David Reuteler said:Quoted message said:David's system has blacklisted [email hidden], but
appears itself on more public blacklists. The eventual result is
everyone bouncing their complaints and apologies off each other's
anti-spam blacklists.
it isn't stanfordalumni.org that's the problem, but 64.142.19.5 which
resolves to b.mail.sonic.net. sonic.net is an isp based in santa rosa,
california. b.mail.sonic.net is an smtp server (i'd guess one in a pool
that jobst used or for some reason that his smtp server routes through)
but it doesn't appear to currently be an open relay (maybe it was fixed
or the alleged spammer was legimitely authenticated).
isis% telnet b.mail.sonic.net 25
Trying 64.142.19.5...
Connected to b.mail.sonic.net.
Escape character is '^]'.
220 mail.sonic.net ESMTP Ready on Wed, 5 May 2004 16:28:52 -0700 [b.mail]
MAIL From: [email hidden]
250 2.1.0 [email hidden]... Sender ok
RCPT To: [email hidden]
550 5.7.1 [email hidden]... Relaying denied. Proper authentication required.
quit
221 2.0.0 b.mail.sonic.net closing connection
Connection closed by foreign host.
isis%
if you goto openrbl.org and punch in 64.142.19.5 the complaint is from the
AUDNSBL (Aussie spam black-list). track that to them and you get a specific
entry from april 5, 2004.
Reason for entry : Reynolds Multiple Spam Traps
Type of address : 3 - network
(ie, more than this one machine)
and here's (just fyi, most of you should be typing N now) the offending spam.
and you'll note if you search for sonic that the relay did in fact take
the mail from yahoo and pass it to the not taking any [censored] australians.
if sonic.net really is your isp pass 'em this url and tell them to get
their machines off the aussie spam black-list:
http://dnsbl.net.au/lookup/?64.142.19.5
From [email hidden] Mon Apr 5 13:31:05 2004
Received: from mx3.reynolds.net.au (mail.reynolds.net.au [203.56.255.6])
by titus.reynolds.net.au (8.11.6/8.11.6) with ESMTP id i355V5O16711
for <[email hidden]>; Mon, 5 Apr 2004 13:31:05 +0800
Received: (from root@localhost)
by mx3.reynolds.net.au (8.11.6/8.11.6) id i355V5H01764
for [email hidden]; Mon, 5 Apr 2004 13:31:05 +0800
Received: from mx1.reynolds.net.au (tiberius.reynolds.net.au [203.56.255.5])
by mx3.reynolds.net.au (8.11.6/8.11.6) with ESMTP id i355V3g01690
for <[email hidden]>; Mon, 5 Apr 2004 13:31:03 +0800
Received: (from root@localhost)
by mx1.reynolds.net.au (8.12.8/8.12.8) id i355V3FD030369
for [email hidden]; Mon, 5 Apr 2004 13:31:03 +0800
Received: from titus.reynolds.net.au (titus.reynolds.net.au [203.56.255.12])
by mx1.reynolds.net.au (8.12.8/8.12.8) with ESMTP id i355V3EB030286
for <[email hidden]>; Mon, 5 Apr 2004 13:31:03 +0800
Received: (from root@localhost)
by titus.reynolds.net.au (8.11.6/8.11.6) id i355V3S16680
for [email hidden]; Mon, 5 Apr 2004 13:31:03 +0800
Date: Mon, 5 Apr 2004 13:31:03 +0800
From: root <[email hidden]>
Message-Id: <[email hidden]>
To: [email hidden]
Subject: RESAFURS - [email hidden] - 20040405130424-15361
X-AntiVirus: Reynolds Virus Scan OK. http://reynolds.net.au/policies/viruses/
X-ReynoldsPurgeDate: 1081143064
Return-Path: <[email hidden]>
Received: from b.mail.sonic.net (b.mail.sonic.net [64.142.19.5])
by mx1.reynolds.net.au (8.12.8/8.12.8) with ESMTP id i3554E4s031558
for <[email hidden]>; Mon, 5 Apr 2004 13:04:16 +0800
Received: from mx1.mail.yahoo.com (adsl-64-142-66-211.sonic.net [64.142.66.211])
by b.mail.sonic.net (8.12.11/8.12.11) with SMTP id i354aVYR017322;
Sun, 4 Apr 2004 22:04:05 -0700
Message-Id: <[email hidden]>
To: <[email hidden]>, <[email hidden]>, <[email hidden]>,
<[email hidden]>, <[email hidden]>,
<[email hidden]>, <[email hidden]>
From: "Todd Parker" <[email hidden]>
Subject: Silvia Is Married But Lonely
Date: Mon, 05 Apr 2004 07:04:08 00200
MIME-Version: 1.0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Priority: 1
X-MSMail-Priority: High
Anti-Virus: X-RAV-AntiVirus: This message has been scanned for viruses on %Pxy
Sensitivity: Personal
X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2919.6600
X-AntiVirus: Reynolds Virus Scan OK. http://reynolds.net.au/policies/viruses/
X-ReynoldsPurgeDate: 1081141457
X-LOTEblock: PASSED 0 seems to be English
X-HTMLblock: FAILED 1 seems to be HTML only
X-QSFSblock: PASSED 0 seems to not be QSFS score 44
X-RDNSblock: PASSED 0 seems to not be RDNS
X-NURLblock: PASSED 0 seems to not be NURL
X-SCBLblock: FAILED 1 seems to be listed on bl.spamcop.com
X-SFCSblock: PASSED 0 seems to not be SFCS
X-B64Eblock: PASSED 0 seems to not be Base 64 only
X-T1BLblock: PASSED 0 seems to not be listed on t1.dnsbl.net.au
X-WSOTblock: PASSED 0 seems to not be using spammer obfuscation
X-RHSLblock: PASSED 0 seems to not be on any RHS lists
X-SPFQblock: PASSED 0 seems to have not failed SPF tests
X-DNMMblock: FAILED 1 seems to have failed Domain Names Mis Match tests
X-MBFHblock: PASSED 0 seems to have passed (may be forged) tests
X-KMSIblock: PASSED 0 seems to have passed Key Message Spam Indicator tests
<html>
<head>
<title>type</title>
</head>
<body>
<p>Elvira is just one of those girls who is looking for sex with no commitm=
ents.<br>
Why?<br>
Cause she is married and has a family. But Craig is not giving her the plea=
sure she deserves.<br>
She has a web cam and flirts with other guys giving them free shows. Is she=
the best girl in the world or what?<br>
Hundreds of thousands of wives around the world list themselves on our site=
to meet guys like you who just want to have fun.<br>
<a href=3D"http://not.industry.l.comes.support.cattcleskdrive.com/wives/">M=
eet girls online right now</a></p>
<p> </p>
<p>The leopard does not change his spots.. The sleepy fox catches no chicke=
ns.. There's no use in flogging a dead horse.. To scare a bird is not the w=
ay to catch it..What do you expect from a pig, but a grunt?.</p>
<p>When a fox hears a rabbit screaming it comes running, but not to help.. =
While the cats away the mice play..You can lead a horse to water, but you c=
an't make him drink.. You can't make a silk purse out of a sow's ear..<br>
</p>
<p><a href=3D"http://weeks.similar.thought.food.above.yousks.com/go/2.html"=
Quoted message said:if you don't want anymore go here. </a><br>
</p>
<p>A chain is no stronger than its weakest link.. A rolling stone gathers n=
o moss..After the storm comes the calm.. All aren't hunters that blow the h=
orn.. </p>
</body>
</html>