Re: [gentoo-dev] recent virus mails

Can we please just block anything that doesn't use a FQDN for an EHLO string? From the virii I've seen that came through, that would get a good chunk of them. It would probably also be a good idea to block anything that uses gentoo.org or smtp.gentoo.org as an EHLO string. Obviously they aren't us and should be blocked for mere impersonation if nothing else.

If we didn't have so many homegrown MTA's I'd also suggest blocking anything without a matching PTR record.

I'm more familiar with postfix than exim so I'm not sure the config's you'd need to implement this. But it should be fairly simple.

antifa

On Fri, Mar 05, 2004 at 04:38:43AM -0500, Nicholas Hockey wrote:
> Well my responce is, i don't want to compile and use another client,
> it's easier to just have either your client or mta to put all my mailing
> lists in another maildir or v-folder and just check them as i
> please..... and if you think getting a few virus filled e-mails is bad,
> try waiding through all the spam on usenet. other than that, i don't
> have a good answer.
>
> On Thu, 2004-03-04 at 22:57, John Nilsson wrote:
>
> > On Wed, 2004-03-03 at 20:47, Ward Poelmans wrote:
> > > -----BEGIN PGP SIGNED MESSAGE-----
> > > Hash: SHA1
> > >
> > > John Nilsson wrote:
> > > | What alternatives to mailinglist exists?
> > > |
> > > | -John
> > >
> > > Usenet ?
> > >
> > > Ward
> >
> > This is really OT but: Why do mailinglists exists, what is wrong with
> > usenet?
> > Anyone know a god place to get the answer to the above question? (kind
> > of hard to google for "mailinglists").
> >
> > -John
>
> --
> Day of inquiry. You will be subpoenaed.
> --
> Nicholas Hockey [KC2MMR]
> tilt@××××××××××.net
> Encrypted E-Mail preferred
> ????????????????????????



-- 
Ken - "I'm just re-do."
ken@×××××××××××××.com
-----------------------------------------------------------------
pgp fingerprint 2D6D 67D1 1600 04E0 4AF7 BA7E 26A5 4189 9228 1585