[rt-devel] Be careful with blacklists... [fwd] SirCam Virus Spam Worm Alert (from: goeschler@cybercom.at)

Jesse Vincent jesse at bestpractical.com
Wed Sep 26 17:51:42 EDT 2001


Cybercom.at seems to be running a filter much like bob's that seems to have
matched on "I send you this file...."

----- Forwarded message from root <goeschler at cybercom.at> -----

Return-Path: <rt-devel-admin at lists.fsck.com>
Delivered-To: j at pallas.eruditorum.org
Received: from pallas.eruditorum.org (localhost [127.0.0.1])
	by pallas.eruditorum.org (Postfix) with ESMTP id C3A8E112B2
	for <jesse at bestpractical.com>; Wed, 26 Sep 2001 17:50:02 -0400 (EDT)
Delivered-To: rt-devel-admin at pallas.eruditorum.org
Received: from wbs2.cybercom.at (wbs2.cybercom.at [195.58.162.234])
	by pallas.eruditorum.org (Postfix) with ESMTP id CA1A2112B2
	for <rt-devel-admin at lists.fsck.com>; Wed, 26 Sep 2001 17:46:02 -0400 (EDT)
Received: (from root at localhost)
	by wbs2.cybercom.at (8.11.2/8.11.1) id f8QLjhh17050;
	Wed, 26 Sep 2001 23:45:43 +0200
Date: Wed, 26 Sep 2001 23:45:43 +0200
From: root <goeschler at cybercom.at>
Message-Id: <200109262145.f8QLjhh17050 at wbs2.cybercom.at>
To: rt-devel-admin at lists.fsck.com
References: <15282.19364.254754.31454 at moria.nas.com>
In-Reply-To: <15282.19364.254754.31454 at moria.nas.com>
Precedence: junk
Subject: SirCam Virus Spam Worm Alert
Sender: rt-devel-owner at lists.fsck.com
Errors-To: rt-devel-owner at lists.fsck.com
X-BeenThere: rt-devel at lists.fsck.com
X-Mailman-Version: 2.0beta5
List-Id: RT Development <rt-devel.lists.fsck.com>

Your computer is infected with the SirCam worm. Please see
http://www.wired.com/news/technology/0,1282,45427,00.html for more information.



----- End forwarded message -----

-- 
http://www.bestpractical.com/products/rt  -- Trouble Ticketing. Free.




More information about the Rt-devel mailing list