[Mimedefang] Blocking IP #

[Joseph Brennan]

--On Thursday, May 5, 2005 12:05 -0400 Chris Gauch <cgauch at digicon.net> 
wrote:

> A particular client of ours has only 5 accounts on his own Sendmail SMTP
> server and threw out 300,000 instances of Sober.P yesterday.  We have
> thousands of accounts on our server that does about 1 million messages/day
> and we threw out roughly 16,000 Sober.P messages yesterday (which is
> definitely 100x the amount of viruses that we normally discard on any
> given day).  The client's mail server is running an ancient version of
> Sendmail and is poorly configured, so I'm sure that has something to do
> with the number of viruses his server must deal with and discard.


We had 250,000 Monday, 490,000 Tuesday, and 452,000 Wednesday.

The distribution of the attack may be strange.  This is the largest
email virus outbreak we have ever seen here, but it's not making the
news media.  Has this become a dog bites man story, or are we really
getting more than most places?

Anyway it is not because of ancient server software :-)

Joseph Brennan
Academic Technologies Group, Academic Information Systems (AcIS)
Columbia University in the City of New York