OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: Changed subject (was Re: reg. virus named ...)
From: Claus Guttesen (clauseu.ww-group.com)
Date: Thu May 04 2000 - 08:02:50 CDT

On Thu, 4 May 2000, Lars Hecking wrote:

>
> > > Considering how easily email subjects are changed, this creates a FALSE
> > > SENSE OF SECURITY.
> >
> > Yes, but the virus is looking at a predefined mailing-list, so the
> > end-user don't have a chance changing the subject-header. And these users
> > are spreading the largest percentage of the infected mail.
>
> While I agree in principle, as a mail/network admin, I cannot rely on users
> not changing the subject.
>
> > > Install a virus checker.
> >
> > A virus-checker only works on local mail, not mail being relayed. This
> > server act as a relay-host.
>
> http://msgs.securepoint.com/cgi-bin/get/postfix0004/183.html
>

Thank you pointing this out, I was incorrect stating virus-scan only
applied for local mail. I'll take a closer look when this storm settles.

>
>

regards
Claus