🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: demon.security
Article #36

Re: Virus Scanning of EMail

#36
From: mike
Date: Wed, 24 Feb 1999 00:00
69 lines
3395 bytes
Richard Clayton (richard@turnpike.com) wrote:
: In article <1999Feb23.020448.8683@emgee.demon.co.uk>, mike
: <mike@emgee.demon.co.uk> writes

: >Richard Clayton (richard@turnpike.com) wrote:
: >: In article <919637446.4188.2.nnrp-07.9e989747@news.demon.co.uk>, Mike
: >: Mann <mike@kempston.demon.co.uk> writes
: >
: >: >In article <36d01f1f.2773795@news.demon.co.uk>,
: >: >richard@spam.egglestn.demon.co.uk (Richard Eggleston) wrote:
: >: >
: >: >>I was wondering, with the recent outbreak of Happy99 
: >: >>Do ISPs scan EMail or postings for Trojans and Virii,
: >: >
: >: >No.
: >
: >: actually, Freeserve does check for happy99 in both news and mail and
: >: rejects such messages
: >
: >Why?

: I've no idea - I think that asking in one of their groups might be a
: better bet if you want an answer.

I suspect that it's easy to detect and one of their senior admins fancied
adding such detection to the MTA he has been associated with may be a likely
explanation.

: >: Demon will withdraw posting privileges from customers whose systems are
: >: known to be contaminated until they have arranged to clean it up.
: >
: >I realise this falls under the general heading of "anything we didn't think
: >off when we wrote the AUP is also not allowed" but wouldn't some sort of
: >announcement of this have been in order.

: We considered this, but the current level of infection is extremely low
: (it's numerically worse for demon.nl customers, despite them being only
: a small fraction of the demon.co.uk customers - go figure!).

Fair enough. The impression given elsewhere was that it was a more serious
problem. 

: > I've never heard it suggested
: >in the past that posting say word macro viruses was considered a serious
: >offence. 

: I cannot advise doing it. Outside of specialist groups where it might be
: considered on-topic, Demon would certainly take action.

There was the unstated assumption in my original question that such a posting
was inadvertant in the same way that one presumes most peoples propogation
of happy99 was inadvertant. I'd sort of assumed that posting a virus in
cicumstances where the intention was clearly stated to be to propogate it
to others was one of those things that would obviously be an AUP violation.

: You might also wish to consider the ramifications of the Computer Misuse
: Act before posting any virus intentionally.

Indeed. You may also wish to consider the legal ramifications before telling
this group whether or not you have stopped beating your wife.

However I fail to see what either of the above two paragraphs has to do with
my original posting. 


-- 
Mike Cavanagh.

http://i.am/purple
Technical Details
Message-ID: <1999Feb24.115859.9967@emgee.demon.co.uk>
Path: arc1-ca.pugleaf.net!unknown!not-for-mail
References: <36d01f1f.2773795@news.demon.co.uk> <1Yc+wEGNov02EAHr@turnpike.com>

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 1065b6,6b8d93e91c902302
X-Google-Attributes: gid1065b6,public
From: mike@emgee.demon.co.uk (mike)
Subject: Re: Virus Scanning of EMail
Date: 1999/02/24
Message-ID: <1999Feb24.115859.9967@emgee.demon.co.uk>
X-Deja-AN: 447867474
X-Mail2News-Path: news.demon.net!post-11.mail.demon.net!post.mail.demon.net![158.152.64.129]!emgee.demon.co.uk
References: <36d01f1f.2773795@news.demon.co.uk> <1Yc+wEGNov02EAHr@turnpike.com>
X-Trace: mail2news.demon.co.uk 919859435 mail2news:15499 mail2news mail2news.demon.co.uk
Organization: Sadly Lacking
Newsgroups: demon.security
X-Complaints-To: abuse@demon.net