[Esa-l] ANN: Sanitizer Update

[John D. Hardin]

On Fri, 12 May 2000, Brett Glass wrote:

> This new behavior (at least I *think* it's new; I don't recall
> seeing a mention of it before)

New with 1.104

> is worrisome. We don't necessarily want to notify the sender
> automatically, since many Trojans (e.g. PrettyPark) are
> autoresponders and will send mail back! What's more, the response
> will be a fresh copy of the Trojan, so the cycle will not be
> broken by an anti-looping header.

Autoresponder? You mean, if you're infected by PrettyPark it sits
there and watches you inbound mail spool and automatically replies
with an attack whenever a message is received??? {shudder}

Okay, I'll make that optional in 1.107

--
 John Hardin KA7OHZ   ICQ#15735746   http://www.wolfenet.com/~jhardin/
 jhardin at wolfenet.com      pgpk -a finger://gonzo.wolfenet.com/jhardin
  768: 0x41EA94F5 - A3 0C 5B C2 EF 0D 2C E5  E9 BF C8 33 A7 A9 CE 76 
 1024: 0xB8732E79 - 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  "Bother," said Pooh as he struggled with /etc/sendmail.cf, "it never
  does quite what I want. I wish Christopher Robin was here."
				-- Peter da Silva in a.s.r
-----------------------------------------------------------------------
   169 days until Daylight Savings Time ends