Re: [Paddlewise] Bugbear worm warning

From: Kirk Olsen <paddlewise_at_fastmail.fm>
Date: Wed, 2 Oct 2002 13:05:38 UT
On Tue, 1 Oct 2002 23:17:26 -0500, "James W. Durkin"
<jwd_at_phonogram.net> said:

I haven't been commenting publicly on this thread because any comments
I would
have made, had already been covered.  I did include a few embedded
comments in
posts I forwarded that got trapped by the filters.

> If you wish to filter messages originating on the Paddlewise server
> into a separate folder, then your filter, if it is to operate
> reliably, needs to trigger on the following message header:
> 
>   Sender: owner-paddlewise_at_paddlewise.net
> 
> Simply filtering based on "[Paddlewise]" in the Subject: header won't
> do the trick.

Even that filter isn't guaranteed, against one of the email header
forging virii.
It is the best filter I am aware of.

I regularly get bounces of virii being sent to dead mailboxes claiming
to
be from owner-paddlewise_at_paddlewise.net - admittedly in those cases the
From:
address is what has been forged.

Only email coming in from the host paddlewise.net aka
cyclone.muddypuppies.com 
is from paddlewise.  

There's a very legitimate reason that Melissa pgp signs her email... 
If the signature
doesn't match it's not really from her.

Kirk
-- 
http://fastmail.fm - One of many happy users:
  http://www.fastmail.fm/docs/quotes.html
***************************************************************************
PaddleWise Paddling Mailing List - Any opinions or suggestions expressed
here are solely those of the writer(s). You must assume the entire
responsibility for reliance upon them. All postings copyright the author.
Submissions:     PaddleWise_at_PaddleWise.net
Subscriptions:   PaddleWise-request_at_PaddleWise.net
Website:         http://www.paddlewise.net/
***************************************************************************
Received on Wed Oct 02 2002 - 06:05:49 PDT

This archive was generated by hypermail 2.4.0 : Thu Aug 21 2025 - 16:31:00 PDT