From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 5757 invoked by uid 1002); 14 Dec 2003 10:06:15 -0600 Mailing-List: contact gentoo-dev-help@gentoo.org; run by ezmlm Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@gentoo.org Received: (qmail 8548 invoked from network); 14 Dec 2003 10:06:14 -0600 Date: Sun, 14 Dec 2003 17:06:25 +0100 From: John Nilsson To: "Robin H. Johnson" Cc: John Nilsson , Gentoo Developers Message-ID: <20031214160625.GA18174@newkid> References: <20031214055716.GA7824@newkid> <20031214064437.GA1901@curie-int.orbis-terrarum.net> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="k1lZvvs/B4yU6o8G" Content-Disposition: inline In-Reply-To: <20031214064437.GA1901@curie-int.orbis-terrarum.net>; from robbat2@gentoo.org on Sun, Dec 14, 2003 at 07:44:37 +0100 X-Mailer: Balsa 2.0.14 Subject: Re: [gentoo-dev] Virus X-Archives-Salt: a8addc99-c556-439c-a6b0-a93c32bf0ca6 X-Archives-Hash: aa9b40d15d956dda1e8f47570c312955 --k1lZvvs/B4yU6o8G Content-Type: text/plain; Format=Flowed; DelSp=Yes; charset=ISO-8859-1 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable > > The only list I am currently active on is this. While hard to > believe > > the most logical conclusion is that some gentoo-dev subscribers has >=20 > > been infected. > You neglect the spread mechanism here. Given that the worm forges =20 > it's > source address to a random value, the ONLY requirement to recieve an > infected email from somebody is that they have have at some point > recieved an email from you (either directly or via some mailing list) > in > the past, and they still have your email on their system. Reading the virus description again I see that I missed a critival =20 part. The virus does not use the victims smtp but rather one of 350 =20 diffrent servers around the world, thus this may very well come from =20 the same host. Im sorry about the superflous list traffic. /John --k1lZvvs/B4yU6o8G Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.3 (GNU/Linux) iQEVAwUAP9yKgcudu54EDqtoAQL1xwf9FAaPg/hRAH2zWF/M+Qs4e4F19D2jAG+C sEJwR1jUNVdInyEEClXIgiy8qd1xXghoiv0ieVthZxUBOfCxCCTYw48vhMMSA8T3 2fs1+FxxWAnsOHx6kXGVMcCX+8K6hZyKwLYwlvxmhuZSD8gofUA+X2G261Wxj031 7mStKcv5cfVBn0xutlBy+v0AJtnb+Jou11hVbS3nye2OhfHPq0uqI4nOnoWKhuAe gqdDUOHtkyCjayn03WYiv+QbxnMtaK5dI89J8UZA3UdWI0pIBCWm2sHK060rTBqr /1Ph/7XXwhDtmFUu+kpvMIl3rVZ8v9F6ItMsfWoCzEaMWEDJAdoCIQ== =UgYu -----END PGP SIGNATURE----- --k1lZvvs/B4yU6o8G--