Great Circle Associates List-Managers
(November 1999)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Blocking bad attack out of mpx.com.au
From: Jeffrey Goldberg <J . Goldberg @ Cranfield . ac . uk>
Organization: Cranfield University Computer Centre
Date: Tue, 16 Nov 1999 17:21:37 +0000 (GMT)
To: abuse @ mpx . com . au
Cc: list-managers @ greatcircle . com, postmaster @ Cranfield . ac . uk
Reply-to: Jeffrey Goldberg <J . Goldberg @ Cranfield . ac . uk>

Someone (or their 'bot) is spamming majordomo based lists forging the
addresses of legitimate subscribers.

Below is one instance (not a list managed at Cranfield, but one that I
am a member of).

I have heard unconfirmed reports that other lists have been similarly hit,
but have not yet confirmed that those were also out of mpx.com.au

Nonetheless, I am blocking all mail to Cranfield.ac.uk from mpx.com.au
(except to abuse or postmaster) as a preventative measure, until I hear
from mpx or learn that the problem is resolved.

-j

--
Jeffrey Goldberg                +44 (0)1234 750 111 x 2826
 Assistant Postmaster            Cranfield Computer Centre
 J.Goldberg@Cranfield.ac.uk     http://WWW.Cranfield.ac.uk/public/cc/cc047/
Relativism is the triumph of authority over truth, convention over justice.

---------- Forwarded message ----------
Return-path: <owner-ukcrypto@maillist.ox.ac.uk>
Envelope-to: J.Goldberg@cranfield.ac.uk
Delivery-date: Tue, 16 Nov 1999 15:58:48 +0000
Received: from bagpuss.oucs.ox.ac.uk ([163.1.2.37] ident=exim)
	by euler.central.cranfield.ac.uk with esmtp (Exim 2.12 #1)
	id 11nl0J-00018B-00
	for J.Goldberg@cranfield.ac.uk; Tue, 16 Nov 1999 15:58:47 +0000
Received: from majordom by bagpuss.oucs.ox.ac.uk with local (Exim 2.12 #1)
	id 11nku9-0003CC-00
	for ukcrypto-outgoing@bagpuss.oucs.ox.ac.uk; Tue, 16 Nov 1999 15:52:25 +0000
Received: from local2.mpx.com.au ([203.29.192.98] helo=mailarray.mpx.com.au)
	by bagpuss.oucs.ox.ac.uk with esmtp (Exim 2.12 #1)
	id 11nku2-0003Bz-00
	for ukcrypto@maillist.ox.ac.uk; Tue, 16 Nov 1999 15:52:24 +0000
Received: from ---(really [198.142.239.33]) by mailarray.mpx.com.au
	via smtpd with smtp
	id <m11nksV-000JVmC@mailarray.mpx.com.au>
	for <ukcrypto@maillist.ox.ac.uk>; Wed, 17 Nov 1999 02:50:43 +1100
	(/\##/\ Smail3.1.30.13.Y2K #30.35 built 1-mar-01)
Message-Id: <m11nksV-000JVmC@mailarray.mpx.com.au>
Date: Wed, 17 Nov 1999 02:50:43 +1100
To: ukcrypto@maillist.ox.ac.uk
From: rjb@pierconsulting.com
Subject: hey wassup uKCrypto ;)
Sender: owner-ukcrypto@maillist.ox.ac.uk
Precedence: bulk
Reply-To: ukcrypto@maillist.ox.ac.uk

here is the site you wanted... http://SEX.Interactwithme.com it's the one that gives you free membership access (all hacked) to abotu 300 membership based sex sites. k bye...
ps: why r u using maillist.ox.ac.uk now? it doens't make sence, anyway *bye*...




Follow-Ups:
Indexed By Date Previous: Re: AOL
From: "Nathan J. Mehl" <memory@blank.org>
Next: Re: Wassup spam [was Re: hey wassup uKCrypto ;)]
From: Jeffrey Goldberg <J.Goldberg@Cranfield.ac.uk>
Indexed By Thread Previous: Re: AOL
From: Nick Simicich <njs@scifi.squawk.com>
Next: Re: Blocking bad attack out of mpx.com.au
From: Jeremy Blackman <loki@maison-otaku.net>

Google
 
Search Internet Search www.greatcircle.com