Firewalls posters.
Please accept our most sincere apologies for the abundance of failed mail
bounces. We had an administrative oversight yesterday afternoon the removed
the write permissions on a firewalls subscriber's mail box.
Please note, this is not an attack as described below.
As soon as we became aware of the problem we fixed it and responed to the
posting. If the condition occurs again please advise.
As for our contact information - we have grown rapidly over the past two
years and moved office twice. During this time we overlooked our InterNIC
contact info. We are updating the NIC now. Once again we apologise.
Best Regards,
Greg Clark.
_
CPLabs.
+1-408-457-4510
>
> Folks:
>
> In response to a message I posted earlier on firewalls, I have been
> bounced back from the same system over 20 times in the last 1.5 hours.
>
> I have written to their postmaster and the individuals listed in
> the InterNIC whois database.
>
> I have called the listed phone number -- it's disconnected...
>
> I called information -- no record found of them...
>
> Guess I have to black-list their IP, but this is a last resort...
>
> I'm also on the verge of reporting this to CERT as a mail-bomb
> style of attack (especially if, when I get home later tonight there are
> 100's of them).
>
> Can anybody figure out who the firewalls receipient was from the
> header so we can get this clown off of the list???
>
> InterNIC Information:
>
> (ttyp4 @
sunthing) sjs> whois cplabs.com
> Communications Propriety Ltd. (CPLABS-DOM)
> 2681 Fresno St.
> Santa Cruz, CA 95062
>
> Domain Name: CPLABS.COM
>
> Administrative Contact:
> Clark, Greg (GC78) greg @
CPLABS .
COM
> (408) 475-7421
> Technical Contact, Zone Contact:
> Clark, Tanya (TC111) tanya @
CPLABS .
COM
> (408) 475-7421
>
> Record last updated on 12-Oct-94.
> Record created on 12-Oct-94.
>
> Mail Header (snipped the content):
>
> From sjs @
sunthing .
sjsinc .
com@cplabs.com Fri May 17 11:54:20 1996
> Received: from cplabs.com by sunthing.sjsinc.com
> Mailer: sendmail (8.6.12/8.6.9)
> Protocol: SMTP
> Id: LAA05882; Fri, 17 May 1996 11:54:15 -0700
> From: sjs @
sunthing .
sjsinc .
com@cplabs.com
> Message-Id: <199605171854 .
LAA05882 @
sjsinc .
com>
> Report-Version: 2
> >To: sjs @
sunthing .
sjsinc .
com
> To: sjs @
sunthing .
sjsinc .
com
> Date: Fri May 17 17:53:56 GMT 1996
> Original-Date: Fri, 17 May 1996 09:33:55 -0700
> Original-Subject: C Compilers (was Re: FWTK: Bug in authsrv.c)
> End-of-Header:
> Not-Delivered-To: due to 11 Transfer Failure
> ORIGINAL MESSAGE ATTACHED
> (rmail: Error # 22 'Surrogate command failed', rc = 3)
> En-Route-To: fw
> ======= Surrogate command =======
> :/usr/lib/mail/mail_pipe -r fw -R GreatCircle.COM!firewalls-owner -c text -S C Compilers (was Re: FWTK: Bug in authsrv.c)
> ==== Start of stderr ===
> :UX:mail_pipe: ERROR: Mail for fw not being piped
> ==== End of stderr ===
> En-Route-To: fw
> Content-Length: 3067
> Content-Type: text
References:
-
Mailloop Alert
From: sjs @
sunthing .
sjsinc .
com (Stefan Jon Silverman)
|
|
