Dit een mail die ik naar Sini Castren heb verstuurd met nog wat aanvullingen. The maxima mail has caused some confusion for which I apologize. First of all there is no virus on the website anymore. There was, but that problem is solved now. It came in through the slideshow of the website. This module was made by a well respected programmer which was respected until in the latter half of last year he inserted some trojan code. The man is banned from the Joomla community and I have removed his slideshow and substituted it with another. The problem was that his code was not an actual virus (it is harmless, when it is not made use of by the controller) and as such not detected by our daily virus scan. Also the intrusion detection (every 6 hours) missed it, because it came as an normal Joomla update. The aftermath of this is that we are still blacklisted by Yandex/Sophos/Opera. They give a warning even though the code has been removed. Yesterday we tried to send a mail to 299 people about kings day. It stumbled on the fact that we were only allowed to send 120 emails/hour. In an attempt to retrieve mail addresses from the mailinglist koningsdag I send the who mail to the list. Something went wrong which is why instead of single reply from the list to me a mail went to the people on the list. This is not a virus, just my mistake. In the mean time the host has raised the limit to 300 mails/hour which is why we are now able to send mails to everyone on the list. A small side effect is still that once we do that we cannot send an association mail for an hour, because that would exceed our limit. The mailing list on emergency moderation which means that no mail gets sent through the list without my approval. We do get virussen now and then sent to us (the virus scanner gives a regular alert). As far as I can see from the virus scan our spam filter dumps them immediately into the trash. I also ban ip addresses who try to login into our website. It is something that I am only allowed to do, and I never make login mistakes. So any attempt is suspect and I respond in kind. 3788 ip addresses have been banned for this reason. In addition I am blocking addresses from Russia, Ukraine and China since they are not our target group and are high on the list of infected pcs. All this checking of ip addresses takes a lot of time and slows down the site, but after last years infections I feel that I cannot do otherwise. People who notice that they are banned from our site probably have a trojan themselves on their computer (or had). People that are banned can ask me to lift the ban if they give their ip address.
Posted on: Sat, 08 Mar 2014 06:59:15 +0000