Re: [Mu] help me with big@boss.com

From: Jeroen Sangers (jeroen@jeroensangers.com)
Date: Fri Mar 14 2003 - 19:53:35 CET

  • Next message: Niedermeyer, Franz: "RE: [Mu] help me with big@boss.com"

    Michele Andreoli <m.andreoli@tin.it> wrote:
    > I'm receiving continously spam from a such big@boss.com
    > (a fake address).
    >
    > This is the typical email's header:
    >
    > ==================================================================
    > From big@boss.com Fri Mar 14 19:24:42 2003
    > Return-Path: <big@boss.com>
    > Received: from box.tin.it [62.211.72.30]
    > by localhost with POP3 (fetchmail-5.9.12)
    > for michele@localhost (single-drop); Fri, 14 Mar 2003 19:24:37 +0100
    > (CET) Received: from smtp5.cp.tin.it (192.168.70.231) by
    > ims3c.cp.tin.it (6.5.033) id 3E6D6B930021D5C0 for
    > m.andreoli@tin.it; Fri, 14 Mar 2003 19:21:59 +0100 Received: from
    > LAB2-19 (216.72.63.39) by smtp5.cp.tin.it (6.5.033) id
    > 3E692B2900A435E1 for m.andreoli@tin.it; Fri, 14 Mar 2003 19:21:57
    > +0100 Message-ID: <3E692B2900A435E1@smtp5.cp.tin.it> (added by
    > postmaster@virgilio.it) From: <big@boss.com>
    > To: <m.andreoli@tin.it>
    > Subject: Re: Sample
    > Date: Fri, 14 Mar 2003 12:23:14 +0100
    > Importance: Normal
    > X-Mailer: Microsoft Outlook Express 6.00.2600.0000
    > X-MSMail-Priority: Normal
    > X-Priority: 3 (Normal)
    > MIME-Version: 1.0
    > Content-Type: multipart/mixed;
    > boundary="CSmtpMsgPart123X456_000_00148868"
    > Status: RO
    > Content-Length: 88949
    > Lines: 1167
    > ==================================================================
    >
    >
    > How, how can I STOP this bad guy?
    >
    > Who is LAB2-19 (216.72.63.39) ?
    >
    > Michele
    >

    Hi Michele,

    The only reason to stop spam, is to send LARTs to their providers, making
    sure their accounts are blocked and open proxies are closed.

    The mail headers you included appear not to be complete, is that possible?
    For LAB2-19 (216.72.63.39) I found the following information on SpamCop:
    Parsing input: 216.72.63.39
    host 216.72.63.39 (getting name) no name

    Tracking ip 216.72.63.39
    Routing details for 216.72.63.39
    [refresh/show] Cached whois for 216.72.63.39 : inicahd@sdnhon.org.hn
    Using last resort contacts inicahd@sdnhon.org.hn

    Statistics:
    216.72.63.39 not listed in bl.spamcop.net.
    More Information..
    216.72.63.39 not listed in dnsbl.njabl.org
    216.72.63.39 not listed in proxies.blackholes.wirehub.net
    216.72.63.39 not listed in proxies.relays.monkeys.com
    216.72.63.39 not listed in dnsbl.njabl.org
    216.72.63.39 not listed in relays.ordb.org.
    Note, this is not necessarily a reflection on the specific address given. It
    is rather based on the overall ISP score.

    Reporting addresses:
    inicahd@sdnhon.org.hn

    You can send your complaint to the above address.

    Kind regards,

    Jeroen Sangers

    www.jeroensangers.com
    www.fimcap.org

    -------------------------------------------------------
    This SF.net email is sponsored by:Crypto Challenge is now open!
    Get cracking and register here for some mind boggling fun and
    the chance of winning an Apple iPod:
    http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0031en
    _______________________________________________
    Mulinux-forum mailing list
    Mulinux-forum@lists.sourceforge.net
    https://lists.sourceforge.net/lists/listinfo/mulinux-forum

  • Next message: Niedermeyer, Franz: "RE: [Mu] help me with big@boss.com"

    This archive was generated by hypermail 2.1.6 : Fri Mar 14 2003 - 19:57:40 CET