[Esd-l] Pattern for Badtrans.b
brett at lariat.org
Mon Nov 26 14:28:01 PST 2001
At 02:58 PM 11/26/2001, John D. Hardin wrote:
>I prefer doing it this way, as it lets me put a URL to more specific
>information into the bounce message, and possibly help the sender get
>their system cleaned up sooner.
We don't send bounce messages.
Also, it seems to me that since the local recipe is somewhat specific,
and the worm may mutate, it pays to keep more than one pattern on tap.
I'll probably use your recipe in conjunction with one or more patterns
in the "poisoned" file, just to be sure.
More information about the esd-l