Re: [Ipsec] !!! PLEASE STOP SPAMMING VIRUSES !!!

[Yoav Nir <ynir@checkpoint.com>]

I've seen such mails with viruses coming from people who use 'pine' on 
Solaris for their email.  It's not their fault.  I suppose the mail 
worm fakes the from address to an SMTP server to hide where the mail is 
sent from.

Take for example the latest "Incoming Message" from uri at lucent.com.  
Looking at full headers, I see this:

	from unknown(203.199.214.66) by nutshell.tislabs.com via csmap (V6.0) 
id srcAAAGRaaJA; Wed, 26 May 04 23:45:16 -0400

I can't dig up where 203.199.214.66 is, but that is more likely to be 
the compromised computer then any computer at Lucent.

On May 27, 2004, at 11:49 AM, Nicolas Saurbier wrote:

> Thanx,
>
> NIC
>
> --------------------------------------------
> Any e-mail message from Biodata Systems GmbH is sent in good faith but 
> shall neither be binding nor construed as constituting a commitment by 
> Biodata Systems GmbH except where provided for in a written agreement. 
> This e-mail is intended only for the use of the recipient(s) named 
> above. Any unauthorised disclosure, use or dissemination, either in 
> whole or in part, is prohibited. If you have received this e-mail in 
> error, please notify the sender immediately via e-mail and delete this 
> e-mail from your system.
> --------------------------------------------
>
> Biodata Systems GmbH is a specialist manufacturer of Information 
> Security products -This message has been scanned for all known viruses 
> by 'Biodata BIGApplication®'.
>
> _______________________________________________
> Ipsec mailing list
> Ipsec@ietf.org
> https://www1.ietf.org/mailman/listinfo/ipsec


_______________________________________________
Ipsec mailing list
Ipsec@ietf.org
https://www1.ietf.org/mailman/listinfo/ipsec