From mboxrd@z Thu Jan 1 00:00:00 1970 From: Nilesh Subject: Re: virus warning Date: Tue, 27 Jan 2004 20:46:44 -0800 (PST) Sender: netfilter-admin@lists.netfilter.org Message-ID: <20040128044644.31024.qmail@web13204.mail.yahoo.com> References: <002901c3e4d7$fb73fcd0$0200000a@heretic> Mime-Version: 1.0 Return-path: In-Reply-To: <002901c3e4d7$fb73fcd0$0200000a@heretic> Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit To: Alexis Cc: netfilter@lists.netfilter.org How do u add rule in iptable firewall for this in my mail server there are two cards eth0 for internet and eth1 for lan please let me know ASAP thanks --- Alexis wrote: > In this case, we are protected !!!!! > > We are all using a firewall with netfilter and input > policy drop > > :)))) > > > > ----- Original Message ----- > From: "Fritz Mesedilla" > > To: "Netfilter Mailing List (E-mail)" > > Sent: Tuesday, January 27, 2004 4:30 AM > Subject: RE: virus warning > > > > I forgot to send the details. > > > W32.Novarg.A@mm is a mass-mailing worm. The worm > will arrive as an > attachment with a file extension of .bat, .cmd, > .exe, .pif, .scr, or .zip. > > When the machine gets infected, the worm will set up > a backdoor into the > system by opening TCP ports 3127 thru 3198. This > will potentially allow a > hacker to connect to the machine and utilize it as a > proxy to gain access to > it's network resources. In addition, the backdoor > has the ability to > download and execute arbitrary files. > > The worm will perform a DoS starting on February 1, > 2004. On February 12, > 2004 the worm has a trigger date to stop spreading. > > > http://securityresponse.symantec.com/avcenter/venc/data/w32.novarg.a@mm.html > > > > Cheers, > > fritz > --- > + Basta Ikaw Lord > > > > > -----Original Message----- > From: > Sent: Tuesday, January 27, 2004 2:45 PM > To: Netfilter Mailing List (E-mail) > Subject: Re: virus warning > > > > Obviously this is a really new one ... F-prot didn't > catch it .. and mines > up to date ... > However ... since kmail and linux don't much like 7 > bit mime ... *grin* > > I'm handing this one up to the folks at F-Prot to > see why they didn't catch > it... > > > Alistair. > > On January 27, 2004 12:44 am, Fritz Mesedilla wrote: > > friends, > > > > we got a virus in our list. > > clamav warned me about it. > > it's now spreading like fire even on other lists. > > > > thought you might like to be warned. > > > > > > Cheers, > > > > fritz > > --- > > + Basta Ikaw Lord > > > > > > > > > > > ---------------------------------------------------------------------- > > This email and any files transmitted with it are > confidential and > > intended solely for the use of the individual or > entity to whom they > > are addressed. If you have received this email in > error please notify > > the sender immediately by e-mail and delete this > e-mail from your > > system. Please note that any views or opinions > presented in this > > email are solely those of the author and do not > necessarily represent > > those of the company. Finally, the recipient > should check this email > > and any attachments for the presence of viruses. > The company accepts > > no liability for any damage caused by any virus > transmitted by this > > email. > > > > Overture Media, Inc. > > Direct Line: (632) 635-4785 > > Trunkline: (632) 631-8971 Local 146 > > Fax: (632) 637-2206 > > Level 1 Summit Media Offices, Robinsons Galleria > EDSA Cor. Ortigas Ave., > > Quezon City 1100 > > > ---------------------------------------------------------------------- > This email and any files transmitted with it are > confidential and > intended solely for the use of the individual or > entity to whom they > are addressed. If you have received this email in > error please notify > the sender immediately by e-mail and delete this > e-mail from your > system. Please note that any views or opinions > presented in this > email are solely those of the author and do not > necessarily represent > those of the company. Finally, the recipient should > check this email > and any attachments for the presence of viruses. The > company accepts > no liability for any damage caused by any virus > transmitted by this > email. > > Overture Media, Inc. > Direct Line: (632) 635-4785 > Trunkline: (632) 631-8971 Local 146 > Fax: (632) 637-2206 > Level 1 Summit Media Offices, Robinsons Galleria > EDSA Cor. Ortigas Ave., > Quezon City 1100 > > > > > __________________________________ Do you Yahoo!? Yahoo! SiteBuilder - Free web site building tool. Try it! http://webhosting.yahoo.com/ps/sb/