Re: help... I am getting bombarded by @swen virus

From: Hairy One Kenobi (abuse_at_[127.0.0.1)
Date: 11/25/03 

Date: Mon, 24 Nov 2003 23:59:21 -0000

"Jeff Cochran" <jcochran.nospam@naplesgov.com> wrote in message
news:3fcc8693.2326675192@msnews.microsoft.com...
> On Mon, 24 Nov 2003 14:09:49 -0400, "Vincent Haakmat"
> <vhaakmat@ipx.nagicosus.com> wrote:
>
> >My mail server gets at least 100 mails a day claiming to to be sercurity
> >updates from MS. Everytime it uses a different email address. Strangely
> >enough they are targeted to only 2 users in our domain (both of them with
> >admin privilages). I use ORF Enterprise in addition to GFI Mailsecurity
and
> >Mail Essentials. They don't seem to be able to block them still.
> >How can I stop this attack ???????
>
> Block the BODY text of "Microsoft Client" or "Microsoft Customer"

It morphs a /lot/ more than that!

I would suggest that the OP contact the vendors - my current solution is
limited to header analysis
(working on that one: http://www.codecutters.org/spam/spamreview.html), and
YMMV. Well, "definitely will vary" would be more accurate ;o)

Blocking on "Client" or "Customer" as part of the incoming address may have
*very* undesirable effects on the Business - best check first.

HTH

Hairy One Kenobi

Disclaimer: the opinions expressed in this opinion do not necessarily
reflect the opinions of the highly-opinionated person expressing the opinion
in the first place. So there!

Relevant Pages

  • Re: Kavkaz mess.
    ... usually take anti-Russian stance almost everytime but your opinions are ... fair and balance in this Kavkaz mess. ...
    (soc.culture.baltics)
  • Re: Terminator 3 how does it rate?????
    ... you'll likely get opinions all over the map on this title. ... i've enjoyed it everytime i've played it on location, ... spent any serious time on it trying to advance in the rules. ...
    (rec.games.pinball)