from the quill of arielle@taronga.com (Stephanie da Silva) on scroll
<199604272342.SAA02684@bonkers.taronga.com>
> My spam detector just went off.
>
> Note the X-Mail-Agent: line and the forged headers.
Indeed. How does the following strike you...
# dig tnc.com mx
; <<>> DiG 2.1 <<>> tnc.com mx
;; res options: init recurs defnam dnsrch
;; got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 6
;; flags: qr rd ra; Ques: 1, Ans: 3, Auth: 2, Addit: 5
;; QUESTIONS:
;; tnc.com, type = MX, class = IN
;; ANSWERS:
tnc.com. 84088 MX 520 mail.istar.net.
tnc.com. 84088 MX 5 nisku.blackgold.ab.ca.
tnc.com. 84088 MX 510 mail.ottawa.istar.net.
# telnet nisku.blackgold.ab.ca. smtp
Trying 198.53.152.12...
Connected to nisku.blackgold.ab.ca.
Escape character is '^]'.
he220 nisku.blackgold.ab.ca ESMTP Sendmail 8.7.5 raring to go at Sat, 27
Apr 1996 18:49:54 -0600 (MDT)
helo ilinx.ilinx.com
250 nisku.blackgold.ab.ca hi there [204.174.66.10], wouldn't want to be in
your shoes.
vrfy 22ndcm
250 22nd Century Marketing <22ndcm@nisku.blackgold.ab.ca>
quit
221 nisku.blackgold.ab.ca Hanging up. Good-bye and good riddance.
Connection closed by foreign host.
A marketing company. Huh. Surprise, surprise.
It's also interesting that the message originated at U of Alabama in
Huntsville.
I just wonder if they are being subscribed to spam later, or somebody justs
wants to flood 22ndcm's mailbox.
b.
--
Brian J. Murrell brian@ilinx.com
InterLinx Support Services, Inc. brian@wimsey.com
North Vancouver, B.C. 604 983 UNIX
Platform and Brand Independent UNIX Support - R3.2 - R4 - BSD
References:
|
|
