February 2004 - NZNOG - lists.nznog.org

(no subject)
by Philip D'Ath 24 Feb '04

24 Feb '04

Is it just me, or does this patent seem a bit extreme? http://ipwatch.internetnz.net.nz/files.asp?itemID=%7B2%30367DDC%2D6D29%2 D4%303F%2D838B%2DC%308366%30C8%304E%7D Abstract: A method for ordering a product over an internetwork of computer systems, wherein the product is ordered from a consumer computer (42) connected to the internetwork and billed by a billing server (34) connected to the internetwork comprises: (a) establishing a connection between the consumer computer and the billing server via the internetwork of computer systems; (b) transferring an order for a product from the consumer computer to the billing server via the internetwork; (c) transferring a transaction identification from the billing server to the consumer computer, wherein the transaction identification identifies the product ordered; (d) terminating the connection between the consumer computer and the billing server via the internetwork after the transaction identifier has been received by the consumer computer via the internetwork; (e) establishing a direct connection between the consumer computer and the billing server such as a telephone link administered by a telephone service provider and (f) transferring the transaction identification from the consumer computer back to the billing via the direct connection to identify the product ordered. CCNP, BCMS Philip D'Ath.

1 0

Anyone got contact info for free.net.nz?
by Russell Fulton 24 Feb '04

24 Feb '04

Subject says it all. I've got a small problem I need to discuss with someone from free.net.nz and I'd rather not call their 0900 support line... -- Russell Fulton /~\ The ASCII Network Security Officer \ / Ribbon Campaign The University of Auckland X Against HTML New Zealand / \ Email!

2 1

RE: [nznog] an interesting excercise in whodoneit.
by Riden, Jamie 23 Feb '04

23 Feb '04

It's in a few DNSBLs but not specifically for being an open proxy or trojaned box. But if it's in dynamic space, it might have recently changed its IP address. http://openrbl.org/ Lookup 67.172.127.63 (c-67-172-127-63.client.comcast.net) in 20+11 Zones AS: 67.160.0.0/12 AS6172 HomeCorp Redwood City/California Net 67/8 NET67 Chantilly, Virginia Results: Positive=6, Negative=25 (2004-02-23 18:30:32 UTC) @DYNAMIC/dialup: 67.172/16: 553 SORBS DUL @SPAM/spamsource: 67.172.127/24: 553 SPEWS [1] comcast/attbi, see http://spews.org/ask.cgi?S2963 SORBS/sorbs.net: 67.172/16: 553 SORBS DUL [Remove] SPEWS/spews.org: 67.172.127/24: 553 SPEWS2 [1] comcast/attbi, see http://spews.org/ask.cgi?S2963 RFC_IPWH/ipwhois.rfc-ignorant.org: Inaccurate or missing WHOIS data BLARS/block.blars.org: INET 127.1.0.1 Negative 25: @COUNTRY @ISP AHBL BOGONS BONDED BOPM CBL DRBL DSBL FIVETEN INTERSIL JIPPGMA LNSG NJABL NOMORE ORDB PSBL PSS REYNOLDS SBL SPAMBAG SPAMCOP SPAMRBL SPAMSITE UCEPROT cheers, Jamie > -----Original Message----- > From: Jonathan Brewer [mailto:jon.brewer(a)worldnet.att.net] > Sent: Tuesday, 24 February 2004 6:14 a.m. > To: 'nznog NOG' > Subject: [nznog] an interesting excercise in whodoneit. > > > Hey Folks, > > It's been a while since I've looked at email headers... > Anyone want to tell me which of the below headers are real, > and which (if any) are forged? Instinct would tell me that > it's straight-forward, and someone rooted a box in the states > on a cable modem, but I have no idea what to believe these days. > > Cheers, > > JB > > ------------------ > > Received: from newman.its.waikato.ac.nz ([130.217.66.62]) > by worldnet.att.net (mtiwmxc15) with ESMTP > id <2004022316453701500ncss5e>; Mon, 23 Feb 2004 > 16:45:37 +0000 > X-Originating-IP: [130.217.66.62] > Received: from newman.its.waikato.ac.nz (localhost [127.0.0.1]) > by newman.its.waikato.ac.nz (Postfix) with ESMTP > id 4EC10127A79; Tue, 24 Feb 2004 05:45:34 +1300 (NZDT) > Received: from telescum (c-67-172-127-63.client.comcast.net > [67.172.127.63]) > by newman.its.waikato.ac.nz (Postfix) with SMTP id AA66312782A > for <nznog(a)list.waikato.ac.nz>; Tue, 24 Feb 2004 05:44:20 +1300 > (NZDT) > From: Donald(a)newman.its.waikato.ac.nz, Neal(a)newman.its.waikato.ac.nz > To: the(a)newman.its.waikato.ac.nz, guys(a)newman.its.waikato.ac.nz > Message-Id: <20040223164420.AA66312782A(a)newman.its.waikato.ac.nz> > Date: Tue, 24 Feb 2004 05:44:20 +1300 (NZDT) > Cc: > Subject: [nznog] (no subject) > X-BeenThere: nznog(a)list.waikato.ac.nz > X-Mailman-Version: 2.1.3 > Precedence: list > List-Id: New Zealand Network Operators Group > <nznog.list.waikato.ac.nz> > List-Unsubscribe: <http://list.waikato.ac.nz/mailman/listinfo/nznog>, > <mailto:nznog-request(a)list.waikato.ac.nz?subject=unsubscribe> > List-Archive: <http://list.waikato.ac.nz/pipermail/nznog> > List-Post: <mailto:nznog(a)list.waikato.ac.nz> > List-Help: <mailto:nznog-request(a)list.waikato.ac.nz?subject=help> > List-Subscribe: <http://list.waikato.ac.nz/mailman/listinfo/nznog>, > <mailto:nznog-request(a)list.waikato.ac.nz?subject=subscribe> > > > > -----Original Message----- > From: donald.neal(a)telecom.co.nz [mailto:donald.neal(a)telecom.co.nz] > Sent: Tuesday, February 24, 2004 5:54 AM > To: undisclosed-recipients: > Subject: [nznog] (no subject) > > I like to heat p[enis > da > _______________________________________________ > NZNOG mailing list > NZNOG(a)list.waikato.ac.nz > http://list.waikato.ac.nz/mailman/listinfo/nzn> og > > > _______________________________________________ > NZNOG > mailing list > NZNOG(a)list.waikato.ac.nz > http://list.waikato.ac.nz/mailman/listinfo/nzn> og >

