Re: [OT] OpenSRS, please unsubscribe the person using SpamBully

From: bill@daze.net
Date: Tue Sep 16 2003 - 19:12:05 EDT

Robert,

They are already investigating this rogue system and know who the ISP is.
But please forward any information you have including complete mail
headers to peter@tucows.com

Thanks!

On Tue, 16 Sep 2003, Robert L Mathews wrote:

> List Dad, can we remove the person from the list who has been using
> SpamBully to do the following three extremely stupid things for some time
> now, with no sign of catching a clue:
>
> 1. Sending a challenge/response to mailing list mail;
> 2. Setting the return address of that challenge to
> discuss-list@opensrs.org;
> 3. Forging the HELO sender of that challenge as "opensrs.org".
>
> Here's an example from a challenge I recently received when posting to
> discuss-list:
>
> >Received: from opensrs.org (unknown [66.117.242.230]) by fry.tigertech.net
> >(Postfix) with ESMTP id 60B9A3FC1C5 for <lists@tigertech.com>; Mon, 15 Sep
> >2003 23:25:10 -0700 (PDT)
> >From: discuss-list@opensrs.org
> >
> >My email program has recognized your email message
> >as a possible spam message. If you feel this was
> >an error, Please reply to this email with only
> >a password and read your password from the enclosed
> >image and then reply to this email and type
> >the password in the subject or body of the reply.
> >Thanks.
> >
> >This Email account is protected with Spam bully.
> >This message was autogenerated by http://www.spambully.com
>
> Because they're forging all the header info, it's hard to tell who is
> doing it, but the mail server at 66.117.242.230 identifies itself as
> test.osubucks.org. It appears that the MX host for osubucks.org is
> mail.osubucks.org, which is also 66.117.242.230.
>
> So the offender is most likely someone with an e-mail address
> @osubucks.org. Perhaps the person in charge of the list can search the
> subscribers for such an address and remove it?
>
> --
> Robert L Mathews, Tiger Technologies
> 

--
"If Verisign is the 'Value of Trust',
  then trust ain't worth much any more." - me

Spam Trap Mail Key: ASK and you shall receive

This archive was generated by hypermail 2.1.3 : Tue Oct 19 2004 - 23:37:47 EDT