; -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf
> Of Richard D G Cox
> Sent: Monday, June 16, 2003 9:32 PM
> To: [EMAIL PROTECTED]
> Subject: Re: Spam from weird IP 118.189.136.119
>
>
>
> On Mon, 16 Jun 2003 17:33:11 +0200,
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
> Richard D G Cox
> Sent: Monday, June 16, 2003 9:32 PM
> To: [EMAIL PROTECTED]
> Subject: Re: Spam from weird IP 118.189.136.119
>
>
>
> On Mon, 16 Jun 2003 17:33:11 +0200, "Pascal Gloor"
: Re: Spam from weird IP 118.189.136.119
On Mon, 16 Jun 2003 17:33:11 +0200, "Pascal Gloor"
<[EMAIL PROTECTED]> wrote:
| Getting SPAM from 118.189.136.119 relayed by rr.com ?
|
| this network is not allocated, nor announced. I have been looking
| everywhere to find if it ha
On Mon, 16 Jun 2003 15:47 (UT), [EMAIL PROTECTED] wrote:
| I've never heard of the NNFMP protocol
It's the latest spammer exploit the "Network Nonsense - Fools Most People"
exploit. You've not been hit by that one yet, then?
On Mon, 16 Jun 2003 17:47 (UT), Wayne Tucker <[EMAIL PROTECTED]> wrot
Look carefully at the headers again. I have seen a few like this running
around. The IP listed is not actually an IP, but marked as a supposed
FQDN. The ones I have seen appear to originate out of brazil for the most
part. I do not have a sample handy at the moment, but if someone wants it
(for wh
On Mon, 16 Jun 2003 17:33:11 +0200, "Pascal Gloor" <[EMAIL PROTECTED]> wrote:
| Getting SPAM from 118.189.136.119 relayed by rr.com ?
|
| this network is not allocated, nor announced. I have been looking everywhere
| to find if it has been announced (historical bgp update databases, like RIS
| RI
On Mon, 16 Jun 2003, Frank Louwers wrote:
>
> >
> > "Received: from [118.189.136.119] by smtp-server1.cfl.rr.com with NNFMP;"
> ^
> what's the next/previous line? (The one just above it)
ditto. I think you've been fooled
>
> "Received: from [118.189.136.119] by smtp-server1.cfl.rr.com with NNFMP;"
what's the next/previous line? (The one just above it)
Kind Regards,
Frank Louwers
--
Openminds bvbawww.openminds.be
Tweebruggenstraat 16 - 9000 Gent - Belgium
Getting SPAM from 118.189.136.119 relayed by rr.com ?
this network is not allocated, nor announced. I have been looking everywhere
to find if it has been announced (historical bgp update databases, like RIS
RIPE / CIDR REPORT / etc..)... I didnt found anything this probably mean
rr.com is rou
