From: Wes Groleau <groleau@freeshell.org>
Subject: Re: Current "Swen" worm attack - a tip
Date: Mon, 22 Sep 2003 22:44:07 -0500
Date: 2003-09-22T22:44:07-05:00 [thread overview]
Message-ID: <Uc2cnZUs_-UVXPKiU-KYjA@gbronline.com> (raw)
In-Reply-To: <D8Abb.13208$Uv2.1249@nwrdny02.gnilink.net>
Stephane Richard wrote:
> in my case (100 of them per hour)....all ranging from "undeliverable
> message", to "Security updates", to whatever else there could be...."Report
> from Admin", "Letter", you name it...all different Fromline to Subject
> linesit put my regular email over quota quite fast ... which is why I posted
I did detect a simple pattern: in the subject header,
the word SUBJECT is like that--all caps.
Once I noticed that it was a simple matter to filter
them out.
--
Wes Groleau
----
The man who reads nothing at all is better educated
than the man who reads nothing but newspapers.
-- Thomas Jefferson
next prev parent reply other threads:[~2003-09-23 3:44 UTC|newest]
Thread overview: 31+ messages / expand[flat|nested] mbox.gz Atom feed top
2003-09-22 3:05 Current "Swen" worm attack Alexander Kopilovitch
2003-09-22 10:27 ` Stephane Richard
2003-09-22 11:45 ` chris
2003-09-23 3:49 ` Wes Groleau
2003-09-22 11:49 ` Preben Randhol
2003-09-22 21:42 ` Randy Brukardt
2003-09-23 7:10 ` Preben Randhol
2003-09-23 7:35 ` Vinzent Hoefler
2003-09-23 0:39 ` Alexander Kopilovitch
2003-09-23 4:11 ` David Marceau
2003-09-23 11:08 ` Jeff C,
2003-09-23 15:41 ` Ludovic Brenta
2003-09-24 1:14 ` Jeff C,
2003-09-24 8:20 ` Martin Krischik
2003-09-25 10:10 ` Ludovic Brenta
2003-09-25 11:01 ` Martin Krischik
2003-09-25 11:32 ` Preben Randhol
2003-09-25 12:07 ` Ludovic Brenta
2003-09-25 13:47 ` Stephen Leake
2003-09-23 18:47 ` Randy Brukardt
2003-09-23 20:56 ` Berend de Boer
[not found] ` <3F6FA78D.3070708@myob.com>
2003-10-03 13:41 ` sk
2003-10-03 14:17 ` Preben Randhol
2003-09-23 3:44 ` Wes Groleau [this message]
2003-09-23 7:33 ` Current "Swen" worm attack - a tip Preben Randhol
2003-09-23 17:44 ` Jeffrey Carter
2003-09-23 18:00 ` Brian Catlin
2003-09-23 19:14 ` tmoran
2003-09-23 20:55 ` Berend de Boer
2003-09-24 10:08 ` Dmitry A. Kazakov
2003-09-24 21:50 ` Wes Groleau
replies disabled
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox