Re: [newbie] Has someone gotten to my box ?

2004-08-12 Thread deedee emrys
On Thu, 12 Aug 2004 20:09:22 -0400, Bryan Phinney wrote:

> On Thursday 12 August 2004 06:59 pm, Aron Smith wrote:
> 
> > Return-Path: <[EMAIL PROTECTED]>
> > Delivered-To: [EMAIL PROTECTED]
> > Received: (qmail 12759 invoked from network); 12 Aug 2004 20:39:51 -
> > Received: from stm.stmrewards3.com ([206.71.63.232])
> >   (envelope-sender
> > <[EMAIL PROTECTED]>)
> >   by mail7.speakeasy.net (qmail-ldap-1.03) with SMTP
> >   for <[EMAIL PROTECTED]>; 12 Aug 2004 20:39:36 -
> snip 
> The fact that you are getting this is pretty much proof that this is an 
> effective tactic.  All you need to do is add stmrewards3.com and their entire 
> netrange, for that matter, into a firewall deny list and simply drop their 
> shite at the door.
> 
> The slimy scum, BTW, is Silver Train Media


Clearly, Bryan recognizes these folks. In general, however, I would caution you to 
always check the IP address in the Received: header with Whois before you "deny" a 
domain name. The domain name can be forged, but the IP address in the Received: header 
that includes your e-mail address is the only part of an e-mail header that cannot be 
forged. If the domain name is forged, then denying it won't stop that particular 
problem. You would have to deny the IP address.

deedee

Registered Linux User #327485
Visit "WordStar & GNU/Linux"
http://www.wordstar2.com
Also, see the WordStar Users Group
http://cbabbage.wordstar2.com

-- 
___
Find what you are looking for with the Lycos Yellow Pages
http://r.lycos.com/r/yp_emailfooter/http://yellowpages.lycos.com/default.asp?SRC=lycos10



Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com
Join the Club : http://www.mandrakeclub.com



Re: [newbie] Has someone gotten to my box ?

2004-08-12 Thread Bryan Phinney
On Thursday 12 August 2004 06:59 pm, Aron Smith wrote:

> Return-Path: <[EMAIL PROTECTED]>
> Delivered-To: [EMAIL PROTECTED]
> Received: (qmail 12759 invoked from network); 12 Aug 2004 20:39:51 -
> Received: from stm.stmrewards3.com ([206.71.63.232])
>           (envelope-sender
> <[EMAIL PROTECTED]>)
>           by mail7.speakeasy.net (qmail-ldap-1.03) with SMTP
>           for <[EMAIL PROTECTED]>; 12 Aug 2004 20:39:36 -
> From: MyDishProvider  <[EMAIL PROTECTED]>
> Subject: GET SATELLITE TELEVISION & DIGITAL CAMERA NOW
> To: [EMAIL PROTECTED]
> MIME-Version: 1.0
> Content-Type: multipart/alternative;
>      boundary="109197525172863";
>      class-id=3:3BEpIS14smnSgTB6TBSjYITs:1449069
> Date: Thu, 12 Aug 2004 15:35:22 EST
> Message-ID: <[EMAIL PROTECTED]>


Aron, this is not a returned message.  This is a spam message.  They are 
trying to bypass mail filters by making it look like a MTA failure, figuring 
that most spam filters will pass failures directly to the admin or person 
they are directed out and not filter them out.

The fact that you are getting this is pretty much proof that this is an 
effective tactic.  All you need to do is add stmrewards3.com and their entire 
netrange, for that matter, into a firewall deny list and simply drop their 
shite at the door.

The slimy scum, BTW, is Silver Train Media, yet another batch of swamp scum 
parasite working out of California.  May the fleas of a thousand camels 
infest their armpits.  Spit, spit spit.

-- 
Bryan Phinney



Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com
Join the Club : http://www.mandrakeclub.com



Re: [newbie] Has someone gotten to my box ?

2004-08-12 Thread Aron Smith
On Thursday 12 August 2004 07:18 pm, et wrote:
> On Thursday 12 August 2004 18:59, Aron Smith wrote:
>
> might be you, might be someone who has your e-mail address in their lookout
> excuse mail program.
> do you have Apache orSquid running? have you tried having your box scanned
> by one of the web based port scanners?
I'm hoping that it's the former 
no I do not have apache or squid running
I'm on my backup box now due to Fscking up the otherone
very basic installation
>
> > i keep getting undelivered mail notices ..but I havent sent this mail
> > like this
> > -
> >-- --- mail failed, returning to sender
> >
> > From:
> > [EMAIL PROTECTED]
> >
> > Let's make this simple ... You can now receive a FREE  
> > Satellite TV System and 60 channels including Local Pogramming for
> > only $29.99 a month.  
> >  
> > BONUS: Receive a Digital Camera at No Cost.
> >  
> > CALL NOW  866-659-DISH (3474)  
> > http://stmrewards3.com:8080/track?m=1449069&l=1&.e=44P6BCzeqoDCIS4gS4CiKB
> >Sq


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com
Join the Club : http://www.mandrakeclub.com



Re: [newbie] Has someone gotten to my box ?

2004-08-12 Thread et
On Thursday 12 August 2004 18:59, Aron Smith wrote:

might be you, might be someone who has your e-mail address in their lookout 
excuse mail program.
do you have Apache orSquid running? have you tried having your box scanned by 
one of the web based port scanners?

> i keep getting undelivered mail notices ..but I havent sent this mail
> like this
> ---
>--- mail failed, returning to sender
>
> From:
> [EMAIL PROTECTED]
>
> Let's make this simple ... You can now receive a FREE  
> Satellite TV System and 60 channels including Local Pogramming for
> only $29.99 a month.  
>  
> BONUS: Receive a Digital Camera at No Cost.
>  
> CALL NOW  866-659-DISH (3474)  
> http://stmrewards3.com:8080/track?m=1449069&l=1&.e=44P6BCzeqoDCIS4gS4CiKBSq


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com
Join the Club : http://www.mandrakeclub.com