From owner-freebsd-security Wed Aug 5 05:37:37 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id FAA07619 for freebsd-security-outgoing; Wed, 5 Aug 1998 05:37:37 -0700 (PDT) (envelope-from owner-freebsd-security@FreeBSD.ORG) Received: from shrimp.dataplex.net (shrimp.dataplex.net [208.2.87.3]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id FAA07605 for ; Wed, 5 Aug 1998 05:37:32 -0700 (PDT) (envelope-from rkw@dataplex.net) Received: from [208.2.87.5] (user5.dataplex.net [208.2.87.5]) by shrimp.dataplex.net (8.8.8/8.8.5) with ESMTP id HAA22679 for ; Wed, 5 Aug 1998 07:37:19 -0500 (CDT) X-Sender: rkw@mail.dataplex.net Message-Id: Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Date: Wed, 5 Aug 1998 07:36:51 -0500 To: security@FreeBSD.ORG From: Richard Wackerbarth Subject: Please help me stop this Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Someone targeted a machine that I administer with SPAM. (Below, I have replaced the target with 999.999.999.999 targeted.machine.org to protect the victim) Can someone identify what they did to trick the machine into accepting this mail? V2 T902297845 K902316217 N12 P2731277 I4/19/20859 Mhost map: lookup (blueline.com): deferred Fwb $rSMTP $s999.999.999.999 $_usr31-dialup56.mix2.Atlanta.mci.net [166.55.58.184] S RPFD: H?P?Return-Path: HReceived: from 999.999.999.999 (usr31-dialup56.mix2.Atlanta.mci.net [166.55.58.184]) by targeted.machine.org (8.8.8/8.8.5) with SMTP id BAA21916; Wed, 5 Aug 1998 01:17:25 -0500 (CDT) H?F?From: FamilyNeeds@usa.net HDate: Wed, 05 Aug 98 02:19:13 EST HTo: yournews HSubject: ****FAMILY DENTAL NEEDS**** HMessage-ID: <9807241449.AA25980@doc.doc.com> To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe security" in the body of the message