8 Dec
2003
8 Dec
'03
9:27 a.m.
I routinely get virus alerts off of the cctalk and cctech lists. The
ones I receive are usually warnings that a virus was detected and
removed, and I have never actually gotten a virus from the list, so I
usually ignore them.
Dan
Does anybody else have trouble with routinely
receiving a virus in
place of
the proper collection of messages which constitute an
issue from this
group? What I often receive looks like
------------------ Virus Warning Message (IIIIIIIIIIIIII)
Security warning Exceed_Decompression_Layer in file email-body
The file email-body is moved to /etc/iscan/virus/virNUv9Rs.
Information from IIIIIIIII Mail-Server: Scanner detected a virus
(Exceed_Decompression_Layer) in an attachment (email-body) of this
message.
The attachment was removed from the message. No
further action is
required
on your part. If you have questions, please contact
postmast@IIIIIIIIIIIIIIIIIIIIIIIIIIIIII
---------------------------------------------------------
------------------ Virus Warning Message (IIIIIIIIIIIIIIIIIIII)
email-body is removed from here because it contains a virus.
I have removed the name of our mail processor and substituted several
letters= "I".
These viruses come numbered in the correct sequence, as if they were
issued
by the normal server which distributes the proper
message
collections. By
the time the messages reach me any real content has
been removed.
Several
of these arrive per week.
One question I must face is whether our firewall is discovering
non-existent viruses, and request a repair, but if the viruses are
real,
then the server for this group needs cleaning. It is
possible there
is
somebody out there at a third point doing this, but
how does this
explain
having the messages in the correct sequence and
delivered to me while
eliminating the correct message? (It never shows up, and how would
this
"Third Party Server" be trapping the proper
messages in order to
substitute
a virus loaded message? If I were receiving one
proper message and
also
the contaminated version it would be easier to
explain.)
Any advice would be appreciated.
Bob
_____________________________________________________
This message scanned for viruses by CoreComm