On Wed, 18 Jan 2006, Jeffrey T Eaton wrote: > From: Jeffrey T Eaton <[EMAIL PROTECTED]> > To: info-cyrus@lists.andrew.cmu.edu > Date: Wed, 18 Jan 2006 14:15:01 -0500 > Subject: Re: Spamming IP-Address: 202.80.59.3 > > > well, apart from the fact they are being distributed through > > info-cyrus. although it has been much better recently, why is > > info-cyrus the only mailing list i get viruses and spam through? > > how hard is it to put a virus checker in place? dom > > A virus checker is in place. We run ClamAV on all of our mail > servers. Sadly, this does not help when the signature doesn't > come out promptly, and the messages are being sent with a (forged) > from address of a valid subscriber.
That's why I prefer to run two virus checkers on all mail. Sometimes one is quicker than the other at flagging up new viruses. I believe commercial anti-virus companies, eg Messagelabs, will similarly run mail through several virus checkers. I suppose I'm lucky in that we have a site license for Sophos. Anyway the ClamAV signature for this particular virus was made available last night. ClamAV now detects this nasty as Worm.VB-9. -- Dennis Davis, BUCS, University of Bath, Bath, BA2 7AY, UK [EMAIL PROTECTED] Phone: +44 1225 386101 ---- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html