Re: help... I am getting bombarded by @swen virus

From: Jeff Cochran (jcochran.nospam_at_naplesgov.com)
Date: 11/24/03


Date: Mon, 24 Nov 2003 22:31:09 GMT

On Mon, 24 Nov 2003 14:09:49 -0400, "Vincent Haakmat"
<vhaakmat@ipx.nagicosus.com> wrote:

>My mail server gets at least 100 mails a day claiming to to be sercurity
>updates from MS. Everytime it uses a different email address. Strangely
>enough they are targeted to only 2 users in our domain (both of them with
>admin privilages). I use ORF Enterprise in addition to GFI Mailsecurity and
>Mail Essentials. They don't seem to be able to block them still.
>How can I stop this attack ???????

Block the BODY text of "Microsoft Client" or "Microsoft Customer"

Jeff