From: Sigfred Håversen (suselistmumak.com)
Date: Tue Jan 06 2004 - 17:01:35 CST

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

On Tuesday 06 January 2004 22:43, Hubertus Haniel wrote:
> On Tue, 6 Jan 2004, Philippe Vogel wrote:
> > Date: Tue, 6 Jan 2004 22:36:27 +0100
> > From: Philippe Vogel <filiaapfreenet.de>
> > To: suse-securitysuse.com

> > Here do I see from wich account this comes?

It's maillistpromotionfactory.net that is spamming. Just try to send
an e-mail to that adress, and you'll see ;-)

>
> I have put that domain in my reject list but I am afraid it will propably
> not be of much use

Nope, but putting the IP 66.193.15.252 (promotionfactory.net) in a tarpit
at least give me some childish satisfaction :

Jan 6 23:11:27 odin spamd[23902]: 66.193.15.252: <maillistpromotionfactory.net> -> <suselistmumak.com>
Jan 6 23:23:47 odin spamd[23902]: 66.193.15.252: disconnected after 961 seconds.

As of a demo of the tarpit, you can try "telnet smtp.mumak.com 8025".
The tarpit is the OpenBSD spamd daemon :

http://www.openbsd.org/cgi-bin/man.cgi?query=spamd&apropos=0&sektion=0&manpath=OpenBSD+Current&arch=i386&format=html

/Sigfred

--
Check the headers for your unsubscription address
For additional commands, e-mail: suse-security-helpsuse.com
Security-related bug reports go to securitysuse.de, not here

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]