[Mimedefang] Blocking IP #

[Jason Gurtz]

On 5/5/2005 12:40, David F. Skoll wrote:

> It's probably small companies and home users who are suffering from
> this one.  (Is Sober.P coming in as a Windows executable?  I don't have
> any samples -- I haven't bothered quarantining viruses for months now.
> I still can't fathom why any organization running Windows would even
> entertain the notion of permitting executables in via e-mail.)

Unfortunately, it's arriving as a zip file with a malware.txt        .pif
inside.  (was it netsky that had a similar trick?)

I'm entertaining the thought of just disallowing all archives now (too)
and forcing the lusers to use yousendit.com or something.  I suppose it's
only a matter of time before we have rar, ace, 7z, gz, bz2 etc... worms in
addition to the zip ones.

from the mimefield,

~Jason

--