[802SEC] how to keep KLEZ virus email off your reflectors
Carl,
Two things:
(1) Ban messages including "Content-Type: text/html;" by adding
"/Content-Type: text\/html;/"
to your taboo_body list. My reflectors can get a dozen of these in a
day; they all get bounced to the list owner.
(2) Ban messages from virus-admin@ieee.org by adding "/virus-admin/"
to your taboo_headers list. I have asked IEEE IT to stop sending
these notices to the list, but they said they couldn't help ["Virus
notification is sent by the mail system and does not have a feature
to control this going to any mailing list or individual email
account."] However, the method I've suggested works as well.
Roger
At 10:44 AM -0400 02/05/01, Stevenson, Carl R (Carl) wrote:
>Seems we still hve virus problems coming into
>the reflectors ...
>
>This one came through the regs reflector ...
>
>What do we do?
>
>Carl
>
>
>> -----Original Message-----
> > From: virus-admin@ieee.org [mailto:virus-admin@ieee.org]
>> Sent: Wednesday, May 01, 2002 10:31 AM
>> To: stds-802-regs@ieee.org
>> Subject: REGS/ Virus Alert
>>
>>
>>
> > InterScan has detected a virus WORM_KLEZ.H in the file (by)
> > in the mail traffic sent to you by smoghe@verizon.net