 2 or 3 days.
>
> Here the full email header.
>
> From MAILER-DAEMON Wed Jun 20 14:50:40 2001
> Return-Path: <MAILER-DAEMON>
> Received: from oemcomputer (mewi1pool0-a3.midway.tds.net [208.166.196.132])
>         by i-sphere.com (8.11.3/8.11.3) with SMTP id f5KLoPT19225
>         for <techsupport@i-sphere.com>; Wed, 20 Jun 2001 14:50:26 -0700
> (PDT) Date: Wed, 20 Jun 2001 14:50:26 -0700 (PDT)

[...the way of the textripper...]

IMHO, you should include in /etc/mail/access midway.tds.net, nor 
hahaha@sexyfun.net

midway.tds.net		REJECT

-- 
   With Best Regards.
   Rashid N. Achilov (RNA1-RIPE), Web: http://granch.ru/~shelton
   Granch Ltd. system administrator, e-mail: achilov@granch.ru
   PGP: 83 CD E2 A7 37 4A D5 81 D6 D6 52 BF C9 2F 85 AF 97 BE CB 0A

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message