[Mimedefang] Latest Worms and IE Exploits

[Gordon Henderson]

On Fri, 19 Sep 2003, David F. Skoll wrote:

> On Fri, 19 Sep 2003, Royce Williams wrote:
>
> > Getting a number of inbounds that match the description of Gibe/Swen.A
> > but that aren't being picked up by ClamAV yet.  I can't say that I'm
> > getting hit hard, but it's significant enough that a couple of them
> > showed up in my own inbox.
>
> I have seen nothing in my inbox, and I don't run an AV scanner.  The
> extension-blocking rule (exe, pif, scr, etc.) catches everything so far.
>
> Are there really any good reasons to allow these kinds of attachments in?
> Just curious as to why anyone (who runs Windows) would possibly want to
> allow them in.

Hey, I've got this cool screensaver with the latest hot chicks on it, I'll
just email it to all my mates...

Who needs viruses when you have lusers like that. These people are
unfortunately real and it's their own stupidity we're protecting
themselves from.

Sometimes I wonder why I should bother.

Anyway, the sendmail upgrade went OK for me and I'm running Sophos which
seems to work just fine. Not seeing that many Gibe-F's so far, though.
Sophos has the patch for it since Thursday afternoon. (And they've
released 4 more for other viruses since then) I've got some crude but
effective scripts for auto getting the Sophos stuff if you are on their
mailing list - drop me a line if anyone wants it.

Gordon