Yes, send-pr results in virus emails

Clifton Royston cliftonr at tikitechnologies.com
Mon Jan 26 16:02:52 PST 2004


  OK, on January 23 I sent in a PR from a development-only machine
using the send-pr command.  This machine happens to actually receive
mail because I'm testing mail server software on it, but I have never
used it to send mail, and I have never gotten mail on that machine
other than via sending test messages to myself.  So this address did
*not* exist in anybody's address book before I sent a PR from it, OK?

  About 8 minutes after the PR acknowledgment from GNATS I got the
first virus response of Worm/Gibe.F, originating from
cpe-138-217-67-84.vic.bigpond.net.au [138.217.67.84].  I've totalled 20
virus emails in the past few days, from around the world.  Not
horrendous, but annoying and "bad press".

  I don't think there need be any more doubt that PRs are being
forwarded to virus-infected clients.  I have no idea who to take this
up with, but I would really appreciate it if somebody could track
these folks down and unsubscribe them until they can get their
machines cleaned up.  Rather than harass all the readers with the
list, I've compiled one and I'll send it to an appropriate
administrator for the PR list when I find one.

  -- Clifton

-- 
          Clifton Royston  --  cliftonr at tikitechnologies.com 
         Tiki Technologies Lead Programmer/Software Architect
Did you ever fly a kite in bed?  Did you ever walk with ten cats on your head?
  Did you ever milk this kind of cow?  Well we can do it.  We know how.
If you never did, you should.  These things are fun, and fun is good.
                                                                 -- Dr. Seuss


More information about the freebsd-hackers mailing list