Re: someone compromised your mailing list

From: Valdis.Kletnieksat_private
Date: Thu Mar 07 2002 - 11:34:47 PST

  • Next message: jmjonesat_private: "Re: someone compromised your mailing list"

    On Thu, 07 Mar 2002 14:16:12 EST, jmjonesat_private said:
    > 
    > 
    > I am on the list, (I think) and I don't believe I ever received the email
    > noted in this "notice."
    > 
    > Possibly, wirex's system (hardware/software/people) stopped it before it
    > hit the whole list, or I filtered it out; but I checked the MTA logs and
    > it doesn't appear to be there.
    
    Well.. here's what *my* copy's headers had in them (not sure why the 10h24m
    delay between mail.wirex.com and mithra.wirex.com on the way in though).
    
    Return-path: <linux-security-module-adminat_private>
    Received: from vt.edu (gkar.cc.vt.edu [198.82.161.196]) 	by foo-bar-baz.cc.vt.edu (8.12.2/8.12.2) with ESMTP id g275m14f008375 	for <valdis@foo-bar-baz.cc.vt.edu>; Thu, 7 Mar 2002 00:48:01 -0500
    Received: from steiner.cc.vt.edu ([198.82.161.185])  by gkar.cc.vt.edu (Sun Internet Mail Server sims.3.5.2001.05.04.11.50.p10)  with ESMTP id <0GSL00EA99G1Z2at_private> for  valdis@foo-bar-baz.cc.vt.edu; Thu,  7 Mar 2002 00:48:01 -0500 (EST)
    Received: from mail.wirex.com (mithra.wirex.com [65.102.14.2])  by steiner.cc.vt.edu (Mirapoint Messaging Server MOS 3.1.0.36-EA)  with ESMTP id AAF49911; Thu, 07 Mar 2002 00:48:14 -0500 (EST)
    Received: from mithra.wirex.com (mithra.wirex.com [127.0.0.1])  by mail.wirex.com (Postfix) with ESMTP id 3F03C43E04; Wed,  06 Mar 2002 21:43:35 -0800 (PST)
    Received: from mail.de (unknown [211.114.58.177]) by mail.wirex.com (Postfix)  with SMTP id 3CB0943DEA for <linux-security-moduleat_private>; Wed,  06 Mar 2002 11:19:45 -0800 (PST)
    Sender: linux-security-module-adminat_private
    Errors-to: linux-security-module-adminat_private
    Reply-to: wendy8723at_private
    Message-id: <022d83a11c4b$7631d1a5$5de73ba3@jecfqx>
    
    And surprise, surprise:
    
    114.211.in-addr.arpa.   43200   IN      SOA     ns.krnic.net. domain.krnic.net. 2001081323 21600 900 604800 43200
    
    Somehow, I don't think much will get done about this spammer.
    
    /Valdis
    
    
    
    
    
    

    _______________________________________________ linux-security-module mailing list linux-security-moduleat_private http://mail.wirex.com/mailman/listinfo/linux-security-module



    This archive was generated by hypermail 2b30 : Thu Mar 07 2002 - 11:36:46 PST