What kind of service is *.tnt.city.state.da.uu.net, or for example
1Cust147.tnt7.fort-lauderdale.fl.da.uu.net?
SPAM from these addresses is not being blocked by DULS. traceroute
suggests to me an above.net colo at uu.net? (my guess)
We're running the collected SPAMPATCH patches. Does it make
sense to block *.da.uu.net in badmailpatterns or might there better
way of doing it with tcpserver? Frankly, depending on what tnt
is I'm tempted to block all da.uu.net. The addresses
along the path change with each instance; only the source
address seems consistent.
Can anyone tell me what this is and suggest the best approach to stopping
this sort of SPAM?
Thanks, cfm
--
Christopher F. Miller, Publisher [EMAIL PROTECTED]
MaineStreet Communications, Inc 208 Portland Road, Gray, ME 04039
1.207.657.5078 http://www.maine.com/
Content management, electronic commerce, internet integration, Debian linux
>From [EMAIL PROTECTED] Sun Dec 10 15:43:17 2000
Return-Path: <[EMAIL PROTECTED]>
Delivered-To: [EMAIL PROTECTED]
Received: (qmail 1322 invoked from network); 10 Dec 2000 15:43:16 -0000
Received: from gray.maine.com (204.176.0.13)
by sooshi.maine.com with SMTP; 10 Dec 2000 15:43:16 -0000
Received: (qmail 26767 invoked by alias); 10 Dec 2000 15:42:35 -0000
Delivered-To: [EMAIL PROTECTED]
Received: (qmail 26749 invoked from network); 10 Dec 2000 15:42:33 -0000
Received: from co-location.ibtoday.iasiaworks.ne.kr (HELO ns.asiatrans.com)
([EMAIL PROTECTED])
by gray.maine.com with SMTP; 10 Dec 2000 15:42:33 -0000
Received: from mail1.joymail.com (1Cust147.tnt7.fort-lauderdale.fl.da.uu.net
[63.25.243.147])
by ns.asiatrans.com (8.9.3/8.9.3) with SMTP id AAA15685
for <[EMAIL PROTECTED]>; Mon, 11 Dec 2000 00:40:45 +0900
Message-ID: <>
From: "[EMAIL PROTECTED]" <[EMAIL PROTECTED]>
Bcc:
Subject: RE: Your Christmas Present.
Date: Sun, 10 Dec 2000 10:20:52 -0400 (EDT)
MIME-Version: 1.0
Content-Type: text/plain; charset="US-ASCII"
Content-Transfer-Encoding: 7bit
Status: RO
Content-Length: 509
Lines: 19
and:
>From [EMAIL PROTECTED] Sun Dec 10 15:43:20 2000
Return-Path: <[EMAIL PROTECTED]>
Delivered-To: [EMAIL PROTECTED]
Received: (qmail 1334 invoked from network); 10 Dec 2000 15:43:19 -0000
Received: from gray.maine.com (204.176.0.13)
by sooshi.maine.com with SMTP; 10 Dec 2000 15:43:19 -0000
Received: (qmail 26799 invoked by uid 501); 10 Dec 2000 15:42:38 -0000
Delivered-To: [EMAIL PROTECTED]
Received: (qmail 26787 invoked from network); 10 Dec 2000 15:42:37 -0000
Received: from unknown (HELO mail.megatrans.co.kr) ([EMAIL PROTECTED])
by gray.maine.com with SMTP; 10 Dec 2000 15:42:37 -0000
Received: from mail1.joymail.com (1Cust147.tnt7.fort-lauderdale.fl.da.uu.net
[63.25.243.147])
by mail.megatrans.co.kr (8.9.3/8.9.3) with SMTP id AAA17694
for <[EMAIL PROTECTED]>; Mon, 11 Dec 2000 00:43:18 +0900
Message-ID: <>
From: "[EMAIL PROTECTED]" <[EMAIL PROTECTED]>
Bcc:
Subject: RE: Your Christmas Present.
Date: Sun, 10 Dec 2000 10:20:53 -0400 (EDT)
MIME-Version: 1.0
Content-Type: text/plain; charset="US-ASCII"
Content-Transfer-Encoding: 7bit
Status: RO
Content-Length: 547
Lines: 19
You have seen it on TV! Hard Copy, Howard Stern, Extra, Inside Edition, Etc...
You have heard about it from friends!
Now go and see for yourself!
Click http://1082394634/hardcore_celeb/index.html
The site they don't want you to see.
The site that they want shut down, but the first amendment protects us!
Click http://1082394634/hardcore_celeb/index.html
If link does not work, cut and paste in your browsers window.
remove [EMAIL PROTECTED]
llllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllll
91317
