[SWLUG] thoughts on mydoom

[Peter Joseph]

On Thu, 2004-01-29 at 11:36, nat wrote:

> easily solved, strip off all windows executable files on the mail server
> before the message reaches the user; .exe .com .vbs .bat .pif .scr etc.

Or remove any un-compressed attachments totally, if you want to send
executables via attachment then they should be compressed anyway!!
> 

> after that i force conversion of any html emails to plain text and push any
> attachments through a virus checker that's definitions are scheduled to
> update hourly.

Aiee! Thats a bit harsh :D dont any of your users get peeved at not
getting pretty HTML e-mails :D 


> 
> this doesnt stop the never ending problem of users click 'yes' on activex
> components like gator and stuff though.

Yes, thats a big problem, for my windows machine that the missus uses
i'm forced to load it up with about 3 spyware sweepers and current
antivirus to counter act things like that. Even with education about
NEVER clicking yes to any popup in a grey box various spyware seems to
make itself onto the machine. There is really little hope for a system
like Windows it seems to have terrible security holes in everything!

Peter
-- 
Peter Joseph   598454F1                      Debian GNU/Linux Maintainer
kneecaps at shockpulse.co.uk                          kneecaps at debian.org
http://www.shockpulse.co.uk/                    http://www.debian.org/
   "If there were no god, we would have to invent him." - Voltaire