1 0

RE: [nznog] an interesting excercise in whodoneit.
by Gordon Smith 23 Feb '04

23 Feb '04

Most likely an open proxy, rather than a compromised machine. Typical spammer tactic is to bounce off these to avoid being shut down. Cheers, Gordon -----Original Message----- From: Jonathan Brewer [mailto:jon.brewer(a)worldnet.att.net] Sent: Tuesday, 24 February 2004 6:14 a.m. To: 'nznog NOG' Subject: [nznog] an interesting excercise in whodoneit. Hey Folks, It's been a while since I've looked at email headers... Anyone want to tell me which of the below headers are real, and which (if any) are forged? Instinct would tell me that it's straight-forward, and someone rooted a box in the states on a cable modem, but I have no idea what to believe these days. Cheers, JB

1 0

RE: [nznog] an interesting excercise in whodoneit.
by Will Steele 23 Feb '04

23 Feb '04

looks like someone cant use telnet :) my guess is its someone in america :P _________________________________________________________________ Gaming galore at http://xtramsn.co.nz/gaming !

1 0

an interesting excercise in whodoneit.
by Jonathan Brewer 23 Feb '04

23 Feb '04

Hey Folks, It's been a while since I've looked at email headers... Anyone want to tell me which of the below headers are real, and which (if any) are forged? Instinct would tell me that it's straight-forward, and someone rooted a box in the states on a cable modem, but I have no idea what to believe these days. Cheers, JB ------------------ Received: from newman.its.waikato.ac.nz ([130.217.66.62]) by worldnet.att.net (mtiwmxc15) with ESMTP id <2004022316453701500ncss5e>; Mon, 23 Feb 2004 16:45:37 +0000 X-Originating-IP: [130.217.66.62] Received: from newman.its.waikato.ac.nz (localhost [127.0.0.1]) by newman.its.waikato.ac.nz (Postfix) with ESMTP id 4EC10127A79; Tue, 24 Feb 2004 05:45:34 +1300 (NZDT) Received: from telescum (c-67-172-127-63.client.comcast.net [67.172.127.63]) by newman.its.waikato.ac.nz (Postfix) with SMTP id AA66312782A for <nznog(a)list.waikato.ac.nz>; Tue, 24 Feb 2004 05:44:20 +1300 (NZDT) From: Donald(a)newman.its.waikato.ac.nz, Neal(a)newman.its.waikato.ac.nz To: the(a)newman.its.waikato.ac.nz, guys(a)newman.its.waikato.ac.nz Message-Id: <20040223164420.AA66312782A(a)newman.its.waikato.ac.nz> Date: Tue, 24 Feb 2004 05:44:20 +1300 (NZDT) Cc: Subject: [nznog] (no subject) X-BeenThere: nznog(a)list.waikato.ac.nz X-Mailman-Version: 2.1.3 Precedence: list List-Id: New Zealand Network Operators Group <nznog.list.waikato.ac.nz> List-Unsubscribe: <http://list.waikato.ac.nz/mailman/listinfo/nznog>, <mailto:nznog-request(a)list.waikato.ac.nz?subject=unsubscribe> List-Archive: <http://list.waikato.ac.nz/pipermail/nznog> List-Post: <mailto:nznog(a)list.waikato.ac.nz> List-Help: <mailto:nznog-request(a)list.waikato.ac.nz?subject=help> List-Subscribe: <http://list.waikato.ac.nz/mailman/listinfo/nznog>, <mailto:nznog-request(a)list.waikato.ac.nz?subject=subscribe> -----Original Message----- From: donald.neal(a)telecom.co.nz [mailto:donald.neal(a)telecom.co.nz] Sent: Tuesday, February 24, 2004 5:54 AM To: undisclosed-recipients: Subject: [nznog] (no subject) I like to heat p[enis da _______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

1 0