From: Josef 'Jupp' Schugt <jupp@...>
Date: 2003-09-21T23:52:38+09:00
Subject: Re: POP3Filter for SoBig.F Virus:

Saluton!

* Gavin Sinclair; 2003-09-20, 18:24 UTC:
> All of my virus-spam messages have been around 140Kb. One exception
> was about 15Kb.

Concerning 15 KB messages: Notify maintainer of mail server that
sends them about the misconfiguration. A mail server must not
identify an infected message, remove the infected part and deliver
the rest.

Even though most people are not aware of it: Besides the given high
probability that the message was sent unintentionally doing so can be
a crime in some countries (Germany for example).

As long as it is done to correctly deliver the message it is
acceptable that a mail server manipulates e-mails but as soon as
manipulation is done to change the information transmitted you are
possibly comitting a crime because

 - you may be suppressing information that *should* be send (e.g.
   forwarding some program that happens to result in a false alert)

 - you are creating a derived work of some copyrighted work without
   permission of the copyright holder.

etc. Of course this is only what you officially say. More annoying is
that the removal of the attachment breaks any worm defense that makes
use of the fact that you rarely receive messages of more than 100 KB
that you actually want to recieve.

Note: On 2003-09-24 the European Parliament is going to decide on a
      software patent directive. To protest against this my web pages
      will offline until (and including) 2003-09-24 (UTC). This
      includes but is not limited to the extmath, rcalc, and tldlib
      homepage.

Gis,

Josef 'Jupp' Schugt
-- 
Warning to Outlook, Outlook Express and Windows users: In the 9/11
aftermath many countries decided on new anti-terror laws. If you put
web sites or mailboxes under fire this may be seen as a terroristic
act that potentially may buy you a one-way ticket to Guantanamo Bay.