From owner-freebsd-questions Sun Aug 6 22:13:46 2000 Delivered-To: freebsd-questions@freebsd.org Received: from earth.wnm.net (earth.wnm.net [208.246.240.243]) by hub.freebsd.org (Postfix) with ESMTP id 0107037BC9D; Sun, 6 Aug 2000 22:13:43 -0700 (PDT) (envelope-from alex@wnm.net) Received: from localhost (alex@localhost) by earth.wnm.net (8.11.0/8.11.0) with ESMTP id e775E1C96788; Mon, 7 Aug 2000 00:14:01 -0500 (CDT) Date: Mon, 7 Aug 2000 00:14:00 -0500 (CDT) From: Alex Charalabidis To: Mark Ovens Cc: Jim C , freebsd-questions@FreeBSD.ORG Subject: Re: Possible hack attempt? Q&A In-Reply-To: <20000805225201.J254@parish> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=X-UNKNOWN Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Sat, 5 Aug 2000, Mark Ovens wrote: > On Sat, Aug 05, 2000 at 01:08:01PM -0400, Jim C wrote: > > I just found a rejected message from my fetchmail daemon and found it very > > interesting. However, since I am not an expert at sendmail hacks, Im > > curious to see what information I might be able to get from folks on this > > list. Here are a couple hearders from the message: > > > > I was going to say that it looks like what you see in the lists from > time to time when someone posts in Japanese and you only have Latin > charset support. Anyway, I loaded the message into emacs to type this > reply and guess what; it all appears as Japanese (sorry, I can't tell > you what it says :)). I never knew emacs could do this (on an English > system), cool. > What I find interesting is the MIME boundary which includes the phrase "om mani padme hum." Does fetchmail have a warped sense of humour or is someone trying to, err, hack you with Buddhist mantras? > > The original message was received at Fri, 4 Aug 2000 22:45:27 -0400 (EDT) > > from root@localhost.enterit.com [127.0.0.1] > > ----- The following addresses had permanent fatal errors ----- > > <$(B%V%C%/%J%$%D!&%W%m%8%'%/%H(B> > $(B> (B $(B----- Transcript(B $(Bof(B $(Bsession follows ----(B- > $(B> 550 (B<$(B%V%C%/%J%$%D!&%W%m%8%'%/%H(B>$(B... Host(B $(Bunknown (Name server: (B > $(B> (B$b$(B%v%c%/%j%$%d.uucp.: host(B $(Bnot found)(B > $(B> 550 ... User(B $(Bunknow(Bn > $(B> (B > $(B> > $(B> (B > $(B> From: FETCHMAIL-DAEMON@notjames.enterit.co(Bm > $(B> To: &%W%m%8%'%/%(BH@$(B%V%C%/%J%$%D.UUC(BP > $(B> MIME-Version: 1.(B0 > $(B> Content-Type: multipart/report; report-type=delivery-status;(B > $(B> (B $(Bboundary="om-mani-padme-hum-266-1-965443527"(B -ac -- ============================================================== Alex Charalabidis (AC8139) 5050 Poplar Ave, Ste 170 Systems Administrator Memphis, TN 38157 WebNet Memphis (901) 432 6000 Author, The Book of IRC http://www.bookofirc.com/ ============================================================== To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message