[gentoo-dev] blocking virii-like attachments on gentoo.org email

[gentoo-dev] blocking virii-like attachments on gentoo.org email

[Kurt Lieber]

[-- Attachment #1: Type: text/plain, Size: 639 bytes --]

Folks --

We are looking at potentially blocking any/all attachments sent to
developer email addresses with one of the following extensions:

jse?|exe|com|cmd|shs|hta|bat|scr|pif

These extensions are most notable for a) not having much, if anything, to
do with Linux and b) having a whole lot to do with windows-based viruses.

The blocking would be more of a convenience to you all -- designed to get
rid of those virii from your inboxes.  However, I didn't want to implement
it without posting it for discussion here first.

Unless there's significant negative feedback on this idea, we will be
implementing it later this week.

--kurt

[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]

Re: [gentoo-dev] blocking virii-like attachments on gentoo.org email

[Mike Frysinger]

[-- Attachment #1: signed data --]
[-- Type: text/plain, Size: 448 bytes --]

On Tuesday 04 November 2003 08:29, Kurt Lieber wrote:
> Unless there's significant negative feedback on this idea, we will be
> implementing it later this week.

sounds good to me :)
question ... do we have spam-assasian or something running on the e-mail 
aliases ?  i'm wondering if the spam i get through ppc, games, portage, 
bug-wranglers, etc... etc... is just the small amount that got through or if 
nothing is filtered ...
-mike

[-- Attachment #2: signature --]
[-- Type: application/pgp-signature, Size: 827 bytes --]

Re: [gentoo-dev] blocking virii-like attachments on gentoo.org email

[Kurt Lieber]

[-- Attachment #1: Type: text/plain, Size: 665 bytes --]

On Tue, Nov 04, 2003 at 09:02:05AM -0500 or thereabouts, Mike Frysinger wrote:
> sounds good to me :)
> question ... do we have spam-assasian or something running on the e-mail 
> aliases ?  i'm wondering if the spam i get through ppc, games, portage, 
> bug-wranglers, etc... etc... is just the small amount that got through or if 
> nothing is filtered ...

SpamAssassin is installed on dev.gentoo.org, but it is up to each developer
to configure it and use it as they wish.  As spam filtering is not perfect,
I would rather leave the decision on whether or not to filter spam up to
the developer, rather than risk dropping legitimate email.

--kurt

[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]

Re: [gentoo-dev] blocking virii-like attachments on gentoo.org email

[Jeremy Maitin-Shepard]

Kurt Lieber <klieber@gentoo.org> writes:
> Folks --
> We are looking at potentially blocking any/all attachments sent to
> developer email addresses with one of the following extensions:

> jse?|exe|com|cmd|shs|hta|bat|scr|pif

> These extensions are most notable for a) not having much, if anything, to
> do with Linux and b) having a whole lot to do with windows-based
> viruses.

Although they likely have nothing to do with Linux, they are also
harmless to all decent Linux email clients and users.  Thus, I see no
need to block them specifically.  Like other spam filtering, I think
this should be left to individual developers.

-- 
Jeremy Maitin-Shepard

--
gentoo-dev@gentoo.org mailing list

Re: [gentoo-dev] blocking virii-like attachments on gentoo.org email

[Mike Frysinger]

[-- Attachment #1: signed data --]
[-- Type: text/plain, Size: 450 bytes --]

On Tuesday 04 November 2003 10:07, Jeremy Maitin-Shepard wrote:
> Although they likely have nothing to do with Linux, they are also
> harmless to all decent Linux email clients and users.  Thus, I see no
> need to block them specifically.  Like other spam filtering, I think
> this should be left to individual developers.

not all Gentoo developers utilize linux as their desktop machine and/or read 
e-mail on a non-windows machine.
-mike

[-- Attachment #2: signature --]
[-- Type: application/pgp-signature, Size: 827 bytes --]

Re: [gentoo-dev] blocking virii-like attachments on gentoo.org email

[Kumba]

Mike Frysinger wrote:
> On Tuesday 04 November 2003 10:07, Jeremy Maitin-Shepard wrote:
> 
>>Although they likely have nothing to do with Linux, they are also
>>harmless to all decent Linux email clients and users.  Thus, I see no
>>need to block them specifically.  Like other spam filtering, I think
>>this should be left to individual developers.
> 
> 
> not all Gentoo developers utilize linux as their desktop machine and/or read 
> e-mail on a non-windows machine.
> -mike

*waves*

Win2k SP4 Here for a desktop here, so yes, this would a useful I think. 
  Even though I'm usually smart enough to not execute such files 
attached to mail, I might still be tempted to look inside the files to 
analyze, which I did with Klez once.  Wound up getting the thing on my 
machine :P


--Kumba

-- 
"Such is oft the course of deeds that move the wheels of the world: 
small hands do them because they must, while the eyes of the great are 
elsewhere."  --Elrond

--
gentoo-dev@gentoo.org mailing list

Re: [gentoo-dev] blocking virii-like attachments on gentoo.org email

[Jason Rhinelander]

Instead of just blocking certain attachments, why not use some sort of
ClamAV (http://clamav.elektrapro.com/) virus scanning approach?  That
way, if, say, some Evolution-compatible virus is one day discovered that
uses .sh files, they would still be blocked, but ordinary .sh
attachments would still get through.

