Article View: demon.security
Article #35Re: Virus Scanning of EMail
From: Richard Clayton
Date: Tue, 23 Feb 1999 00:00
Date: Tue, 23 Feb 1999 00:00
57 lines
3036 bytes
3036 bytes
In article <1999Feb23.020448.8683@emgee.demon.co.uk>, mike
<mike@emgee.demon.co.uk> writes
>Richard Clayton (richard@turnpike.com) wrote:
>: In article <919637446.4188.2.nnrp-07.9e989747@news.demon.co.uk>, Mike
>: Mann <mike@kempston.demon.co.uk> writes
>
>: >In article <36d01f1f.2773795@news.demon.co.uk>,
>: >richard@spam.egglestn.demon.co.uk (Richard Eggleston) wrote:
>: >
>: >>I was wondering, with the recent outbreak of Happy99
>: >>Do ISPs scan EMail or postings for Trojans and Virii,
>: >
>: >No.
>
>: actually, Freeserve does check for happy99 in both news and mail and
>: rejects such messages
>
>Why?
I've no idea - I think that asking in one of their groups might be a
better bet if you want an answer.
>: Demon will withdraw posting privileges from customers whose systems are
>: known to be contaminated until they have arranged to clean it up.
>
>I realise this falls under the general heading of "anything we didn't think
>off when we wrote the AUP is also not allowed" but wouldn't some sort of
>announcement of this have been in order.
We considered this, but the current level of infection is extremely low
(it's numerically worse for demon.nl customers, despite them being only
a small fraction of the demon.co.uk customers - go figure!).
The main effect of an announcement would be to cause a support overload
as people sought extra information, advice on whether they were
infected, etc etc. The likely reduction in service levels to customers
with genuine problems seemed excessive compared to the number of people
who seem to be getting infected at present.
The situation is kept under review, and of course we make a prompt
announcement to the people directly affected.
> I've never heard it suggested
>in the past that posting say word macro viruses was considered a serious
>offence.
I cannot advise doing it. Outside of specialist groups where it might be
considered on-topic, Demon would certainly take action.
You might also wish to consider the ramifications of the Computer Misuse
Act before posting any virus intentionally.
--
richard writing to inform and not as company policy
fewer than 100 MPs still need adopting: http://www.stand.org.uk/
"Assembly of Japanese bicycle require great peace of mind" quoted in ZAMM
Technical Details
Message-ID:
<1Yc+wEGNov02EAHr@turnpike.com>Path:
arc1-ca.pugleaf.net!unknown!not-for-mailReferences:
<36d01f1f.2773795@news.demon.co.uk> <ABMj2YDPKX02EAAs@turnpike.com> <1999Feb23.020448.8683@emgee.demon.co.uk>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: 1065b6,6b8d93e91c902302 X-Google-Attributes: gid1065b6,public From: Richard Clayton <richard@turnpike.com> Subject: Re: Virus Scanning of EMail Date: 1999/02/23 Message-ID: <1Yc+wEGNov02EAHr@turnpike.com> X-Deja-AN: 447578409 X-NNTP-Posting-Host: rnc-portable.turnpike.com:194.70.55.161 References: <36d01f1f.2773795@news.demon.co.uk> <ABMj2YDPKX02EAAs@turnpike.com> <1999Feb23.020448.8683@emgee.demon.co.uk> X-Complaints-To: abuse@demon.net X-Trace: news.demon.co.uk 919796434 nnrp-06:5747 NO-IDENT rnc-portable.turnpike.com:194.70.55.161 Organization: Turnpike Ltd MIME-Version: 1.0 Newsgroups: demon.security