Re: Security risk or weird spam?

On Wednesday 05 May 2004 18:09, you wrote:
> I use postfix, spamassassin, amavisd-new what is the easiest way to block
> the email messages that say such and such a user sent a virus to xyz
> company, since most of the virus messages are spoofed anyways.
>
>
>
>
>
> Jim
>
>
>

I figured it was probably some kind of trick. Does it mean people are
sending out viruses with my name on them? That really ticks me off. (But I
suppose it happens to everybody these days.)

Vaughn

>
>
> ----- Original Message -----
> From: tickticker <tickticker@cox.net>
> Date: Wed, 5 May 2004 13:31:30 -0700
> To: plug-discuss@lists.plug.phoenix.az.us
> Subject: Re: Security risk or weird spam?
>
> > Virus fallout. You are just another innocent victim of bad email
> > administration. Delete them and move on.
> >
> > anthony
> >
> > On Wednesday 05 May 2004 10:43 am, Vaughn Treude wrote:
> > > Another dumb question, this time for the security types:
> > >
> > > Recently I've been getting messages like the following. I did not send
> > > either of the original messages these reference, especially not at 1 AM
> > > and 4 AM in the morning. Stranger yet is that the first message says I
> > > sent an email to my remailer (vaughn@nakota-software.com) which was
> > > (wisely) rejected by that service. I'm not knowingly using ".cpl"
> > > attachments; isn't this a Windows thing? And I definitely didn't
> > > (intentionally) send anything to the Russian address in the second
> > > message. Any ideas?
> > >
> > > Vaughn
> > >
> > > ---------- Forwarded Message ----------
> > > Subject: Mail delivery failed: returning message to sender
> > > Date: Wed, 05 May 2004 01:17:20 -0700
> > > From: Mail Delivery System <Mailer-Daemon@suvi.deru.net>
> > > To: vltreude@deru.com
> > >
> > >
> > > This message was created automatically by mail delivery software.
> > >
> > > A message that you sent could not be delivered to one or more of its
> > > recipients. This is a permanent error. The following address(es)
> > > failed:
> > >

> > >   vaughn@nakota-software.com
> > >     This message has been rejected because it has
> > >     a potentially executable attachment "Joke.cpl"
> > >     This form of attachment has been used by
> > >     recent viruses or other malware.
> > >     If you meant to send this file then please
> > >     package it up as a zip file and resend it.

> > >
> > >
> > > ---------- Forwarded Message ----------
> > > Subject: Returned mail: User unknown
> > > From: Mail Delivery Subsystem <MAILER-DAEMON@aol.com>
> > > To: <vaughn@nakota-software.com>
> > > Date: Wed, 5 May 2004 04:19:06 -0400 (EDT)
> > >
> > > from m6.arctel.ru [195.14.62.6]
> > >
> > >
> > > *** ATTENTION ***
> > >
> > > Your e-mail is being returned to you because there was a problem with
> > > its delivery. The address which was undeliverable is listed in the
> > > section labeled: "----- The following addresses had permanent fatal
> > > errors -----".
> > >
> > > The reason your mail is being returned to you is listed in the section
> > > labeled: "----- Transcript of Session Follows -----".
> > >
> > > The line beginning with "<<<" describes the specific reason your e-mail
> > > could not be delivered. The next line contains a second error message
> > > which is a general translation for other e-mail servers.
> > >
> > > Please direct further questions regarding this message to your e-mail
> > > administrator.
> > >
> > > --AOL Postmaster
> > > ---------------------------------------------------
> > > PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us
> > > To subscribe, unsubscribe, or to change you mail settings:
> > > http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
> >
> > ---------------------------------------------------
> > PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us
> > To subscribe, unsubscribe, or to change you mail settings:
> > http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
---------------------------------------------------
PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us
To subscribe, unsubscribe, or to change you mail settings:
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss