Virii detection very low

Julian Field MailScanner at
Wed Oct 26 15:25:56 IST 2005


On 26 Oct 2005, at 13:56, Jeff A. Earickson wrote:

> On Tue, 25 Oct 2005, Drew Marshall wrote:
>>>> Lull before the storm? It's been quiet on the list for ages now.  
>>>> I can't believe the virus writers have given up.
>>>> Drew
>>> Drew,
>>>   Not true.  We have been getting our butts kicked in the last week
>>> by Windoze boxes infected with Mytob variants that quickly morph  
>>> into
>>> spambots.  Some spambots go directly out to the Internet, and  
>>> some route email via our mail server.  Our legit mail server  
>>> ended up in Spamcop this morning.  Ouch.  The IPBlock feature of  
>>> MailScanner has been some help here but it isn't pretty.  The  
>>> virus writers have an unholy alliance with the spammers now.
>>> Jeff Earickson
>>> Colby College
>> Jeff
>> Ouch, not nice. Looks like I am one of the lucky few. i don't have  
>> huge numbers of messages but I would expect 1-2% used to be  
>> viruses and currently I haven't seen a virus for a good couple of  
>> days. Doesn't stop the Spam (Which is still being eaten my MS/ SA)  
>> which is at it's normal levels.
>> Do/ (Did!) you have a rule set not spam scanning internal clients?  
>> I guess if you have a load of spambot infected boxes from Mr Gates  
>> you have to scan for spam in both directions but the internal  
>> stuff must be a nightmare :-(
> I always have.  The only thing that is trusted is on the  
> mail server itself.  The IPBlock feature of MS has been a help.

Glad to hear that IPBlock is useful to some people. I wasn't sure it  
would actually help much.
- -- 
Julian Field
Buy the MailScanner book at
PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654

Version: PGP Desktop 9.0.2 (Build 2425)


This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki ( and
the archives (

Support MailScanner development - buy the book off the website!

More information about the MailScanner mailing list