[Esd-l] Pattern for Badtrans.b

Brett Glass brett at lariat.org
Mon Nov 26 13:07:01 PST 2001


We're seeing a lot of Badtrans.b, so I've added a specific pattern for it 
to our "poisoned" file:

(HUMOR|DOCS|S3MSONG|ME_NUDE|CARD|SEARCHURL|YOU_ARE_FAT!|NEWS_DOC|IMAGES|PICS).(DOC|MP3|ZIP).(pif|scr)

Two questions:

1) Did I miss escaping any special characters (such as the exclamation 
point) in this?

2) Because we're seeing so much of this worm, would it be a good idea to 
add this to a separate recipe rather than to the poisoned file? (I've 
done this for Sircam.)

--Brett



More information about the esd-l mailing list