From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pop.gmx.de ([213.165.64.20] helo=mail.gmx.net) by speech.braille.uwo.ca with smtp (Exim 3.35 #1 (Debian)) id 177Mgq-0002IK-00 for ; Mon, 13 May 2002 16:45:05 -0400 Received: (qmail 9190 invoked by uid 0); 13 May 2002 20:44:35 -0000 Received: from dhcp037-50-151-24.nt01-c5.cpe.charter-ne.com (HELO computer) (24.151.50.37) by mail.gmx.net (mp006-rz3) with SMTP; 13 May 2002 20:44:35 -0000 Message-ID: <000b01c1fabe$eb761840$25329718@ubr.charterne.com> From: "Alex Snow" To: References: <20020512231916.A25834@romualt.dhs.org> <003b01c1fab7$49e09a20$02263e18@mycomputer> <20020513153224.B27128@romualt.dhs.org> Subject: Re: more worms Date: Mon, 13 May 2002 16:44:03 -0400 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 5.50.4807.1700 X-Mimeole: Produced By Microsoft MimeOLE V5.50.4807.1700 Sender: speakup-admin@braille.uwo.ca Errors-To: speakup-admin@braille.uwo.ca X-BeenThere: speakup@braille.uwo.ca X-Mailman-Version: 2.0.8 Precedence: bulk Reply-To: speakup@braille.uwo.ca X-Reply-To: "Alex Snow" List-Help: List-Post: List-Subscribe: , List-Id: Speakup is a screen review system for Linux. List-Unsubscribe: , List-Archive: He could have looked it up in the database of IPs. ----- Original Message ----- From: "Gregory Nowak" To: Sent: Monday, May 13, 2002 4:32 PM Subject: Re: more worms > Now that wasn't as appearent. How do you know that? > Greg > > > On Mon, May 13, 2002 at 03:49:26PM -0400, Igor Gueths wrote: > > And the msg actually originated from a Massachusetts subnet. > > ----- Original Message ----- > > From: Gregory Nowak > > To: > > Sent: Monday, May 13, 2002 12:19 AM > > Subject: more worms > > > > > > > Hi all, > > > > > > I just wanted to say that the earlier incident where Kerry's e-mail was faked, and a worm was sent to the list was not the only one. I've just recieved a private e-mail with a faked address from mailman-owner@braille.uwo.ca with a similar worm. I'm including the headers below along with the entry from my qmail messages. > > > Greg > > > > > > > > > > > > From carpy@mail.ru Mon May 13 02:37:54 2002 > > > Return-Path: > > > Delivered-To: greg@romualt.dhs.org > > > Received: (qmail 25741 invoked from network); 13 May 2002 02:37:50 -0000 > > > Received: from mx9.mail.ru (194.67.57.19) > > > by softdnserror with SMTP; 13 May 2002 02:37:50 -0000 > > > Received: from 146-115-123-205.c3-0.smr-ubr1.sbo-smr.ma.cable.rcn.com ([146.115.123.205] helo=Yshdx) > > > by mx9.mail.ru with smtp (Exim SMTP.9) > > > id 1775u8-000Erg-00 > > > for greg@romualt.dhs.org; Mon, 13 May 2002 06:49:40 +0400 > > > From: mailman-owner > > > To: greg@romualt.dhs.org > > > Subject: A special good tool > > > MIME-Version: 1.0 > > > Content-Type: multipart/alternative; > > > boundary=AP7383eS3L5oq9gt0 > > > Message-Id: > > > Date: Mon, 13 May 2002 06:49:40 +0400 > > > Status: RO > > > Content-Length: 169918 > > > Lines: 2345 > > > > > > > > > > > > The following is from my /var/adm/messages. > > > > > > > > > May 12 21:37:54 linserver qmail: 1021257474.823623 new msg 245715 > > > May 12 21:37:54 linserver qmail: 1021257474.824347 info msg 245715: bytes 170583 from qp 25741 uid 1005 > > > May 12 21:37:54 linserver qmail: 1021257474.832134 starting delivery 169: msg 245715 to local greg@romualt.dhs.org > > > May 12 21:37:54 linserver qmail: 1021257474.832687 status: local 1/10 remote 0/20 > > > May 12 21:37:55 linserver qmail: 1021257475.006857 delivery 169: success: did_0+0+1/ > > > May 12 21:37:55 linserver qmail: 1021257475.006965 status: local 0/10 remote 0/20 > > > May 12 21:37:55 linserver qmail: 1021257475.007005 end msg 245715 > > > > > > > > > _______________________________________________ > > > Speakup mailing list > > > Speakup@braille.uwo.ca > > > http://speech.braille.uwo.ca/mailman/listinfo/speakup > > > > > > _______________________________________________ > > Speakup mailing list > > Speakup@braille.uwo.ca > > http://speech.braille.uwo.ca/mailman/listinfo/speakup > > _______________________________________________ > Speakup mailing list > Speakup@braille.uwo.ca > http://speech.braille.uwo.ca/mailman/listinfo/speakup >