Quoted message said:David's system has blacklisted
[email hidden], but appears itself on
more public blacklists. The eventual result is everyone
bouncing their complaints and apologies off each other's
anti-spam blacklists.
it isn't stanfordalumni.org that's the problem, but
64.142.19.5 which resolves to b.mail.sonic.net. sonic.net is
an isp based in santa rosa, california. b.mail.sonic.net is
an smtp server (i'd guess one in a pool that jobst used or
for some reason that his smtp server routes through) but it
doesn't appear to currently be an open relay (maybe it was
fixed or the alleged spammer was legimitely authenticated).
isis% telnet b.mail.sonic.net 25 Trying 64.142.19.5...
Connected to b.mail.sonic.net. Escape character is '^]'. 220
mail.sonic.net ESMTP Ready on Wed, 5 May 2004 16:28:52 -0700
[b.mail] MAIL From: [email hidden] 250 2.1.0
[email hidden]... Sender ok RCPT To: [email hidden]
550 5.7.1 [email hidden]... Relaying denied. Proper
authentication required. quit 221 2.0.0 b.mail.sonic.net
closing connection Connection closed by foreign host. isis%
if you goto openrbl.org and punch in 64.142.19.5 the
complaint is from the AUDNSBL (Aussie spam black-list).
track that to them and you get a specific entry from
april 5, 2004.
Reason for entry : Reynolds Multiple Spam Traps Type of
address : 3 - network
(ie, more than this one machine)
and here's (just fyi, most of you should be typing N now)
the offending spam. and you'll note if you search for sonic
that the relay did in fact take the mail from yahoo and pass
it to the not taking any [censored] australians. if sonic.net
really is your isp pass 'em this url and tell them to get
their machines off the aussie spam black-list:
dnsbl.net.aulookupOpen ↗
From [email hidden] Mon Apr 5 13:31:05 2004
Received: from mx3.reynolds.net.au (mail.reynolds.net.au
[203.56.255.6]) by titus.reynolds.net.au (8.11.6/8.11.6)
with ESMTP id i355V5O16711 for
<[email hidden]>; Mon, 5 Apr 2004 13:31:05
+0800 Received: (from root@localhost) by mx3.reynolds.net.au
(8.11.6/8.11.6) id i355V5H01764 for
[email hidden]; Mon, 5 Apr 2004 13:31:05
+0800 Received: from mx1.reynolds.net.au
(tiberius.reynolds.net.au [203.56.255.5]) by
mx3.reynolds.net.au (8.11.6/8.11.6) with ESMTP id
i355V3g01690 for <[email hidden]>; Mon, 5 Apr
2004 13:31:03 +0800 Received: (from root@localhost) by
mx1.reynolds.net.au (8.12.8/8.12.8) id i355V3FD030369 for
[email hidden]; Mon, 5 Apr 2004 13:31:03 +0800
Received: from titus.reynolds.net.au (titus.reynolds.net.au
[203.56.255.12]) by mx1.reynolds.net.au (8.12.8/8.12.8) with
ESMTP id i355V3EB030286 for <[email hidden]>; Mon,
5 Apr 2004 13:31:03 +0800 Received: (from root@localhost) by
titus.reynolds.net.au (8.11.6/8.11.6) id i355V3S16680 for
[email hidden]; Mon, 5 Apr 2004 13:31:03 +0800
Date: Mon, 5 Apr 2004 13:31:03 +0800 From: root
<[email hidden]> Message-Id:
<[email hidden]> To:
[email hidden] Subject: RESAFURS -
[email hidden] - 20040405130424-15361 X-AntiVirus:
Reynolds Virus Scan OK.
