Internetworkers: http://www.ibiblio.org/internetworkers/

[Steven Champeon <schampeo AT hesketh.com>]

on Sat, Aug 23, 2003 at 01:00:48PM -0400, Shea Tisdale wrote:
> [attribution corrected] Steven Champeon wrote:
> > on Fri, Aug 22, 2003 at 06:17:24PM -0400, Shea Tisdale wrote:
> > > I got more messages from Internetworkers about Sobig than anything else.
> As
> > > a matter of fact, I didn't get a single sobig email at all.  Perhaps you
> > > should stop letting your email software sleep around so much. :-)
> >
> > Perhaps you have a responsible systems administrator. Nobody on our
> > systems got infected, either, because we block that crud. It doesn't
> > mean that your server didn't have to block thousands of delivery attempts.
>
> Yes, I do have a very responsible system/network admin.  Me.  :-)

Oh, I'm sorry - I assumed that because you were using crews.com as an
outbound mail server that Chuck might have had something to do with it. ;)

Received: from mail.crews.com (node-423a7702.rtp.onnet.us.uu.net 
[66.58.119.2])
        by happyhouse.metalab.unc.edu (Postfix) with ESMTP id E0D8E20093
        for <internetworkers AT lists.ibiblio.org>;
        Sat, 23 Aug 2003 13:00:50 -0400 (EDT)
Received: from thor (66.57.83.142) by mail.crews.com with ESMTP (Eudora
        Internet Mail Server 3.2.1) for <internetworkers AT lists.ibiblio.org>;
        Sat, 23 Aug 2003 13:02:53 -0400

FWIW, you might want your mail server to have proper rDNS. We generally
don't accept mail from "anonymous" IPs like yours, whose forward and
reverse DNS don't match the HELO, as they are the source of all of our
spam. And with crud like SoBig.F on the rise, we're going to be blocking
more and more strictly.

-- 
hesketh.com/inc. v: (919) 834-2552 f: (919) 834-2554 w: http://hesketh.com
Book publishing is second only to furniture delivery in slowness. -b. schneier