North American Network Operators Group|
Date Prev | Date Next |
Date Index |
Thread Index |
Author Index |
Re: Hi (fwd)
- From: Steven M. Bellovin
- Date: Wed Mar 17 23:46:51 2004
In message <Pine.LNX.email@example.com>, "william(a
>Me thinks somebody has found a trapdoor in nanog mailsetup and is in
>general out to get us ...
>This one supposedely came from 184.108.40.206 (australia powerhous museum -
>phm.gov.au) and advertises page on ip 220.127.116.11 (saint louis
>univerisity - slu.edu). "Connection refused" when I tried to see what's there.
No -- I'm pretty sure it's a worm. Of the 20 copies I've received --
in just the last 3 hours -- only three have been via the NANOG list.
On the bright side, Spamassassin 2.63's default settings seem to kill
this one. In fact, it was only by accident that I even noticed them.
--Steve Bellovin, http://www.research.att.com/~smb