Several people have been asking about these two posts that appeared on
the list yesterday.

Do they contain viruses? Yes. It appears that they got past the list's
filters via incorrect MIME headers. Philip Mak is looking into whether
we can adjust the software to block any such posts in the future.

Is there any danger to your system? Not really. The same MIME errors
that got them past the list will make it unlikely that your system will
have any idea what to do with them. As long as you don't decide to run
them through a base64 decoder, the only danger is that they'll clog up
your email box.

What should you do? Simply deleting the posts is one option. If you're
motivated to do more than that, you can write to the abuse address of
the ISP through whose server the messages were sent. Do NOT write to the
senders indicated in the From: headers of the messages; these addresses
are forged, and the people at these addresses most likely had nothing to
do with the messages. To find the correct address to write to, you need
to view the full headers of the message. How to do this varies with
different email clients, but doing it should show you something like
this:


Envelope-to: gary@garykleppe.org
Received: from lina.aaanime.net ([66.28.98.52])
	by zork.plover.net with smtp (Exim 3.35 #1 (Debian))
	id 17bpKC-0002xO-00
	for <gary@garykleppe.org>; Mon, 05 Aug 2002 16:23:36 -0500
Received: (qmail 11216 invoked from network); 5 Aug 2002 21:22:19 -0000
Received: from localhost (HELO lina.aaanime.net) (127.0.0.1)
  by lina.aaanime.net with SMTP; 5 Aug 2002 21:22:19 -0000
Received: with ECARTIS (v1.0.0; list ffml); Mon, 05 Aug 2002 17:21:51
-0400 (EDT)
Received: (qmail 11194 invoked by uid 2537); 5 Aug 2002 21:21:50 -0000
Delivered-To: anifics2-ffml@anifics.com
Received: (qmail 11190 invoked from network); 5 Aug 2002 21:21:49 -0000
Received: from out004pub.verizon.net (HELO out004.verizon.net)
(206.46.170.142)
  by lina.aaanime.net with SMTP; 5 Aug 2002 21:21:49 -0000
Received: from Xsek ([208.0.9.176]) by out004.verizon.net
          (InterMail vM.5.01.05.09 201-253-122-126-109-20020611) with
SMTP
          id <20020805212232.JAAG10030.out004.verizon.net@Xsek>
          for <ffml@anifics.com>; Mon, 5 Aug 2002 16:22:32 -0500
From: Jedediah <Jedediah@tri-countynet.net>
To: ffml@anifics.com
Subject: [FFML] The Garden of Eden
MIME-Version: 1.0
Content-Type: text/plain
Message-Id: <20020805212232.JAAG10030.out004.verizon.net@Xsek>
Date: Mon, 5 Aug 2002 16:22:33 -0500
Content-Transfer-Encoding: 8bit
X-archive-position: 2744
X-ecartis-version: Ecartis v1.0.0
Sender: ffml-bounce@anifics.com
Errors-to: ffml-bounce@anifics.com
Precedence: bulk
X-list: ffml
Status: 


The above are the actual headers from the first post yesterday. In this
case, we can see (line 14) that out004pub.verizon.net as the email
server that was used to mail the message, and so <abuse@verizon.net> is
the address to which we would complain. Be sure to forward them the
complete headers (as above), but there's no need to send all the
base64-encoded junk in the body of the message. (Don't complain to
lina.aaanime.net; that's us, and we're already aware of the problem.
^_^;;)

As always, please email <ffml-admins@anifics.com> with any further
questions or concerns.


-Gary Kleppe, FFML Admin Team
-incorrectly MIMEd as man/walking-against-wind

             .---Anime/Manga Fanfiction Mailing List----.
             | Administrators - ffml-admins@anifics.com |
             | Unsubscribing - ffml-request@anifics.com |
             |     Put 'unsubscribe' in the subject     |
             `---- http://ffml.anifics.com/faq.txt -----'