[fpc-devel]Problem with mailinglist (forged mail)

Jonas Maebe jonas at zeus.rug.ac.be
Thu May 2 10:38:32 CEST 2002


On Thu, 2 May 2002, Konstantin Muenning wrote:

> I don't know who the moderator is but he could maybe clarify this. As

You ask, we serve ;)

As you know, most virusses nowadays scan the whole harddisk of the victim
(like browsercaches etc) to find email addresses. Next, they pick a random
address as "From", a random address as "To" and send themself on to the
next victim. When the "To" address becomes one of the fpc-mailing lists,
the mailing list software always blocks the message (as it dods with all
messages > 25kb) and waits for the moderator to decide whether or not the
message should be sent to the list).

At the same time, it also sends a message to the "From" address to inform
the poster (or what it thinks is the poster) that his message is being
held for approval by the moderator. Since the from address is faked
however, this indeed results in mails being sent to people who have
nothing to do with that virus mail.

I can turn off the feature that causes these mails being sent, but that
will also mean that when someone really sends a mail which is too big (or
which is held for a approval because of some other reason) won't get a
warning anymore either, which is not nice.

However, if you think these false warnings are too annoying, I can turn it
off without any problems.


Jonas





More information about the fpc-devel mailing list