Re: stopping telnet

From: Allan B. Colombo (al.colombo_at_securitymission.com)
Date: 06/27/04 

Date: Sun, 27 Jun 2004 10:41:43 -0400

"Brad Olin" <bwo@bwo1.com> wrote in message
news:h21uc0h5jupir9isaifvuooiv7tl5q94i8@4ax.com...
> On Tue, 15 Jun 2004 15:58:43 +0200, "rb" <me@u.com> wrote:
>
> >Thanks for the response. My problem is that I suspect that someone is
> >telnetting into our mail server and dropping off mydoom viruses. I have
> >disabled mailrelay on our server. So I can only think that the culprit is
> >spoofing the address in order to drp this onto our server.
> >
>
>
> This is starting to sound to me more like a email related
> question/problem. A good share of the virus have the ability to spread
> themselves via email. Have you looked into this as a spam email issue?
>
> I could be wrong on this, but I don't think anybody would be taking the
> time to telnet to your box and manually dropping off emails with virus.
> It seems more likely it's an actual virus that has smpt support.
>
>
> Brad
> --
> "Where the spirit does not work with the hand, there is no art."
> Leonardo da Vinci
> Bradley W. Olin
> http://www.bwo1.com

There are a lot of stories about these virus' actually opening themselves
when they come in through e-mail. If I'm using an ascii-based e-mail
client, do I still run the risk of incurring mydoom or any other? Can they
actually open up by themselves? Sorry to ask this possibly quite simple
question, but if you don't know, you don't know.

Thanks,
Al Colombo, trade journalist 

--
www.SecurityMission.com
  * For security professionals
  * Corporate and business end users
  * Crime Prevention for homeowners
  * Also corporate end users
  * Security case studies
  * Technology stories
  * Interactive e-Community page
  * Poll of the week
  * Technology & science news
  * Seven bulletin board (BBS) forums
  * Member chat room
  * Industry events (submit your own)
  * New product announcements
  * Registration is free
  * Crime prevention section

Relevant Pages

  • Re: stopping telnet
    ... >telnetting into our mail server and dropping off mydoom viruses. ... time to telnet to your box and manually dropping off emails with virus. ...
    (comp.os.linux.security)
  • Re: Is VMS losing the Financial Sector, also?
    ... On Behalf Of Bill Gunshannon ... Is VMS losing the Financial Sector, ... One of their Customers was running Windows Server and was down for 2 ...
    (comp.os.vms)
  • Re: Information Store taking all available memory.
    ... There are cases where the virus software is scanning things it should not ... The aforementioned should be excluded in the virus software. ... Do Not Back Up or Scan Exchange 2000 Drive M ... Understanding Virus Scanning API 2.0 in Exchange 2000 Server ...
    (microsoft.public.exchange2000.information.store)
  • Re: Frustrated with Trend CSM!
    ... You must exclude them from Officescan, ... Click on your SBS computer icon, and set the client priveliges to your ... settings for the server versus the clients. ... > "Virus successfully detected, but infected file can neither be cleaned nor ...
    (microsoft.public.windows.server.sbs)
  • Re: Swen and Earthlink
    ... virus problem like Swen. ... infecting my system at all. ... every time I went to the server to download my ... Contrary to what others are saying, message rules to delete ...
    (microsoft.public.security.virus)