[lwip-users] Re: [lwip] Proposal - change lwIP List Server

[Adam Dunkels]

Hi!

On Friday 10 May 2002 11.16, you wrote:
> I propose that, given the amount of email viruses and trojans that are
> being sent on this list that it be moved to a subscription only or
> moderated list server such as yahoo groups, or that the current list
> servers' configuration be modified appropriately.
>
> This will never remove the possibility of a virus getting on the list, but
> at least Adam and/or other list administrators will have control over who
> belongs to the list.

Indeed, those viruses have become a problem. This Klez virus is escpecially 
nasty because it fakes the From: header in the messages. Even those of us who 
are not infected by the virus are directly affected by it. A few days ago, a 
forged message that appeared to be from me was sent to the list. Furthermore, 
since I am the owner of the mailing list, I get about 40-50 notification 
emails from virus scanners for every virus that manages to propagate itself 
through the list.

One particularly evil breed of the virus disguises itself as a program that 
supposedly is sent out to cure the infection. But instead of removing the 
virus, it initiates yet another attack by sending out the same program and 
message to other potential victims (with faked From-addresses in the 
messages). I believe such an incarnation of the virus was sent through this 
list yesterday and I urge everyone to NOT run the program, but delete it 
immediately!

I do not think that this problem is solved by moving the lwip list over to 
Yahoo's mailing list service, however, as there probably are ways to achieve 
spam and virus blocking with the current setup. It would also be an 
inconvenience for the nearly 200 members of this list. Of course, there are 
advantages with Yahoo (such as the ability to search the archives), but I 
feel that the disadvantages overweigh.

I will look into the current list configuration and see if there is anything 
I can do to lessen the amount of viruses. Currently, this mailing list allows 
anyone, even non-subscribers, to post to the list. Changing the list model so 
that only subscribed members can post might be one way of reducing not only 
the amount of viruses, but also the probability of spam. Such a model will 
not entirely solve the virus problem becuase the Klez virus forges the From: 
headers, but it might hopefully reduce the amount of virus messages that are 
sent through the list. 

I will also talk to the guys here at SICS that maintain the mailing list 
server to see if they have any good ideas.

/adam
-- 
Adam Dunkels <address@hidden>
http://www.sics.se/~adam
[This message was sent through the lwip discussion list.]