[OT] spam and worms

[Han-Wen Nienhuys]

address@hidden writes:
> This trick doesn't seem to help, the ip:s seem to be faked somehow... each 
> worm-infected message has a unique ip which its headers says it comes from.

Unfortunately, switching off the attachments hasn't really worked, and
in the meantime the traffic is only increasing.

A solution that I *can* offer to everyone is a small script, available
from

 http://www.xs4all.nl/~hanwen/public/software/filter-zips.py

it will scan through a message looking for .exe, .pif and .scr files,
and looks inside .zips. It will mark suspicious messages with

 X-Filter-Zip-Scanned: suspect

It has caught 91 copies of this particular worm since yesterday afternoon.


-- 

 Han-Wen Nienhuys   |   address@hidden   |   http://www.xs4all.nl/~hanwen