RE: Sircam Virus and AS/400 -- MIDRANGE-L

Jim,

I understand that completely. I'm pointing it out more for those that
believe "because I use my as/400 for e-mail I'm impervious to viruses." I've
actually heard people say "You use Exchange? Don't you get viruses? We use
the native SMTP server in OS/400, we can't get them." Exchange and OS/400's
SMTP are just the transports, they'll move whatever you ask them to move.

Anyone using their AS/400 as their mail server should be running an
anti-virus SMTP gateway between it and the real world. Actually, that's not
just advice for the AS/400 world, _ANYONE_ running a mail server should be
running anti-virus software, it's just that the only anti-virus options
AS/400 people have are SMTP gateway options. I've not seen any anti-virus
software for the as/400 smtp server yet.

-Walden

-----Original Message-----
From: JIM LANGSTON [mailto:JLANGSTON@celsinc.com]
Sent: Thursday, July 26, 2001 4:17 PM
To: MIDRANGE-L@midrange.com
Subject: RE: Sircam Virus and AS/400


Walden,

OS/400 just had the SMTP server running that the machine with the virus used
to e-mail it out.

So, if your WinXX machine has a virus, and it sends this virus through
outlook to your ISP e-mail server which is, say, a linux box, the Received
line would be on the Linux Box.

The machine that actually has the virus is the 192.168.1.73 machine, which
is the received FROM machine.

Regards,

Jim Langston

-----Original Message-----
From: owner-midrange-l@midrange.com
[mailto:owner-midrange-l@midrange.com]On Behalf Of Walden H. Leverich
Sent: Thursday, July 26, 2001 12:01 PM
To: 'midrange-l@midrange.com'
Subject: Sircam Virus and AS/400


Names changed to protect the [not so] innocent, but otherwise the exact
headers that hit my machine last night. Note the second "Received:" line.

-Walden

-------------- Header Start --------------
Received: from xxxxxx.xxxxx_WEB (40324257.ptr.xxx.xxxxxxxx.net
[xx.50.xx.87]) by neptune.techsoftwareinc.com with SMTP (Microsoft Exchange
Internet Mail Service Version 5.5.2653.13)
        id PJ6L44VL; Wed, 25 Jul 2001 20:35:40 -0400
Received: from dxx-norxxxxx([192.168.1.73]) by xxxxxx.xxxxx_WEB (IBM OS/400
SMTP V04R05M00) with TCP; Wed, 25 Jul 2001 20:35:30 -0400
From: "Dxx Norxxxxx"<Dxx.Norxxxxx@xxxxx.COM>
To: WaldenL@techsoftinc.com
Subject: Vendor File 2001
date: Wed, 25 Jul 2001 20:39:20 -0400
MIME-Version: 1.0
X-MIMEOLE: Produced By Microsoft MimeOLE V5.50.4133.2400
X-Mailer: Microsoft Outlook Express 5.50.4133.2400
Content-Type: multipart/mixed;
boundary="----4D0AC425_Outlook_Express_message_boundary"
Content-Disposition: Multipart message
-------------- Header End --------------



------------
Walden H Leverich III
President
Tech Software
(516)627-3800 x11
WaldenL@TechSoftInc.com
http://www.TechSoftInc.com

+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator:
david@midrange.com
+---

+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator:
david@midrange.com
+---
+---
| This is the Midrange System Mailing List!
| To submit a new message, send your mail to MIDRANGE-L@midrange.com.
| To subscribe to this list send email to MIDRANGE-L-SUB@midrange.com.
| To unsubscribe from this list send email to MIDRANGE-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---