AnsweredAssumed Answered

vrf FW: arbot Configuring/changing Access Databases from VEE

Question asked by VRFuser on Jun 8, 2004

Like • Show 0 Likes0
Comment • 6

>> I think it's just a matter of time before ZIPs will be allowed again.
> I sure hope so!
>> What's IT gonna do then, block ALL attachments???

Apparently the answer to the last question is that email gets shut down.

Testech is hosted on Ameritech.net and either they're getting really
persnickety or there's some huge problem (they say there is not). Between
yesterday and today I've missed at least two threads. I sent an ArBot
request over an hour ago (that LPT1 request gave it fits & I'm attempting to
find out why). I saw it come in and it answered in 15 seconds, but I'm still
waiting for the reply to Testech! Clearly, Ameritech, there is definitely
some massive problem with your POP3.

So in the mean time I'll be working on the ArBot request submission page at
oswegosw.com and beefing up the archive with missing VRF messages.
-SHAWN-

---
You are currently subscribed to vrf as: rsb@soco.agilent.com
To subscribe send a blank email to "join-vrf@it.lists.it.agilent.com".
To unsubscribe send a blank email to "leave-vrf@it.lists.it.agilent.com".
To send messages to this mailing list, email "vrf@agilent.com".
If you need help with the mailing list send a message to "owner-vrf@it.lists.it.agilent.com".

No one else has this question

Outcomes

6 Replies

VRFuser Jun 7, 2004 7:39 AM
Mark Correct
Correct Answer
GOOD LORD! Well I guess that didn't go over very well. It looks like plenty
of domains are now simply shutting off zip files.

Ok, THE MADNESS STOPS NOW!

Download the attachment at:

ftp://ftp.oswegosw.com/incoming/FindHelpFiles.zip

If anybody wants to publicly distribute anything having to do with VEE
(like, primarily attachments to messages that get pounced on by IT) you are
more than welcome to use oswegosw. Simply ftp them to the incoming directory
and include a link to your file as above. At the moment it's anonymous
writable, but as soon as I get around to it I'll set up an account for the
VRF so we can be left in peace from these idiots who keep trying to push
movies around
-SHAWN-

---
You are currently subscribed to vrf as: rsb@soco.agilent.com
To subscribe send a blank email to "join-vrf@it.lists.it.agilent.com".
To unsubscribe send a blank email to "leave-vrf@it.lists.it.agilent.com".
To send messages to this mailing list, email "vrf@agilent.com".
If you need help with the mailing list send a message to "owner-vrf@it.lists.it.agilent.com".
Like • Show 0 Likes0
Actions
VRFuser Jun 7, 2004 7:58 AM
Mark Correct
Correct Answer
GOOD LORD! Well I guess that didn't go over very well. It looks like plenty
of domains are now simply shutting off zip files.

Ok, THE MADNESS STOPS NOW!

Download the attachment at:

ftp://ftp.oswegosw.com/incoming/FindHelpFiles.zip

If anybody wants to publicly distribute anything having to do with VEE
(like, primarily attachments to messages that get pounced on by IT) you are
more than welcome to use oswegosw. Simply ftp them to the incoming directory
and include a link to your file as above. At the moment it's anonymous
writable, but as soon as I get around to it I'll set up an account for the
VRF so we can be left in peace from these idiots who keep trying to push
movies around
-SHAWN-

---
You are currently subscribed to vrf as: rsb@soco.agilent.com
To subscribe send a blank email to "join-vrf@it.lists.it.agilent.com".
To unsubscribe send a blank email to "leave-vrf@it.lists.it.agilent.com".
To send messages to this mailing list, email "vrf@agilent.com".
If you need help with the mailing list send a message to "owner-vrf@it.lists.it.agilent.com".
Like • Show 0 Likes0
Actions
VRFuser Jun 7, 2004 9:50 AM
Mark Correct
Correct Answer
> GOOD LORD! Well I guess that didn't go over very well. It looks like plenty
> of domains are now simply shutting off zip files.

There are a couple of issues with ZIP files that have not been resolved yet
in many installations. The first one is PW protected ZIPs. The Bagel worm is
distributed in a PW protected ZIP with the PW embedded in the text of the
email. If a user is stupid enough to use the PW on the ZIP, the worm gets
released. IT is pulling their hair out trying to stop it, hence the total
lockdown on all ZIPs. Still, there is no reason why they can't just block
PW ZIPs and let the ones they can successfully scan pass through.

