spamming NDN on this list (was: Re: translation for Persian (FA))
"Philippe Verdy" <[email protected]> Sun, 21 Jan 2007 08:34:09 +0100
| Newsgroups | gmane.network.gnutella.limewire.translate |
|---|---|
| Organization | Ordinateur Personnel |
| Message-ID | <0bd701c73d2e$8a21a840$0a01a8c0@HARNON> |
Can the mailing list be checked so that we don't receive non-delivery reports from one of the subscribers, which appears to have a false email address, and whose emailserver constantly reply with the bogous address that I did not indicated (cammackmariaicllrvdge, apparently routed through mail.kaufmanisd.net, but this address does not resolve, not even its MX mail router) ?
This bogous reply attempts to use forged replies, as if it came "From:" my own ISP, but the routing is clear, my ISP does not use a "FirstClass" mailer for such replies, and it is not located at the indicated IP address [207.235.150.4] which does not belong to my ISP but is external, somewhere on the Internet.
This means that a subscriber to the translate list is the email address of a zomby running spamware, or a routing address used by a spammer, and that spammer is using possibly hijacked IP blocks.
Routing details of the NDN mail I receive each time are following...
Thanks, Philippe.
----
Note: looking into completewhois.com, I see that the address belongs to
----
OrgName: Education Service Center Region 10
OrgID: ES10
Address: 400 E. Spring Valley Rd.
Address: PO BOX 831300
City: Richardson
StateProv: TX
PostalCode: 75081
Country: US
Education Service Center Region 10 EDNET10 (NET-207-235-128-0-1)
207.235.128.0 - 207.235.255.255
Which is reassigned in a very strange way to:
Kaufman ISD ES10-21 (NET-207-235-150-0-1)
207.235.150.0 - 207.235.150.255OrgName: Kaufman ISD
OrgID: KAUFMA-1
Address: 1000 South Houston
City: Kaufman
StateProv: TX
PostalCode: 75142
Country: US
NetRange: 207.235.150.0 - 207.235.150.255
CIDR: 207.235.150.0/24
NetName: ES10-21
NetHandle: NET-207-235-150-0-1
Parent: NET-207-235-128-0-1
NetType: Reassigned
NameServer: NS1.EDNET10.NET
NameServer: NS4.EDNET10.NET
Comment:
RegDate: 1997-03-11
Updated: 2002-03-14
RTechHandle: JD18-ARIN
RTechName: Downing, Jack
RTechPhone: +1-972-348-1208
RTechEmail: [email protected]
However, the internet policy requires that reassigned IP addresses MUST run a whois server, and that the contact address is valid. Here the contact address is unreachable.
-----
Now the NDN message I get (the end snipped):
-----
Received: from mail.kaufmanisd.net (unknown [207.235.150.4])
by mwinf1012.orange.fr (SMTP Server) with ESMTP id 64EDB68001B5
for <[email protected]>; Sat, 20 Jan 2007 21:30:50 +0100 (CET)
X-ME-UUID: [email protected]
Message-id: <[email protected]>
Date: Sat, 20 Jan 2007 14:30:39 -0600
Subject: NDN: Re: [trans] translation for Persian (FA)
X-Mailer: FirstClass 8.3 (build 8.272)
X-FC-Icon-ID: 2031
X-FC-SERVER-TZ: 10486504
X-FC-MachineGenerated: true
To: "Philippe Verdy" <[email protected]>
From: [email protected]
MIME-Version: 1.0
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
X-me-spamlevel: not-spam
X-me-spamrating: 23.320704
X-Antivirus: AVG for E-mail 7.5.432 [268.17.1/640]
<?xml version=3D=221.0=22 encoding=3D=22ISO-8859-1=22?>
<=21DOCTYPE HTML PUBLIC =22-//W3C//DTD HTML 4.0 Transitional//EN=22>
<html>
<head>
<meta http-equiv=3D=22Content-Type=22 content=3D=22text/html; charset=3DISO=
-8859-1=22 />
<title></title>
<style type=3D=22text/css=22>
<=21--
body=7Bmargin-left:10px;margin-right:10px;margin-top:10px;margin-bottom:10p=
x;=7D
-->
</style>
</head>
<body marginleft=3D=2210=22 marginright=3D=2210=22 margintop=3D=2210=22 mar=
ginbottom=3D=2210=22>
<font face=3D=22Geneva=22 size=3D=22+0=22 color=3D=22=23000000=22 style=3D=
=22font-family:Geneva;font-size:10pt;color:=23000000;=22>Sorry. Your messag=
e could not be delivered to:<br />
<br />
cammackmariaicllrvdge (The name was not found at the remote site. Check tha=
t the name has been entered correctly.)<br />
(...snip...)
_______________________________________________
translate mailing list
[email protected]
http://lists.limewire.org/mailman/listinfo/translate