From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on polar.synack.me X-Spam-Level: X-Spam-Status: No, score=-0.3 required=5.0 tests=BAYES_00, REPLYTO_WITHOUT_TO_CC autolearn=no autolearn_force=no version=3.4.4 X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: 103376,c7ee0d960296483 X-Google-Attributes: gid103376,public X-Google-ArrivalTime: 2003-09-22 20:44:10 PST Path: archiver1.google.com!news1.google.com!newsfeed.stanford.edu!news-spur1.maxwell.syr.edu!news.maxwell.syr.edu!small1.nntp.aus1.giganews.com!border1.nntp.aus1.giganews.com!intern1.nntp.aus1.giganews.com!nntp.giganews.com!nntp.gbronline.com!news.gbronline.com.POSTED!not-for-mail NNTP-Posting-Date: Mon, 22 Sep 2003 22:44:07 -0500 Date: Mon, 22 Sep 2003 22:44:07 -0500 From: Wes Groleau Reply-To: groleau@freeshell.org Organization: Ain't no organization here! User-Agent: Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.4) Gecko/20030624 X-Accept-Language: en-us, en, es-mx, pt-br, fr-ca MIME-Version: 1.0 Newsgroups: comp.lang.ada Subject: Re: Current "Swen" worm attack - a tip References: In-Reply-To: Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Message-ID: NNTP-Posting-Host: 69.9.86.77 X-Trace: sv3-lxDYsmsvZ6AK35PIuUQgcXUdC5idS4xPjrFZ5I0YzGuOTKFPG8WLZGKF99cnxWeKCwzvrnW1ekXICU4!MgR4MhOZntPQLSQB+lIS6fc1xAnR0Y3ILEEOLMbSyo6SaJvJC/m1pAF49BJFF//UBZB/SoU433ee X-Complaints-To: abuse@gbronline.com X-DMCA-Complaints-To: abuse@gbronline.com X-Abuse-and-DMCA-Info: Please be sure to forward a copy of ALL headers X-Abuse-and-DMCA-Info: Otherwise we will be unable to process your complaint properly X-Postfilter: 1.1 Xref: archiver1.google.com comp.lang.ada:42767 Date: 2003-09-22T22:44:07-05:00 List-Id: Stephane Richard wrote: > in my case (100 of them per hour)....all ranging from "undeliverable > message", to "Security updates", to whatever else there could be...."Report > from Admin", "Letter", you name it...all different Fromline to Subject > linesit put my regular email over quota quite fast ... which is why I posted I did detect a simple pattern: in the subject header, the word SUBJECT is like that--all caps. Once I noticed that it was a simple matter to filter them out. -- Wes Groleau ---- The man who reads nothing at all is better educated than the man who reads nothing but newspapers. -- Thomas Jefferson