TNT usually refers to the equipment, I believe it is a large-scale access hardware made by Ascend. The TNT line is for carriers and takes in multiple T1 or PRI lines. I'm not sure if those .da.uu.net or exclusively dial-up addresses, you might end up blocking their co-lo customers or someone like that whom you might want to be able to receive mail from. Maybe try forwarding the spam to [EMAIL PROTECTED] and see if they actually do something about it. They usually don't but it doesn't hurt to try... Dave -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Sunday, December 10, 2000 9:27 PM To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: what is *.da.uu.net? What kind of service is *.tnt.city.state.da.uu.net, or for example 1Cust147.tnt7.fort-lauderdale.fl.da.uu.net? SPAM from these addresses is not being blocked by DULS. traceroute suggests to me an above.net colo at uu.net? (my guess) We're running the collected SPAMPATCH patches. Does it make sense to block *.da.uu.net in badmailpatterns or might there better way of doing it with tcpserver? Frankly, depending on what tnt is I'm tempted to block all da.uu.net. The addresses along the path change with each instance; only the source address seems consistent. Can anyone tell me what this is and suggest the best approach to stopping this sort of SPAM? Thanks, cfm -- Christopher F. Miller, Publisher [EMAIL PROTECTED] MaineStreet Communications, Inc 208 Portland Road, Gray, ME 04039 1.207.657.5078 http://www.maine.com/ Content management, electronic commerce, internet integration, Debian linux >From [EMAIL PROTECTED] Sun Dec 10 15:43:17 2000 Return-Path: <[EMAIL PROTECTED]> Delivered-To: [EMAIL PROTECTED] Received: (qmail 1322 invoked from network); 10 Dec 2000 15:43:16 -0000 Received: from gray.maine.com (204.176.0.13) by sooshi.maine.com with SMTP; 10 Dec 2000 15:43:16 -0000 Received: (qmail 26767 invoked by alias); 10 Dec 2000 15:42:35 -0000 Delivered-To: [EMAIL PROTECTED] Received: (qmail 26749 invoked from network); 10 Dec 2000 15:42:33 -0000 Received: from co-location.ibtoday.iasiaworks.ne.kr (HELO ns.asiatrans.com) ([EMAIL PROTECTED]) by gray.maine.com with SMTP; 10 Dec 2000 15:42:33 -0000 Received: from mail1.joymail.com (1Cust147.tnt7.fort-lauderdale.fl.da.uu.net [63.25.243.147]) by ns.asiatrans.com (8.9.3/8.9.3) with SMTP id AAA15685 for <[EMAIL PROTECTED]>; Mon, 11 Dec 2000 00:40:45 +0900 Message-ID: <> From: "[EMAIL PROTECTED]" <[EMAIL PROTECTED]> Bcc: Subject: RE: Your Christmas Present. Date: Sun, 10 Dec 2000 10:20:52 -0400 (EDT) MIME-Version: 1.0 Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: 7bit Status: RO Content-Length: 509 Lines: 19 and: >From [EMAIL PROTECTED] Sun Dec 10 15:43:20 2000 Return-Path: <[EMAIL PROTECTED]> Delivered-To: [EMAIL PROTECTED] Received: (qmail 1334 invoked from network); 10 Dec 2000 15:43:19 -0000 Received: from gray.maine.com (204.176.0.13) by sooshi.maine.com with SMTP; 10 Dec 2000 15:43:19 -0000 Received: (qmail 26799 invoked by uid 501); 10 Dec 2000 15:42:38 -0000 Delivered-To: [EMAIL PROTECTED] Received: (qmail 26787 invoked from network); 10 Dec 2000 15:42:37 -0000 Received: from unknown (HELO mail.megatrans.co.kr) ([EMAIL PROTECTED]) by gray.maine.com with SMTP; 10 Dec 2000 15:42:37 -0000 Received: from mail1.joymail.com (1Cust147.tnt7.fort-lauderdale.fl.da.uu.net [63.25.243.147]) by mail.megatrans.co.kr (8.9.3/8.9.3) with SMTP id AAA17694 for <[EMAIL PROTECTED]>; Mon, 11 Dec 2000 00:43:18 +0900 Message-ID: <> From: "[EMAIL PROTECTED]" <[EMAIL PROTECTED]> Bcc: Subject: RE: Your Christmas Present. Date: Sun, 10 Dec 2000 10:20:53 -0400 (EDT) MIME-Version: 1.0 Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: 7bit Status: RO Content-Length: 547 Lines: 19 You have seen it on TV! Hard Copy, Howard Stern, Extra, Inside Edition, Etc... You have heard about it from friends! Now go and see for yourself! Click http://1082394634/hardcore_celeb/index.html The site they don't want you to see. The site that they want shut down, but the first amendment protects us! Click http://1082394634/hardcore_celeb/index.html If link does not work, cut and paste in your browsers window. remove [EMAIL PROTECTED] llllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllllll ll 91317
