Don,

If you set a subscriber with an infected machine to NOMAIL, they can still post to the list and spread the worm.  Setting them to NOPOST will prevent an infected machine from distributing the virus to the machines of other subscribers.

Michael


At 06:08 PM 5/13/01 -0400, Don wrote:
>Michael McNeil <[log in to unmask]> wrote:
>
>>The single line is consistent with a worm that's been making the rounds
>>lately (can't remember the name).  Every time an infected computer sends an
>>email, other emails in their inbox is sent to the most recently sent-to
>>recipients, with the From line obstrufucated.
>
>Wrong. See the link I posted.
>
>>You need to try to identify your subscriber from the X-Sender line or
>>Received-from lines in their headers, set them to NOPOST, and ask them to
>>clean up their machine.
>
>Wrong. Setting to NOPOST won't do anything. You have to set them to NOMAIL.