Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 05 May 2000 09:25:46 +0000
From:      Matthew Seaman <m.seaman@inpharmatica.co.uk>
To:        Taavi Talvik <taavi@uninet.ee>
Cc:        Jeremiah Gowdy <jgowdy@home.com>, Matthew Dillon <dillon@apollo.backplane.com>, Lloyd Rennie <lloyd@vbc.net>, hackers@FreeBSD.ORG
Subject:   Re: ILOVEYOU
Message-ID:  <3912939A.9EEC1879@inpharmatica.co.uk>
References:  <Pine.BSF.3.95.1000504205419.26609A-100000@ns.uninet.ee>

next in thread | previous in thread | raw e-mail | index | archive | help
Taavi Talvik wrote:
> 
> On Thu, 4 May 2000, Jeremiah Gowdy wrote:
> 
> > > Yes, it was real virus and quite nasty one. Which remainds us,
> > > that quite soon we cannot live without freebsd naitive virus
> > > scanning engine. Such things don't spread so easily, when ISPs
> > > are able to scan e-mail and other content they serve.
> 
> > lol.  The only way you could really have a virus in freebsd is if it was
> > launched or infected as root.  Otherwise the virus would be VERY limited.
> > If you are talking about scanning incoming email for viruses/scripts that
> > were destined for Windows computers, ok, I'd say that's not a bad idea.
> 
> Yes, I was talking about virus scanning on behalf of Windows users.
> Anyway, most files, emails, web pages are served or pass through
> unix (and quite often *BSD) systems. There seems to be program
> called AMAVIS (http://satan.oih.rwth-aachen.de/AMaViS/amavis.html), which
> can do some scanning. It probably needs some investigation and
> freebsd porting.

BTDT.  Grab procmail out of ports, and wander along to
ftp://ftp.rubyriver.com/pub/jhardin/antispam/procmail-security.html for some
pre-canned recipies that will block e-mails with this infection.

Worked perfectly here.

	Matthew

-- 
           Certe, Toto, sentio nos in Kansate non iam adesse.

   Dr. Matthew Seaman, Inpharmatica Ltd, 60 Charlotte St, London, W1P 2AX
            Tel: +44 171 631 4644 x229  Fax: +44 171 631 4844


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-hackers" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3912939A.9EEC1879>