The other one I know of is a little more interesting. It involves nested ZIPs.
Since the mail servers are programmed to open ZIPs and check the contents,
imagine a ZIP nested within a ZIP, nested within a ZIP, that has a payload of
a 10GB file containing nothing but spaces (or any other repeating character).
It takes a special program, but I have actually created one of these ZIPs
with just a few hundred bytes! These types of files can be used to easily
overwhelm a mail server and create a DOS situation.

I think it's just a matter of time before ZIPs will be allowed again. For
example, the "Network Box", when faced with a PW protected ZIP, will scan
the email text for the PW to unlock the ZIP and check for viruses. Pretty
smart, eh?

For now, everyone just renames the extensions anyway to get around it. Hey?
So what's to stop "Bagle2" from sending a bogus extension and telling a
"stupid user" in the email body to simply rename the file's extension and
run it? What's IT gonna do then, block ALL attachments???

Mike Groves

---
You are currently subscribed to vrf as: rsb@soco.agilent.com
To subscribe send a blank email to "join-vrf@it.lists.it.agilent.com".
To unsubscribe send a blank email to "leave-vrf@it.lists.it.agilent.com".
To send messages to this mailing list, email "vrf@agilent.com".
If you need help with the mailing list send a message to "owner-vrf@it.lists.it.agilent.com".
Like • Show 0 Likes0
Actions
VRFuser Jun 7, 2004 5:14 PM
Mark Correct
Correct Answer
> I think it's just a matter of time before ZIPs will be allowed again.

I sure hope so!

> What's IT gonna do then, block ALL attachments???

The pessimist in me says yes. Every time I notice a new clamp I think so. I
see a whole lot of clamps going on, but none coming off. IMO all this
automatic BS is useless. The problem lies with the uneducated user, and
that's where the problem has to be solved. There's just no substitute for a
brain.
-SHAWN-

---
You are currently subscribed to vrf as: rsb@soco.agilent.com
To subscribe send a blank email to "join-vrf@it.lists.it.agilent.com".
To unsubscribe send a blank email to "leave-vrf@it.lists.it.agilent.com".
To send messages to this mailing list, email "vrf@agilent.com".
If you need help with the mailing list send a message to "owner-vrf@it.lists.it.agilent.com".
Like • Show 0 Likes0
Actions
VRFuser Jun 7, 2004 6:40 PM
Mark Correct
Correct Answer
> For now, everyone just renames the extensions anyway to get around it.
Hey?
> So what's to stop "Bagle2" from sending a bogus extension and telling a
> "stupid user" in the email body to simply rename the file's extension and
> run it? What's IT gonna do then, block ALL attachments???

A better solution would be to post the following statement:

"To volunteer for the next round of layoffs be the first in
your group to rename an extension and run a virus program."

:-)

Les

---
You are currently subscribed to vrf as: rsb@soco.agilent.com
To subscribe send a blank email to "join-vrf@it.lists.it.agilent.com".
To unsubscribe send a blank email to "leave-vrf@it.lists.it.agilent.com".
To send messages to this mailing list, email "vrf@agilent.com".
If you need help with the mailing list send a message to "owner-vrf@it.lists.it.agilent.com".
Like • Show 0 Likes0
Actions
VRFuser Jun 7, 2004 7:53 PM
Mark Correct
Correct Answer
> "To volunteer for the next round of layoffs be the first in
> your group to rename an extension and run a virus program."

Heheh! That would definitely work.

OH MY! I just told everybody to rename a file for CtrlHelp! No worries
folks. Black Cat Software *never* releases any viruses of it's own. Though
if you think about it, technically several of my VEE programs are trojans
with dll payloads.
-SHAWN-

---
You are currently subscribed to vrf as: rsb@soco.agilent.com
To subscribe send a blank email to "join-vrf@it.lists.it.agilent.com".
To unsubscribe send a blank email to "leave-vrf@it.lists.it.agilent.com".
To send messages to this mailing list, email "vrf@agilent.com".
If you need help with the mailing list send a message to "owner-vrf@it.lists.it.agilent.com".
Like • Show 0 Likes0
Actions

vrf FW: arbot Configuring/changing Access Databases from VEE

Outcomes

Related Content

Recommended Content