reynolds.net.auvirusesOpen ↗ X-
ReynoldsPurgeDate: 1081143064
Return-Path: <[email hidden]> Received: from
b.mail.sonic.net (b.mail.sonic.net [64.142.19.5]) by
mx1.reynolds.net.au (8.12.8/8.12.8) with ESMTP id
i3554E4s031558 for <[email hidden]>; Mon, 5 Apr
2004 13:04:16 +0800 Received: from mx1.mail.yahoo.com (adsl-64-142-66-
211.sonic.net [64.142.66.211]) by b.mail.sonic.net
(8.12.11/8.12.11) with SMTP id i354aVYR017322; Sun, 4 Apr
2004 22:04:05 -0700 Message-Id:
<[email hidden]> To:
<[email hidden]>, <[email hidden]>,
<[email hidden]>, <[email hidden]>,
<[email hidden]>, <[email hidden]>,
<[email hidden]> From: "Todd Parker"
<[email hidden]> Subject: Silvia Is Married But
Lonely Date: Mon, 05 Apr 2004 07:04:08 00200 MIME-Version:
1.0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-
Encoding: quoted-printable X-Priority: 1 X-MSMail-Priority:
High Anti-Virus: X-RAV-AntiVirus: This message has been
scanned for viruses on %Pxy Sensitivity: Personal X-MimeOLE:
Produced By Microsoft MimeOLE V5.00.2919.6600 X-AntiVirus:
Reynolds Virus Scan OK.
reynolds.net.auvirusesOpen ↗ X-
ReynoldsPurgeDate: 1081141457 X-LOTEblock: PASSED 0 seems to
be English X-HTMLblock: FAILED 1 seems to be HTML only X-
QSFSblock: PASSED 0 seems to not be QSFS score 44 X-
RDNSblock: PASSED 0 seems to not be RDNS X-NURLblock: PASSED
0 seems to not be NURL X-SCBLblock: FAILED 1 seems to be
listed on bl.spamcop.com X-SFCSblock: PASSED 0 seems to not
be SFCS X-B64Eblock: PASSED 0 seems to not be Base 64 only
X-T1BLblock: PASSED 0 seems to not be listed on
t1.dnsbl.net.au X-WSOTblock: PASSED 0 seems to not be using
spammer obfuscation X-RHSLblock: PASSED 0 seems to not be on
any RHS lists X-SPFQblock: PASSED 0 seems to have not failed
SPF tests X-DNMMblock: FAILED 1 seems to have failed Domain
Names Mis Match tests X-MBFHblock: PASSED 0 seems to have
passed (may be forged) tests X-KMSIblock: PASSED 0 seems to
have passed Key Message Spam Indicator tests
<html> <head> <title>type</title> </head>
<body>
ents.<br> Why?<br> Cause she is married and has a family.
But Craig is not giving her the plea= sure she deserves.<br>
She has a web cam and flirts with other guys giving them
free shows. Is she= the best girl in the world or what?<br>
Hundreds of thousands of wives around the world list
themselves on our site= to meet guys like you who just want
to have fun.<br> <a href=3D"not.industry.l.comes.sup-not.industry.l.comes.sup-Open ↗
port.cattcleskdrive.com/wives/">M= eet girls online right
now</a></p>
<p> </p>
<q>The leopard does not change his spots.. The sleepy fox
catches no chicke= ns.. There's no use in flogging a dead
horse.. To scare a bird is not the w= ay to catch
it..What do you expect from a pig, but a grunt?.</p>
<r>When a fox hears a rabbit screaming it comes running, but
not to help.. = While the cats away the mice play..You
can lead a horse to water, but you c= an't make him
drink.. You can't make a silk purse out of a sow's
ear..<br> </p>
<s><a href=3D"weeks.similar.thought.food.above.yousk-weeks.similar.thought.food.above.yousk-Open ↗
s.com/go/2.html"=
Quoted message said:if you don't want anymore go here. </a><br>
</p>
<t>A chain is no stronger than its weakest link.. A rolling
stone gathers n= o moss..After the storm comes the
calm.. All aren't hunters that blow the h= orn.. </p>
</body> </html>
--
david reuteler [email hidden]