This message was sent to another list I'm on, I thought it might be
of interest to list managers...
Ed Hew is alleged to have written:
->
-> Apologies to those hereabouts not concerned with mailing lists.
-> Those that are will appreciate the heads-up.
->
-> A denial-of-service attack appears to be underway via mailing
-> list subscriptions. I recognize that such do not respect
-> national boundaries. Here's what I have so far ...
-> --
-> Ed Hew <edhew@xenitec.on.ca> XeniTec Consulting & rlogin Corporation
-> SCO newsgroup godfather, biz FAQ maintainer, biz newsgroup authority
-> moderator: comp.unix.sco.announce, can.uucp.maps | (yes,+other hats)
-> ----
-> } From runner.sorosis.ro!root Thu Jan 23 13:17:29 1997
-> } Received: from [193.226.30.6] by xenitec.xenitec.on.ca id aa09907;
-> } 23 Jan 97 13:17 EST
-> } Received: from main (commserv.sorosis.ro [193.226.30.3])
-> } by runner.sorosis.ro (8.8.4/8.8.4) with SMTP
-> } id UAA06159; Thu, 23 Jan 1997 20:14:41 +0200
-> } Date: Thu, 23 Jan 1997 20:14:41 +0200
-> } From: Superuser - runner <root@runner.sorosis.ro>
-> } Message-Id: <199701231814.UAA06159@runner.sorosis.ro>
-> } To: undisclosed-recipients:;
-> }
-> } subscribe com-adm@mail.cccis.ro
-> }
-> } subscribe support@cccis.ro
-> }
-> } subscribe gafton@sorosis.ro
-> }
-> } subscribe com@mail.cccis.ro
-> }
-> } subscribe ngo@mail.cccis.ro
-> }
-> } subscribe bbs@mail.cccis.ro
-> }
-> } subscribe edu@mail.cccis.ro
-> }
-> } subscribe staff@mail.cccsi.ro
-> }
-> }-- End of excerpt from Superuser - runner
->
-> =====
-> } From: Cristian Gafton <gafton@sorosis.ro>
-> } Date: Fri, 24 Jan 1997 07:49:45 +0200 (EET)
-> }
-> } Thank you very much for catching up this mail, it is indeed a try to
-> } subscribe several lists from my own servers to other mailing lists.
-> }
-> } Please DO NOT subscribe any addresses to any mailing lists.
-> }
-> } Thank you,
-> }
-> } Cristian Gafton
-> =====
-> } Date: Fri, 24 Jan 1997 08:34:08 +0200 (EET)
-> } From: Cristian Gafton <gafton@sorosis.ro>
-> } To: Ed Hew <edhew@xenitec.on.ca>
-> } Subject: Re: please verify your request
-> } In-Reply-To: <9701240101.aa16886@xenitec.xenitec.on.ca>
-> } Message-ID: <Pine.LNX.3.95.970124083019.5320E-100000@main.sorosis.ro>
-> }
-> [...]
-> } Yes, it is an attack against my network. I have localized the source of
-> } attack, but 'til now I was unable to shut them down, so it is likely that
-> } they will try again. It is not clear to me who those guys are, but they
-> } are romanians, and are using the direct SMTP connection to my servers to
-> } fake subscription requests.
-> [...]
-> } --------------------------------------------------------------------
-> } Cristian Gafton gafton@sorosis.ro
-> } Computers & Communications Center Network Administrator
-> } http://www.sorosis.ro/~gafton Iasi, Romania
-> } ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
->
->
--
James C. Armstrong, Jr. | PG&E Sucks.
james@sagarmatha.com |
|
|
