It appears that a new variant of Bagle/Beagle is out -- up to version
P by McAfee's counting.  This new one adds a new bogus From address,
e.g. [log in to unmask]   The mail team is looking into restoring
the known ID blocking.  (The mail team is also looking at a more
general solution, as suggested I think here by John Valenti:
check to see if a From mailbox exists and block delivery when
it doesn't.)

/rich

>Has this blocking been dropped?  My department just got hit this morning with a
> flood of these from [log in to unmask], [log in to unmask], etc.  (I identified the
> computer from its IP, and sent email to the user as well as the IP
> administrator.)
>
>At 01:18 PM 3/3/2004, Rich Wiggins wrote:
>>The mail team is now blocking mail from sending addresses known
>>to be bogus and used by the worm:
>>
>>[log in to unmask]
>>[log in to unmask]
>>[log in to unmask]
>>[log in to unmask]
>
>
>--Chris
>==============================================
>Chris Wolf                    Computer Service Manager
>Agricultural Economics        [log in to unmask]
>Michigan State University     517 353-5017