I use postfix, spamassassin, amavisd-new what is the easiest way to block the email messages that say such and such a user sent a virus to xyz company, since most of the virus messages are spoofed anyways.
Jim
----- Original Message -----
From: tickticker <
tickticker@cox.net>
Date: Wed, 5 May 2004 13:31:30 -0700
To:
plug-discuss@lists.plug.phoenix.az.us
Subject: Re: Security risk or weird spam?
> Virus fallout. You are just another innocent victim of bad email
> administration. Delete them and move on.
>
> anthony
>
> On Wednesday 05 May 2004 10:43 am, Vaughn Treude wrote:
> > Another dumb question, this time for the security types:
> >
> > Recently I've been getting messages like the following. I did not send
> > either of the original messages these reference, especially not at 1 AM and
> > 4 AM in the morning. Stranger yet is that the first message says I sent an
> > email to my remailer (vaughn@nakota-software.com) which was (wisely)
> > rejected by that service. I'm not knowingly using ".cpl" attachments;
> > isn't this a Windows thing? And I definitely didn't (intentionally) send
> > anything to the Russian address in the second message. Any ideas?
> >
> > Vaughn
> >
> > ---------- Forwarded Message ----------
> > Subject: Mail delivery failed: returning message to sender
> > Date: Wed, 05 May 2004 01:17:20 -0700
> > From: Mail Delivery System <Mailer-Daemon@suvi.deru.net>
> > To: vltreude@deru.com
> >
> >
> > This message was created automatically by mail delivery software.
> >
> > A message that you sent could not be delivered to one or more of its
> > recipients. This is a permanent error. The following address(es) failed:
> >
> > vaughn@nakota-software.com
> > This message has been rejected because it has
> > a potentially executable attachment "Joke.cpl"
> > This form of attachment has been used by
> > recent viruses or other malware.
> > If you meant to send this file then please
> > package it up as a zip file and resend it.
> >
> >
> > ---------- Forwarded Message ----------
> > Subject: Returned mail: User unknown
> > From: Mail Delivery Subsystem <MAILER-DAEMON@aol.com>
> > To: <vaughn@nakota-software.com>
> > Date: Wed, 5 May 2004 04:19:06 -0400 (EDT)
> >
> > from m6.arctel.ru [195.14.62.6]
> >
> >
> > *** ATTENTION ***
> >
> > Your e-mail is being returned to you because there was a problem with its
> > delivery. The address which was undeliverable is listed in the section
> > labeled: "----- The following addresses had permanent fatal errors -----".
> >
> > The reason your mail is being returned to you is listed in the section
> > labeled: "----- Transcript of Session Follows -----".
> >
> > The line beginning with "<<<" describes the specific reason your e-mail
> > could not be delivered. The next line contains a second error message
> > which is a general translation for other e-mail servers.
> >
> > Please direct further questions regarding this message to your e-mail
> > administrator.
> >
> > --AOL Postmaster
> > ---------------------------------------------------
> > PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us
> > To subscribe, unsubscribe, or to change you mail settings:
> > http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
> ---------------------------------------------------
> PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us
> To subscribe, unsubscribe, or to change you mail settings:
> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
--
______________________________________________
Check out the latest SMS services @
http://www.linuxmail.org
This allows you to send and receive SMS through your mailbox.
Powered by Outblaze
---------------------------------------------------
PLUG-discuss mailing list -
PLUG-discuss@lists.plug.phoenix.az.us
To subscribe, unsubscribe, or to change you mail settings:
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
(text/plain)