nanog mailing list archives
Re: other virus damages/costs.....(hello skynet.be ?)
From: Todd Vierling <tv () duh org>
Date: Mon, 2 Feb 2004 13:40:28 -0500 (EST)
On Mon, 2 Feb 2004, Randy Bush wrote: : # MyDoom craziness : : : * ^Subject:.*(\ Actually, Mydoom has a very detectable signature. It has both X-Priority and X-MSMail-Priority headers, but *neither* a X-Mailer nor X-MimeOLE header. These conditions make, for instance, SpamAssassin catch the worm easily. Based on all the available mailboxes I can scan from here, such a check should kill only Mydoom [and some spam]. Rolled that into a milter, and poof! -- -- Todd Vierling <tv () duh org> <tv () pobox com>
Current thread:
- other virus damages/costs.....(hello skynet.be ?) Mike Tancsa (Feb 02)
- Re: other virus damages/costs.....(hello skynet.be ?) Stephen J. Wilcox (Feb 02)
- Re: other virus damages/costs.....(hello skynet.be ?) jlewis (Feb 02)
- Re: other virus damages/costs.....(hello skynet.be ?) Valdis . Kletnieks (Feb 02)
- Re: other virus damages/costs.....(hello skynet.be ?) Matthew Sullivan (Feb 02)
- Re: other virus damages/costs.....(hello skynet.be ?) Valdis . Kletnieks (Feb 02)
- Re: other virus damages/costs.....(hello skynet.be ?) Randy Bush (Feb 02)
- Re: other virus damages/costs.....(hello skynet.be ?) Todd Vierling (Feb 02)