nanog mailing list archives

Re: Google?


From: Nils Ketelsen <nils.ketelsen () kuehne-nagel com>
Date: Mon, 26 Jul 2004 13:55:23 -0400


On Mon, Jul 26, 2004 at 05:56:14PM +0100, Pendergrass, Greg wrote:


Some say it's a new version of mydoom:

http://isc.sans.org/diary.php?isc=d46940064182f61f40ca333bc3c2f439

And it seems google has updated the filter a little. Now
searches for "email+<domainname>" seem to fail. The filter for
everything containing mail produced a few more false positives
then expected, I guess (Well I actually guessed nobody thought about the
possibility of false positives while implementing in a rush, which
is why I love those rush filters so much).


And then there was the user filtering (case insensitive) for
v.*i.*a.*g.*r.*a ... does a good job on receiving less mail.

Nild


Current thread: