Thwarting the attack
Regarding “Spam that delivers a pink slip” (http://www.networkworld.com/news/2006/110106-spam-spear-phishing.html): Of course, implementing SPF rules in the DNS zone and SPF filter at the gateway will completely eliminate this attack from ever working, because the sender will never be from a valid IP address. SPF rules do not have to be applied to all e-mail for this to be effective; it only needs to be applied to the receiving domain. Then the only way e-mail from the local domain may enter from the outside is if the outside machine is registered as a valid sender for that domain.
Armand Welsh
AVP, Information Security
State Street IMS
Irvine, Calif.
Never surrender
Regarding “Antiphishing fighters take on malware” (http://www.networkworld.com/news/2006/110306-antiphishing-fighters-take-on.html): We try and try, but phishers won’t cry!
Good initiative. All are. We mustn’t give up. But…there will never be the one-and-only solution against the cutting-edge scientists on the bad guys’ payroll. The crooks will make a small change of the malicious code and this good move will lead to just nothing.
William Palmborg
President
SecuraSystem
Madison, Miss.
