FriendlyGreeting is Expanding

[Brian Chivers]

Yah but surely if they can't get to the website to download the program it
doesn't pose a threat.

Am I misunderstanding this ??

Brian Chivers
----- Original Message -----
From: "Steve Evans" <sevans at FOUNDATION.SDSU.EDU>
To: <MAILSCANNER at JISCMAIL.AC.UK>
Sent: Wednesday, November 13, 2002 5:54 PM
Subject: Re: FriendlyGreeting is Expanding


> Blocking the friendlygreeting domains won't work because the "Virus"
> comes from a user.
>
> Steve Evans
> SDSU Foundation
> (619) 594-0653
>
> -----Original Message-----
> From: Ken Rice [mailto:krice at SERVERSANDSOLUTIONS.COM]
> Sent: Wednesday, November 13, 2002 9:11 AM
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Re: FriendlyGreeting is Expanding
>
>
> On Wed, 13 Nov 2002 08:28:27 -0800
> Steve Evans <sevans at FOUNDATION.SDSU.EDU> wrote:
>
> > I am ready to just block all e-mail.
>
> how about yahoo, hotmail, web2mail, msn.com...  8-)
>
> > I attached the two possibilitys now according to Mcafee.  Does anybody
> > have a long term solution for these guys.  I believe the rule that
> > Julian suggested adding to spam.assassin.prefs.conf only covers the
> > first one.
>
> I have the "luxury" of running servers for our corporation, including
> lists for our customers,
> so we have no "public" users. (We're a liberal corporation, but with no
> 'Net policies).
> Since email passing through our email server(s) are supposedly only
> business-related, I use 2 approaches.
>
> One is sendmail based, in my sendmail.mc I have:
>
> LOCAL_RULESETS
> F{JunkSubs} /etc/mail/junksubs.txt
> F{SSJunk} /etc/mail/ssjunk.txt
>
> HSubject:       $>Check_Subject
>
> SCheck_Subject
> R$={JunkSubs}$* $: NMJUNKSUB
> R$* $={SSJunk} $*       $#error $: NMJUNKSUB
> R$* NMJUNKSUB $*        $#error $: "553 Rejected"
>
> my ssjunk.txt includes:
> e-card
> greeting.card
> greeting.cardyou.have.an.e-card
> you.have.a.greeting.card.from
> along with many other phrases/words from v*agra on, including some sick
> stuff.
>
> In my spam.assassin.prefs.conf (mailscanner-3.26-1):
> blacklist_from  *@*.friendgreetings.com
> blacklist_from  *@friendgreetings.com
> blacklist_from  *@*.friend-greetings.com
> blacklist_from  *@friend-greetings.com
> and many others. I believe the above format to be correct, but, anyone,
> pls critique, 'cause it appears to work for me.
>
> (Is a TAB really necessary after the "blacklist_from" ?
>
> But, as I mentioned this is corporate, so if an employee does complain
> that
> they aren't getting some "legit" email like an e-card, I try to nicely
> explain
> why they're blocked. (or am I really being a "nice" BOFH??)
>
> Anyway, MANY THANKS to Julian Field, as with Mailscanner, SpamAssassin
> and the
> expensive Sophos, upper-level here is QUITE impressed with how we can
> tweak our email flow.
> And, it's just one more example of a great, reliable open-source
> software, running on Linux here,
> so much that I'm within an inch of convincing them that our primary *nix
> platform for Oracle
> should now be Linux.
>
> Sorry for the ramble,
>
> Ken Rice
> The Library Corporation
> (first commercial CD-ROM made (with Hitachi back then) in the world)
> http://www.tlcdelivers.com
>
> Yeah, serversANDsolutions.com is my domain, but they let me work from
> home a lot for many reasons.
>
> opensource, of course!
>


--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.