Date: Wed, 20 Aug 2003 22:10:13 -0400
Message-Id: <200308210210.h7L2ADvE005723@envy.delorie.com>
From: DJ Delorie <dj AT delorie DOT com>
To: djgpp AT delorie DOT com
In-reply-to: <bi0mft$147q$1@ulysses.news.tiscali.de> (bdeck@lycos.co.uk)
Subject: Re: SPAM
References:  <bi0mft$147q$1 AT ulysses DOT news DOT tiscali DOT de>
Errors-To: nobody AT delorie DOT com
X-Mailing-List: djgpp AT delorie DOT com
X-Unsubscribes-To: listserv AT delorie DOT com
Precedence: bulk


> This was a cool group until suddenly all the spam started. Is it
> possible to filter some of it out on the server-side?

I am filtering out most of it.  You're only seeing the dribbles that
get through the filters.  I'm doing the best I can!

BTW what you're seeing is the two big MS worms that are in the news.
The problem is that some gateways removed the content but didn't kill
the whole message; my filter was doing just fine filtering out the
worm itself but these other anti-virus filters turned an easily
detectable worm into a plain old text email, which is much harder to
filter out.  Now we're dealing mostly with the secondary effects, such
as the "I'm out of the office" and "thank you for contacting us"
auto-responses, along with people complaining because they got a virus
that appeared to be from djgpp AT delorie DOT com (which of course it
wasn't).  THESE are the ones that are hardest to filter, because they
don't follow any patterns.