From owner-freebsd-chat Tue Nov 25 20:44:16 1997 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.7/8.8.7) id UAA16478 for chat-outgoing; Tue, 25 Nov 1997 20:44:16 -0800 (PST) (envelope-from owner-freebsd-chat@FreeBSD.ORG) Received: from pluto.globalserve.net (pluto.globalserve.net [209.90.144.63]) by hub.freebsd.org (8.8.7/8.8.7) with ESMTP id UAA16409; Tue, 25 Nov 1997 20:44:02 -0800 (PST) (envelope-from philipp@pluto.globalserve.net) Received: from localhost (philipp@localhost) by pluto.globalserve.net (8.8.8/8.8.8) with SMTP id XAA07074; Tue, 25 Nov 1997 23:43:47 -0500 (EST) (envelope-from philipp@pluto.globalserve.net) Date: Tue, 25 Nov 1997 23:43:47 -0500 (EST) From: Peter Philipp To: "Jonathan M. Bresler" cc: freebsd-chat@FreeBSD.ORG Subject: Re: We will mail 4 U In-Reply-To: <199711260114.RAA25617@hub.freebsd.org> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-chat@FreeBSD.ORG Precedence: bulk This is outrageous, would you please not post to all FreeBSD lists as I frankly don't care much for this spam. It takes one bad person to start spamming all lists but it's silly to continue the thread by replying to it by carbon-copying all lists again. Peter On Tue, 25 Nov 1997, Jonathan M. Bresler wrote: > Terry Lambert wrote: > > > > > From searching several phone directories online, it appears that the person > > > who sent this spam did so on behalf of: > > > > > > Jack Luke > > > 39 Panda Av > > > Middleburg, FL 32068-4765 > > > (904) 282-0945 > > > > It is pretty obvious (to me, anyway) that this is a targetted trojan of > > the type that was used to flood ml.org. > > > > Also, you will note that the putative "relay host" is running a highly > > hacked version of sendmail (EHLO it). > > > > "hacked version of sendmail" ????? > EHLO is standard esmtp. > this is old stuff already. > see the rfc's (rfc1825 perhaps) > > two relay hosts were the ns servers for amgen.com. > why are nameservers configured to relay mail? > jmb >