KC Ferguson wrote:
<quote who="Don Levey">
fedora-list-admin@xxxxxxxxxx wrote:
On Tue, 03 Feb 2004 13:33:45 +0000 Paul Furness
<paul.furness@xxxxxxxxxxxxxxx> wrote:
I thought of that, but the headers are a bit confusing. The FROM
header is saying "postmaster@xxxxxxxxxx", but the originating mail
server isn't obviously one of theirs:
Received: from ns0.webmasters.com (ns.serverleasing.com
[66.118.156.161])
My guess is that Redhat (or whoever they buy their server space from)
was twiddling with their spam filter this morning and it went a bit
wrong for a while.
on reflection, i think you're correct. someone installed a change
without
adequate lab testing beforehand. on the one hand, it's kind of sad, on
the other hand, sometimes when people do that they pay me a lot of
money to clean up the mess afterwards, which isn't so sad.
While this is possible, webmasters.com has been implicated in spammish
activities in the past. They also seem to have a click-through affiliate
program, which makes it curious that the message (I got one too) tells
you to click through to their site to repost the message.
The redhat mx machines are in netspace near to webmasters (both in 66.
subnets -
66.118.156.0 - 66.118.157.255 for webmasters, 66.187.224.0 -
66.187.239.255
for
redhat), but this probably doesn't mean a thing. What's the possibility
that
an address at webmasters is subscribed to the list, and trying to get
click-throughs?
-Don
--
...go on and click through... i did... Though I didn't post again using
their "webmail", by visiting the link i confirmed my address. The next
message thread came directly to me from MCI...
...it seems as though my post to this list got routed to "MCI Internet
Abuse Investigations" <no-replies-please@xxxxxxx>
-IOSubSys
In the header below I've substituted mymta.xxxx-xxxx.net for My MTA.
Return-Path: <nobody@xxxxxx>
Received: from cmr2.ash.ops.us.uu.net (cmr2.ash.ops.us.uu.net [198.5.241.40])
by mymta.xxxx-xxxx.net (8.11.6/8.11.6) with ESMTP id i13FsVu24657
for <fedora-list@xxxxxxxxxxxxxxxxxxx>; Tue, 3 Feb 2004 09:54:32 -0600
Received: from cmr2.ash.ops.us.uu.net by cmr2.ash.ops.us.uu.net with ESMTP
(peer crosschecked as: localhost [127.0.0.1])
id QQqahj07597
for <fedora-list@xxxxxxxxxxxxxxxxxxx>; Tue, 3 Feb 2004 15:54:25 GMT
Received: from iaremedy.corp.us.uu.net by cmr2.ash.ops.us.uu.net with ESMTP
(peer crosschecked as: iaremedy.corp.us.uu.net [153.39.95.139])
id QQqahj07525
for <fedora-list@xxxxxxxxxxxxxxxxxxx>; Tue, 3 Feb 2004 15:54:21 GMT
Received: by iaremedy.corp.us.uu.net
id QQqahj27686;
Tue, 3 Feb 2004 10:50:36 -0500 (EST)
Date: Tue, 3 Feb 2004 10:50:36 -0500 (EST)
Message-Id: <QQqahj27686.200402031550@xxxxxxxxxxxxxxxxxxxxxxx>
From: no-replies-please@xxxxxxx (MCI Internet Abuse Investigations)
To: "me" <fedora-list@xxxxxxxxxxxxxxxxxxx>
Subject: Re: Re: Grub not starting Windows (B-TSI-013732597)
In-reply-to: Your message of "Tue, 3 Feb 2004 09:38:45 -0600 (CST)"
<<46967.66.58.42.210.1075822725.squirrel@xxxxxxxxxxxxxxxxxxx>>
Precedence: junk
Reply-to: no-replies-please@xxxxxxx
Errors-to: no-replies-please@xxxxxxx
I access this list through gmane so that I can use a newsgroup reader to
peruse the postings. I've been getting the spam messages as well.
Shannon McMackin
mcmackin@xxxxxxxxxxx
