From owner-freebsd-hackers@FreeBSD.ORG Mon Jan 26 16:02:52 2004 Return-Path: Delivered-To: freebsd-hackers@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 5E1BD16A4D4 for ; Mon, 26 Jan 2004 16:02:52 -0800 (PST) Received: from malasada.lava.net (malasada.lava.net [64.65.64.17]) by mx1.FreeBSD.org (Postfix) with ESMTP id CB70E43D9F for ; Mon, 26 Jan 2004 16:01:38 -0800 (PST) (envelope-from cliftonr@lava.net) Received: by malasada.lava.net (Postfix, from userid 102) id 17008154741; Mon, 26 Jan 2004 13:58:21 -1000 (HST) Date: Mon, 26 Jan 2004 13:58:20 -1000 From: Clifton Royston To: hackers@freebsd.org Message-ID: <20040126135820.E20430@tikitechnologies.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5.1i X-Mailman-Approved-At: Tue, 27 Jan 2004 05:29:37 -0800 Subject: Yes, send-pr results in virus emails X-BeenThere: freebsd-hackers@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Technical Discussions relating to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 27 Jan 2004 00:02:52 -0000 OK, on January 23 I sent in a PR from a development-only machine using the send-pr command. This machine happens to actually receive mail because I'm testing mail server software on it, but I have never used it to send mail, and I have never gotten mail on that machine other than via sending test messages to myself. So this address did *not* exist in anybody's address book before I sent a PR from it, OK? About 8 minutes after the PR acknowledgment from GNATS I got the first virus response of Worm/Gibe.F, originating from cpe-138-217-67-84.vic.bigpond.net.au [138.217.67.84]. I've totalled 20 virus emails in the past few days, from around the world. Not horrendous, but annoying and "bad press". I don't think there need be any more doubt that PRs are being forwarded to virus-infected clients. I have no idea who to take this up with, but I would really appreciate it if somebody could track these folks down and unsubscribe them until they can get their machines cleaned up. Rather than harass all the readers with the list, I've compiled one and I'll send it to an appropriate administrator for the PR list when I find one. -- Clifton -- Clifton Royston -- cliftonr@tikitechnologies.com Tiki Technologies Lead Programmer/Software Architect Did you ever fly a kite in bed? Did you ever walk with ten cats on your head? Did you ever milk this kind of cow? Well we can do it. We know how. If you never did, you should. These things are fun, and fun is good. -- Dr. Seuss