Great Circle Associates List-Managers
(August 1996)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Subscription forgeries from ibm.net to net.id addresses
From: "Michael C. Berch" <mcb @ postmodern . com>
Organization: Postmodern Consulting, California USA
Date: Thu, 29 Aug 1996 14:25:02 -0700
To: list-managers <list-managers @ greatcircle . com>
Reply-to: mcb @ postmodern . com

Watch out for forged subscriptions targeted at users in the net.id
(Indonesia) domain, particularly wasantara.net.id and idola.net.id. 
There was a whole batch of them a few weeks ago, mostly aimed at groups
of music-related lists, and it seems to have started again.  

Here is what I sent to the postmaster at ibm.net, where the messages
seem to originate from.

-- 
Michael C. Berch
mcb @
 postmodern .
 com / mcb @
 greatcircle .
 com

-----------------------------------------------------

Subject:Continued subscription forgeries from ibm.net via msu.net
Date: Thu, 29 Aug 1996 14:21:00 -0700
From: "Michael C. Berch" <mcb @
 postmodern .
 com>
Organization:Postmodern Consulting, California USA
To: postmaster @
 ibm .
 net, postmaster @
 msu .
 edu

We are continuing to get mailing list subscription forgeries for users
in the wasantara.net.id and idola.et.id domains from dial-up SLIP
accounts on ibm.net, apparently in Indonesia, posted through msu.edu.  
While the subscriptions have been blocked, they are an annoyance and
failure to stop this abuse may result in blocking mailing list
privileges for all users in the ibm.net and msu.edu domains.  This has
been an ongoing problem for several weeks and this is my second report. 

The SLIP port identifier and IP address are in the headers. It should
not be difficult to determine who was using this dialup at the time the
messages were posted.   Appended are two of the latest batch. 

-- 
Michael C. Berch
Postmaster and List Manager
mcb @
 postmodern .
 com

cc: List-Managers mailing list

-------------



Received: from pilot02.cl.msu.edu (pilot02.cl.msu.edu [35.9.5.12]) by
server.postmodern.com (8.7.5/mcb-960422) with ESMTP id DAA27710 for
<majordomo @
 server .
 postmodern .
 com>; Thu, 29 Aug 1996 03:32:17 -0700 (PDT)
From: supervisor @
 medan .
 wasantara .
 net .
 id
Received: from slip202-135-7-87.jk.id.ibm.net
(slip202-135-7-87.jk.id.ibm.net [202.135.7.87])
          by pilot02.cl.msu.edu (8.7.5/MSU-2.10)
          id GAA115635; Thu, 29 Aug 1996 06:32:13 -0400
Message-Id: <199608291032 .
 GAA115635 @
 pilot02 .
 cl .
 msu .
 edu>
DATE: 29 Agust 96 17:34:40
TO: majordomo @
 server .
 postmodern .
 com
SUBJECT: subscribe jitr 

subscribe jitr 


Received: from pilot02.cl.msu.edu (pilot02.cl.msu.edu [35.9.5.12]) by
server.postmodern.com (8.7.5/mcb-960422) with ESMTP id DAA27722 for
<majordomo @
 server .
 postmodern .
 com>; Thu, 29 Aug 1996 03:35:34 -0700 (PDT)
From: orbandi @
 medan .
 wasantara .
 net .
 id
Received: from slip202-135-7-87.jk.id.ibm.net
(slip202-135-7-87.jk.id.ibm.net [202.135.7.87])
          by pilot02.cl.msu.edu (8.7.5/MSU-2.10)
          id GAA115565; Thu, 29 Aug 1996 06:35:26 -0400
Message-Id: <199608291035 .
 GAA115565 @
 pilot02 .
 cl .
 msu .
 edu>
DATE: 29 Agust 96 17:37:53
TO: majordomo @
 server .
 postmodern .
 com
SUBJECT: subscribe jitr 

subscribe jitr


Follow-Ups:
Indexed By Date Previous: Re: Strange code...
From: "Dr. Manion" <CEO @ Citadel . Net>
Next: Re: Subscription forgeries from ibm.net to net.id addresses
From: Stan Ryckman <stanr @ sunspot . tiac . net>
Indexed By Thread Previous: Re: Strange code...
From: "Dr. Manion" <CEO @ Citadel . Net>
Next: Re: Subscription forgeries from ibm.net to net.id addresses
From: Stan Ryckman <stanr @ sunspot . tiac . net>

Google
 
Search Internet Search www.greatcircle.com