[Avcheck] bad virus-alert

Ralf Hildebrandt Ralf.Hildebrandt@charite.de
Thu, 18 Apr 2002 09:58:07 +0200


On Thu, Apr 18, 2002 at 09:16:00AM +0200, Peter Mann wrote:
> Heyaaa!!!
> 
> how to add machine.domain.name and ip address of infected machine to
> alerts sending to sender, recipient and administrator?
> 
> "virus coming from user@dom.ain - machine.domain.name [1.2.3.4]"
> 
> new viruses choose random recipient AND SENDER addresses - this may
> confuse some users (fake senders)

You're right! It's a good idea.
 
-- 
Ralf Hildebrandt (Im Auftrag des Referat V A)   Ralf.Hildebrandt@charite.de
Charite Campus Virchow-Klinikum                 Tel.  +49 (0)30-450 570-155
Referat V A - Kommunikationsnetze -             Fax.  +49 (0)30-450 570-916
Why you can't find your system administrators:
rcp $FAV_RESTAURANT:$FAV_FOOD /dev/stomach