Virus Sent From My Subnet

[Maurizio Matteo Munafo']

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Friday 20 September 2002 19:56, Matt wrote:
> W32/Klez.H at mm is getting to be a real pain.
>
> I understand it lies about the email address it comes for its own
> protection.  I wondered if there is a way to have Mailscanner send me an
> alert everytime a certain virus(this one in particuliar) orginates from an
> IP in my subnet.  That way, even if it lied about the email address I could
> look up in my logs to see who had that IP and tell them to clean there
> system.
>
> Another way that could work.
>
> "Warning: E-mail viruses detected"  could be changed too: "Warning: E-mail
> viruses detected *local-origin*"
>
> Is that viable?
>

Actually you ask Mailscanner to include the full header in the message to
postmaster, so you can at least verify later if any of the message is locally
generated (the last among the Received: headers should be the one to be
examined).

Maurizio

- --
______
     / Maurizio M. Munafo'                         /   dMMMMMMMMb  dMMMMb
    / Dip. di Elettronica - Politecnico di Torino /   dMP"dMP"dMP    "dMP
   / Corso Duca degli Abruzzi 24                 /   dMP dMP dMP   dMMK"
  / I-10129 Torino (Italia)                     /   dMP dMP dMP     dMF
 / Tel: +39 011 5644128  Fax: +39 011 5644099  /   dMP dMP dMP dMMMMP"
/ E-mail: munafo at polito.it                    /__________________________
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE9i2IqtgCCNnfQWWkRAh4VAJsFrTz7AChv/vhTVIrECVtVVFoGMQCfZ0+0
HMmgEPRQCXNZy3CcqfiZy/4=
=pgwU
-----END PGP SIGNATURE-----