Great Circle Associates List-Managers
(November 1999)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: Wassup spam [was Re: hey wassup uKCrypto ;)]
From: Jeffrey Goldberg <J . Goldberg @ Cranfield . ac . uk>
Organization: Cranfield University Computer Centre
Date: Tue, 16 Nov 1999 17:55:01 +0000 (GMT)
To: jah @ alien . bt . co . uk
Cc: owner-ukcrypto @ maillist . ox . ac . uk, owner-cypherpunks @ cyberpass . net, list-managers @ greatcircle . com, abuse @ mpx . com . au
In-reply-to: <Pine.LNX.4.10.9911161724040.5722-100000@nowhere.alien.bt.co.uk>
Reply-to: Jeffrey Goldberg <J . Goldberg @ Cranfield . ac . uk>

On Tue, 16 Nov 1999 jah@alien.bt.co.uk wrote:

> On Tue, 16 Nov 1999, Jeffrey Goldberg wrote:

> > [...]  Do you have full headers of the bot's mailings?
> > 
> > Are they all from the same network, mpx.net.au?
> 
> All the ones I have here are.

Now the next question:  Are all the hit lists majordomo lists?

> I must admit I blindly deleted a whole pile of them before I started
> to find them interesting.

I understand.

As, I've said, Cranfield.ac.uk now blocks mail from mpx.com.au (at some
local cost, as we get legit mail from their users).  This is a
preventative measure.  Cranfield lists have not been hit yet AFAIK.

> I've have asked others for more samples.

> I am starting to think it is remarkably restrained for a bot though!
> 
> Headers at the bottom.

Thanks.  PS:  the cypherpunks list owner should check the majordomo FAQ
to learn how to conceal the outgoing alias.

> >From bill.stewart@pobox.com Tue Nov 16 17:23:36 1999
> Return-Path: <owner-cypherpunks@cyberpass.net>
> Received: from dent.axion.bt.co.uk(really [132.146.16.161]) by
>     mail.alien.bt.co.uk
> 	via sendmail with esmtp
> 	id <m11nlil-001ky7C@mail.alien.bt.co.uk>
> 	for <jah@alien.bt.co.uk>; Tue, 16 Nov 1999 16:44:43 +0000 (GMT)
> 	(Smail-3.2 1996-Jul-4 #4 built 1999-Oct-11)
> Received: from sirius.infonex.com by dent with Internet with SMTP;
>           Tue, 16 Nov 1999 16:28:19 +0000
> Received: (from majordom@localhost) by sirius.infonex.com (8.8.8/8.8.8) 
>           id HAA06760 [...]
>           Tue, 16 Nov 1999 07:52:49 -0800 (PST)
> Received: (from cpunks@localhost) by sirius.infonex.com (8.8.8/8.8.8) 
>           id HAA06708 for cypherpunks@infonex.com;
>           Tue, 16 Nov 1999 07:52:14 -0800 (PST)
> Received: from cyberpass.net (cyberpass.net [209.75.197.3]) 
>           by sirius.infonex.com (8.8.8/8.8.8) with ESMTP id HAA06689 
>           for <cpunks@sirius.infonex.com>;
>           Tue, 16 Nov 1999 07:51:54 -0800 (PST)
> Received: from mailarray.mpx.com.au (local2.mpx.com.au [203.29.192.98]) 
>           by cyberpass.net (8.8.8/8.7.3) with ESMTP id HAA21330 
>           for <cypherpunks@cyberpass.net>;
>           Tue, 16 Nov 1999 07:55:23 -0800 (PST)
> From: bill.stewart@pobox.com
> Received: from ---(really [198.142.239.33]) by mailarray.mpx.com.au via smtpd 
>           with smtp id <m11nktZ-000JW1C@mailarray.mpx.com.au> 
>           for <cypherpunks@cyberpass.net>;
>           Wed,
>      17 Nov 1999 02:51:49 +1100 (/\##/\ Smail3.1.30.13.Y2K #30.35 built
>     1-mar-01)
> Message-Id: <m11nktZ-000JW1C@mailarray.mpx.com.au>
> Date: Wed, 17 Nov 1999 02:51:49 +1100
> To: cypherpunks@cyberpass.net
> Subject: hey wassup CypHErpunKs ;)
> Sender: owner-cypherpunks@cyberpass.net
> Precedence: first-class
> Reply-To: bill.stewart@pobox.com
> X-List: cypherpunks@cyberpass.net
> X-Loop: cypherpunks@cyberpass.net


-- 
Jeffrey Goldberg                +44 (0)1234 750 111 x 2826
 Cranfield Computer Centre      FAX         751 814
 J.Goldberg@Cranfield.ac.uk     http://WWW.Cranfield.ac.uk/public/cc/cc047/
Relativism is the triumph of authority over truth, convention over justice.



Follow-Ups:
References:
Indexed By Date Previous: Blocking bad attack out of mpx.com.au
From: Jeffrey Goldberg <J.Goldberg@Cranfield.ac.uk>
Next: Re: AOL
From: Daniel Reed <djr@narnia.n.ml.org>
Indexed By Thread Previous: Wassup spam [was Re: hey wassup uKCrypto ;)]
From: <jah@alien.bt.co.uk>
Next: Re: Wassup spam [was Re: hey wassup uKCrypto ;)]
From: Daniel Reed <djr@narnia.n.ml.org>

Google
 
Search Internet Search www.greatcircle.com