Re: Insulin pumpers headers

Tim McGraw wrote:
> Mike Easter wrote:
>>
>> The main point of this new thread on the subject is that at the
>> present time, the IP server would not become listed by a spamcop
>> reporter reporting the IP mailing list items with a non-mailhosted
>> account.
>
> This is exactly how Mailman, Yahoo Groups, ya da ya da ya da work.
>
> Do the headers hint at what list software is being used?

No.

The server which is doing it is identified as pandora.is.bizsystems.com
which rDNSes to the nonrouting 192.168.1.190 and also calls itself by
another nonrouting in the chain-- which also calls itself in its helo
and a traceline bzs.org -- and which ultimately outputs as 69.3.95.130
which rDNSes to ns2.bizsystems.net  which was the blocklisted IP that
caused the problems earlier.

It also calls itself majordomo@localhost  and daemon@localhost  and
mentions itself in

X-Authentication-Warning: pandora.is.bizsystems.com: majordomo set
sender to [email protected] using -f

If you can sleuth anything by its id

Received: (from majordomo@localhost) by bzs.org (8.11.4/8.11.4) id
k41GkQp18393  for insulin-pumpers-outgoing; Mon, 1 May 2006
09:46:26 -0700

In fact, here are 3 contiguous headers involving all of that:

Received: (from majordomo@localhost) by bzs.org (8.11.4/8.11.4) id
k41GkQp18393 for insulin-pumpers-outgoing; Mon, 1 May 2006
09:46:26 -0700
X-Authentication-Warning: pandora.is.bizsystems.com: majordomo set
sender to [email protected] using -f
Received: from ns2.bizsystems.net (ns2.is.bizsystems.com
[192.168.1.171]) by bzs.org (8.11.4/8.11.4) with ESMTP id k41GkOh18386
for <[email protected]>; Mon, 1 May 2006 09:46:24 -0700

I removed the leading whitespaces for posting here



-- 
Mike Easter
kibitzer, not SC admin