Great Circle Associates List-Managers
(September 1996)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: net.id forged subscriptions
From: "Michael C. Berch" <mcb @ postmodern . com>
Organization: Postmodern Consulting, California USA
Date: Sun, 01 Sep 1996 13:06:15 -0700
To: list-managers <list-managers @ greatcircle . com>
Reply-to: mcb @ postmodern . com

Eric J. Hansen wrote:
> 
> Has anyone gotten to the bottom of these forged subscription requests
> for addresses at net.id (various ISP's in India)... they're coming from
> msu.edu.  My Go West Digest mailing list has been getting bombarded with
> them.

Actually "net.id" is Indonesia, not India (.in). 

If you look closer at the header, most of them seem to have been
injected from dial-up SLIP ports (possibly in Indonesia) on ibm.net, and
sent *through* msu.edu. (The most recent one came via "dal.cleaf.com".)
I have sent 2 complaints to postmaster @
 ibm .
 net and gotten a fancy 
response with a trouble-ticket number but no human there has actually
responded, nor has anyone at msu.edu.  I am going to start sending
copies to the personal mailboxes of the domain contacts for both sites.

I can't imagine that given the message header, the ibm.net people can't
figure out who was using a particular SLIP port or dynamic IP address at
a particular time, and admonish their customer. 

Copies of each are below.  If IBM does not solve this in a reasonable
time I am going to turn up the heat.  

-- 
Michael C. Berch
mcb @
 postmodern .
 com / mcb @
 greatcircle .
 com


> Received: from pilot02.cl.msu.edu (pilot02.cl.msu.edu [35.9.5.12]) by 
>   server.postmodern.com (8.7.5/mcb-960422) with ESMTP id
>   XAA08486 for <majordomo @
 server .
 postmodern .
 com>; Sat, 31 Aug 1996 
>   23:37:10 -0700 (PDT)
> From: paratama @
 idola .
 net .
 id
> Received: from slip202-135-7-67.jk.id.ibm.net 
>   (slip202-135-7-67.jk.id.ibm.net [202.135.7.67]) by pilot02.cl.msu.edu 
>   (8.7.5/MSU-2.10) id CAA117582; Sun, 1 Sep 1996 02:37:03 -0400
> Message-Id: <199609010637 .
 CAA117582 @
 pilot02 .
 cl .
 msu .
 edu>
> DATE: 01 Sep 96 13:39:39
> TO: majordomo @
 server .
 postmodern .
 com
> SUBJECT: subscribe jitr 
> 
> subscribe jitr 


> Received: from dal.cleaf.com (root @
 dal .
 cleaf .
 com [206.136.88.2]) by 
>   server.postmodern.com (8.7.5/mcb-960422) with SMTP id XAA08497
>   for <majordomo @
 server .
 postmodern .
 com>; Sat, 31 Aug 1996 
>   23:40:51 -0700 (PDT)
> From: aal @
 idola .
 net .
 id
> Received: from  (slip202-135-7-67.jk.id.ibm.net [202.135.7.67]) by 
>   dal.cleaf.com (8.6.13/8.6.9) with SMTP id BAA30250 for
>   <majordomo @
 server .
 postmodern .
 com>; Sun, 1 Sep 1996 01:34:39 -0500
> Message-Id: <199609010634 .
 BAA30250 @
 dal .
 cleaf .
 com>
> DATE: 01 Sep 96 13:43:01
> TO: majordomo @
 server .
 postmodern .
 com
> SUBJECT: subscribe jitr 
> 
> subscribe jitr

Indexed By Date Previous: net.id forged subscriptions
From: "Eric J. Hansen" <eric @ worldmachine . com>
Next: Re: PAML mail
From: Brad Knowles <brad @ his . com>
Indexed By Thread Previous: net.id forged subscriptions
From: "Eric J. Hansen" <eric @ worldmachine . com>
Next: Re: PAML mail
From: Brad Knowles <brad @ his . com>

Google
 
Search Internet Search www.greatcircle.com