sorry, this time the worm has eaten my mind :-( my message was for Chirstian Klippel in personam.
i was asking him about his experiences with virus scanners, since i am thinking of installing one upon the incoming mail of the pd-list.
(and Christian tells me that a filter might work technically - but he would prefer to keep people from using buggy software like outlook)
the virus scanner will just prevent that infected mail will be transported by the list, it will and can not add any security for win/outlook users.
my plan now is to:
install a scanner an see if it really works, otherwise
block all mail written in outlook and all executable attachements and let them go to the list only after an examination, and if this is not efficient
reject all outlook mail and attachements.
what do you think?
norbert
...
On Wed, 28 Nov 2001, Yves Degoyon wrote:
is there a worm that translates everything in German ???
Well, I don't bear any grudge on German but I just can't read it.
Yves/
- block all mail written in outlook and all executable attachements and let them go to the list only after an examination, and if this is not efficient
yes, you can block all executables as attachement, that's a reasonable level of protection, but be aware that this will not block nasty VBScript viruses included in mails.
for myself, I accept to take such a risk because I don't have any confidential informations on my laptop.
those who have such informations, beware, because yesterday's worm maybe stole their internet passwords, that's very bad for those who do on-line banking, web-mails, .... just take actions !!
i'm sorry to use Outlook Express but this is the only multi-accounts software I've got for Windows and my WinModem would not work with Linux.
cheers,
Yves/
Hi all,
I suggest anyone using outlook to get the latest version - it doesn't seem to open those viruses automatically anymore.
As for banning outlook-users from the list... just block it all except PGP'd, rot13'd, uuencoded and tarred messages written in swahili, that should do it?
juha
----- Original Message ----- From: "Yves Degoyon" ydegoyon@free.fr To: "Norbert Math" math@iem.kug.ac.at; pd-list@iem.kug.ac.at Sent: Thursday, November 29, 2001 2:43 PM Subject: Re: [PD] What I know about this f****ing worm
- block all mail written in outlook and all executable attachements and let them go to the list only after an examination, and if this is not efficient
yes, you can block all executables as attachement, that's a reasonable level of protection, but be aware that this will not block nasty VBScript viruses included in mails.
About this f****ing worm thing: 1- Stop using Windows 2- Let's talk about PD Sorry for being so rude...
I have not followed this thread in detail so apologies if this has been answered....
Is it not enough to ask friendly Outlook users to send and receive plain text-only emails? Would this provide adequate protection from unwitting transfers - even VBscript?
--rwb
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
On Thu, 29 Nov 2001, Norbert Math wrote:
::my plan now is to: :: ::- install a scanner an see if it really works, otherwise :: ::- block all mail written in outlook and all executable attachements and :: let them go to the list only after an examination, and if this :: is not efficient :: ::- reject all outlook mail and attachements. :: :: ::what do you think?
tuff, norbert!
my 2c: we're having a discussion here at mur.at about our policy regarding email viruses/wurms etc. our preliminary conclusion being not to block anything (except for non-rfc-compliant messages and maybe html). primarily for political reasons: why should we (being a debian-only 'provider'/network) waste time and resources just to make life easier and more secure for m$-slaves? + it's also a matter of freedom and choice (somebody chooses a crappy product, that very somebody will have to deal with the consequences, not us). that's where an 'educational' aspect comes in: people simply must learn more about the tools and the media they're using. i'm sick and tired of all the poor weirdos sending outlook-'email' with background-ani-gifs and m$-stylesheets, stupid attachments and an occasional virus on top... (type: 'please help, my email doesn't work!!!')
not insinuating any of those are on this list, of course ;}
lu