Great Circle Associates List-Managers
(November 1999)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: Blocking bad attack out of mpx.com.au
From: Jeremy Blackman <loki @ maison-otaku . net>
Date: Tue, 16 Nov 1999 12:47:58 -0800 (PST)
To: Jeffrey Goldberg <J . Goldberg @ Cranfield . ac . uk>
Cc: abuse @ mpx . com . au, list-managers @ greatcircle . com, postmaster @ Cranfield . ac . uk
In-reply-to: <Pine.LNX.4.10.9911161715260.10032-100000@neumann.ccc.cranfield.ac.uk>

On Tue, 16 Nov 1999, Jeffrey Goldberg wrote:

> Someone (or their 'bot) is spamming majordomo based lists forging the
> addresses of legitimate subscribers.

I've seen this particular attack as well, on both my domains.  It's not
spamming just lists, it's apparently spamming any address it was able to
harvest from the 'net, as I've had the messages arrive to my personal
mailbox.  It's a (rather pathetic) attempt to make the message appear to
be coming from a user who mis-mailed someone, I think.  It appears to just
always take addresses its seen in similar situations (e.g. both addresses
appeared on the same webpage) and use them; thus how it ends up forging to
a mailing list.  :/
-- 
Jeremy Blackman - loki@maison-otaku.net / loki@listar.org / jeremy@lith.com
Lithtech Team, Monolith Productions      -- http://www.lith.com
Listar Developer                         -- http://www.listar.org



References:
Indexed By Date Previous: Re: Wassup spam [was Re: hey wassup uKCrypto ;)]
From: Daniel Reed <djr@narnia.n.ml.org>
Next: Re: AOL
From: Nick Simicich <njs@scifi.squawk.com>
Indexed By Thread Previous: Blocking bad attack out of mpx.com.au
From: Jeffrey Goldberg <J.Goldberg@Cranfield.ac.uk>
Next: Re: Blocking bad attack out of mpx.com.au
From: Info-LabVIEW List Maintainer <info-labview-request@fsm-1.pica.army.mil>

Google
 
Search Internet Search www.greatcircle.com