From owner-freebsd-isp Wed Jul 25 14:24:20 2001 Delivered-To: freebsd-isp@freebsd.org Received: from bilver.wjv.com (dhcp-1-157.n01.orldfl01.us.ra.verio.net [157.238.210.157]) by hub.freebsd.org (Postfix) with ESMTP id 40E5737B403 for ; Wed, 25 Jul 2001 14:24:14 -0700 (PDT) (envelope-from bill@bilver.wjv.com) Received: (from bill@localhost) by bilver.wjv.com (8.11.1/8.11.1) id f6PLN3M32810; Wed, 25 Jul 2001 17:23:03 -0400 (EDT) (envelope-from bill) Date: Wed, 25 Jul 2001 17:22:49 -0400 From: Bill Vermillion To: Wm Brian McCane Cc: freebsd-isp@FreeBSD.ORG Subject: Re: Possible spammers with a virus Message-ID: <20010725172249.A32786@wjv.com> Reply-To: bv@wjv.com References: <6335845483.20010725211659@buz.ch> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: ; from root@mccons.maxbaud.net on Wed, Jul 25, 2001 at 03:55:07PM -0500 Organization: W.J.Vermillion / Orlando - Winter Park Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Wed, Jul 25, 2001 at 03:55:07PM -0500, Wm Brian McCane thus sprach: > Okay, this might sound odd, but I just got a bunch of virusalerts from > amavis-perl. None of the people that the messages are from have EVER sent > me email that I know of, nor have I corresponded with them. Is it > possible that these are spammers that got hit with SirCAM and sent to > everyone in their mailing lists? The way I understand SirCAM is that it picks random names and subject lines from an infected machine and then starts the whole process anew on the next machine. That's makes in unpredictable as to who will get, and there is no common subject line either. -- Bill Vermillion - bv @ wjv . com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message