On Tue, 2003-11-04 at 05:29, Kurt Lieber wrote:
> Folks --
> 
> We are looking at potentially blocking any/all attachments sent to
> developer email addresses with one of the following extensions:
> 
> jse?|exe|com|cmd|shs|hta|bat|scr|pif
> 
> These extensions are most notable for a) not having much, if anything, to
> do with Linux and b) having a whole lot to do with windows-based viruses.
> 
> The blocking would be more of a convenience to you all -- designed to get
> rid of those virii from your inboxes.  However, I didn't want to implement
> it without posting it for discussion here first.
> 
> Unless there's significant negative feedback on this idea, we will be
> implementing it later this week.
> 
> --kurt
-- 
-- Jason Rhinelander
-- Gossamer Threads, Inc.


--
gentoo-dev@gentoo.org mailing list

Re: [gentoo-dev] blocking virii-like attachments on gentoo.org email

[Matthew Walker]

I'm all for this! My box already does it automagically when it recieves
mail. I never even hear about messages with those attachements.

Kurt Lieber said:
> Folks --
>
> We are looking at potentially blocking any/all attachments sent to
> developer email addresses with one of the following extensions:
>
> jse?|exe|com|cmd|shs|hta|bat|scr|pif
>
> These extensions are most notable for a) not having much, if anything, to
> do with Linux and b) having a whole lot to do with windows-based viruses.
>
> The blocking would be more of a convenience to you all -- designed to get
> rid of those virii from your inboxes.  However, I didn't want to implement
> it without posting it for discussion here first.
>
> Unless there's significant negative feedback on this idea, we will be
> implementing it later this week.
>
> --kurt
>


-- 
 Was I helpful?  Let others know:
 http://svcs.affero.net/rm.php?r=utoxin&p=main

--
gentoo-dev@gentoo.org mailing list

Re: [gentoo-dev] blocking virii-like attachments on gentoo.org email

[Bob Johnson]

> > We are looking at potentially blocking any/all attachments sent to
> > developer email addresses with one of the following extensions:
> >
> > jse?|exe|com|cmd|shs|hta|bat|scr|pif
> >

This would be great, im tired of downloading 50+ of these a day.

							Bob


--
gentoo-dev@gentoo.org mailing list

Re: [gentoo-dev] blocking virii-like attachments on gentoo.org email

[Luke-Jr]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Tuesday 04 November 2003 01:29 pm, Kurt Lieber wrote:
> We are looking at potentially blocking any/all attachments sent to
> developer email addresses with one of the following extensions:
>
> jse?|exe|com|cmd|shs|hta|bat|scr|pif
>
> These extensions are most notable for a) not having much, if anything, to
> do with Linux and b) having a whole lot to do with windows-based viruses.
>
> The blocking would be more of a convenience to you all -- designed to get
> rid of those virii from your inboxes.  However, I didn't want to implement
> it without posting it for discussion here first.
Except that some people, including me, *want* the virii in my inbox... :/
- -- 
Luke-Jr
Developer, Gentoo Linux
http://www.gentoo.org/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)

iD8DBQE/qBbyZl/BHdU+lYMRApxwAKCDlolIlmczSHaPoN/98gH/0GxsjgCdEW+y
gDIDd2LEDLvnwLmSQgGbnmg=
=MxVx
-----END PGP SIGNATURE-----


--
gentoo-dev@gentoo.org mailing list

Re: [gentoo-dev] blocking virii-like attachments on gentoo.org email

[Xavier Neys]

On Tue, 2003-11-04 at 22:15, Luke-Jr wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> On Tuesday 04 November 2003 01:29 pm, Kurt Lieber wrote:
> > We are looking at potentially blocking any/all attachments sent to
> > developer email addresses with one of the following extensions:
> >
> > jse?|exe|com|cmd|shs|hta|bat|scr|pif
> >
> > These extensions are most notable for a) not having much, if anything, to
> > do with Linux and b) having a whole lot to do with windows-based viruses.
> >
> > The blocking would be more of a convenience to you all -- designed to get
> > rid of those virii from your inboxes.  However, I didn't want to implement
> > it without posting it for discussion here first.
> Except that some people, including me, *want* the virii in my inbox... :/
Then we shall send them all to _your_ inbox ;-)

Now seriously, yes, please, by all means, prevent those from even
entering our mail system.
They are not harmless as mentioned previously.
They eat up Gentoo bandwidth on their way in.
They eat up Gentoo and users' bandwidth on their way to users when not
dealt with directly on d.g.o
They are a potential threat to users of the blue screen alternative OS.
IMHO, emails@gentoo.org should not be used to receive legitimate
attachments like those as they really have nothing to do with Gentoo
Linux.

Cheers,
-- 
 ______________________________ 
< Xavier Neys                  >
< Gentoo Documentation Project >
< http://www.gentoo.org        >
 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ 
             \ 
              \   ^__^
               \  (ôô)\_______
                  (__)\       )\/\
                      ||--www-|
                      ||     ||


--
gentoo-dev@gentoo.org mailing list

Re: [gentoo-dev] blocking virii-like attachments on gentoo.org email

[Svyatogor]

On Tuesday 04 November 2003 15:29, Kurt Lieber wrote:
> Unless there's significant negative feedback on this idea, we will be
> implementing it later this week.

"negative feedback"? are upu kidding? i'd love to see this done!


--
gentoo-dev@gentoo.org mailing list