From owner-freebsd-hackers Sun Dec 14 01:53:03 1997 Return-Path: Received: (from root@localhost) by hub.freebsd.org (8.8.7/8.8.7) id BAA25068 for hackers-outgoing; Sun, 14 Dec 1997 01:53:03 -0800 (PST) (envelope-from owner-freebsd-hackers) Received: from verdi.nethelp.no (verdi.nethelp.no [195.1.171.130]) by hub.freebsd.org (8.8.7/8.8.7) with SMTP id BAA25053 for ; Sun, 14 Dec 1997 01:52:54 -0800 (PST) (envelope-from sthaug@nethelp.no) From: sthaug@nethelp.no Received: (qmail 26134 invoked by uid 1001); 14 Dec 1997 09:52:49 +0000 (GMT) To: jgrosch@superior.mooseriver.com Cc: hackers@FreeBSD.ORG Subject: Re: weird IP address In-Reply-To: Your message of "Sun, 14 Dec 1997 00:45:46 -0800" References: <19971214004546.03594@mooseriver.com> X-Mailer: Mew version 1.05+ on Emacs 19.28.2 Mime-Version: 1.0 Content-Type: Text/Plain; charset=us-ascii Date: Sun, 14 Dec 1997 10:52:49 +0100 Message-ID: <26132.882093169@verdi.nethelp.no> Sender: owner-freebsd-hackers@FreeBSD.ORG X-Loop: FreeBSD.org Precedence: bulk > While sending out hate mail to the latest round of spammers I got an answer > back from nslookup that I just do not understand. I got spam from > MoneyMakers.com. When I did an nslookup I got the following: > > superior% nslookup moneymakers.com > Server: superior.mooseriver.com > Address: 205.166.121.5 > > Non-authoritative answer: > Name: moneymakers.com > Address: 1.1.1.1 My guess is that they're doing that precisely to keep you from responding. You'll find: moneymakers.com. 288800 MX 10 mail.moneymakers.com. ftp.moneymakers.com. 288800 A 1.1.1.1 mail.moneymakers.com. 288800 A 1.1.1.1 www.moneymakers.com. 288800 A 1.1.1.1 So they're doing everything they can to prevent you from responding to their spam. Try looking at the Received: lines for some (possibly) more relevant info. Steinar Haug, Nethelp consulting, sthaug@nethelp.no