- NZNOG - lists.nznog.org

Open spam relay at Port of Nelson
by Alan Brown 15 Aug '00

15 Aug '00

---------- Forwarded message ---------- Return-Path: <chops30(a)earthlink.net> Delivered-To: <aroberts(a)manawatu.gen.nz> Received: from gateway.pnl.co.nz (smtp.pnl.co.nz [210.54.242.145]) by mailhost.manawatu.net.nz (8.10.1/8.9.3) with ESMTP id e7G3SW530095 for <aroberts(a)manawatu.gen.nz>; Wed, 16 Aug 2000 15:28:32 +1200 Received: from sdn-ar-001tnknoxP108.dialsprint.net_[206.133.83.68] (sdn-ar-001tnknoxP108.dialsprint.net [206.133.83.68]) by gateway.pnl.co.nz (8.9.3/8.8.7) with SMTP id OAA20790; Wed, 16 Aug 2000 14:58:23 +1200 From: chops30(a)earthlink.net Received: from 206.133.83.68 by sdn-ar-001tnknoxP108.dialsprint.net with ESMTP; Tue, 15 Aug 2000 22:57:18 -0400 Message-ID: <00003536566a$000005ed$00004503(a)206.133.83.68> To: <Undisclosed.Recipients(a)gateway.pnl.co.nz> Subject: Gain Financial Success Today!! 17667 Date: Tue, 15 Aug 2000 22:57:08 -0400 X-Priority: 3 X-MSMail-Priority: Normal <HTML> FOLLOW ME TO FINANCIAL FREEDOM!! I Am looking for people with good work ethic and extrordinary desire to earn at least $10,000 per month working from home! NO SPECIAL SKILLS OR EXPERIENCE REQUIRED We will give you all the training and personal support you will need to ensure your success! This LEGITIMATE HOME-BASED INCOME OPPORTUNITY can put you back in control of your time,your finances,and your life! If you've tried other opportunities in the past that have failed to live up their promises, THIS IS DIFFERENT THEN ANYTHING ELSE YOU'VE SEEN! THIS IS NOT A GET RICH QUICK SCHEME! YOUR FINANCIAL PAST DOES NOT HAVE TO BE YOUR FINANCIAL FUTURE! CALL ONLY IF YOU ARE SERIOUS! 1-800-345-9708 DONT GO TO SLEEP WITHOUT LISTENING TO THIS! "ALL our dreams can come true- if we have the courage to persue them" -Walt Disney Please Leave Your Name And Number And Best Time To Call DO NOT RESPOND BY EMAIL ------------------------------------------------------------------------ This message is sent in compliance of the new email bill section 301.PerSection 301, Paragraph (a)(2)(C) of S. 1618. We will comply with all removal requests.Just Put Remove mailto:bagboy(a)burmeses.net ------------------------------------------------------------------------</HTML> --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 2

spam relay at actrix: MISC: There's a Fungus (Spammer didn't rhyme) Among Us (fwd)
by Alan Brown 12 Aug '00

12 Aug '00

---------- Forwarded message ---------- Date: Sat, 12 Aug 2000 19:37:10 -0400 From: Up Yours Spammer <up.yours.spammer(a)MINDSPRING.COM> Subject: MISC: There's a Fungus (Spammer didn't rhyme) Among Us My Up.Yours.Spammer(a)mindspring.com address was created solely for receiving postings from SPAM-L and has never been used publicly anywhere else. Locate the slime bag who sent this and you'll locate a Spammer on this list who's snagging addresses. Insert applicable rule re: disclaimer at the bottom. Lart sent to @home for remove address. X-Persona: <Up Yours Spammer> Return-Path: <sea(a)home.com> Received: from angel.actrix.co.nz ([203.96.16.105]) by niles.mail.mindspring.net (Mindspring Mail Service) with ESMTP id spb8mp.bth.37kbi1o Sat, 12 Aug 2000 15:17:36 -0400 (EDT) Received: from ROTWILER1J - 38.29.28.108 by angel.actrix.co.nz with Microsoft SMTPSVC(5.5.1774.114.11); Sun, 13 Aug 2000 07:17:13 +1200 To: sea(a)home.com From: sea(a)home.com Comments: Authenticated sender is <sea(a)home.com> Reply-to: sea(a)home.com Subject: Make $1,000 a day with E-Marketing Message-Id: <200008123477ZAA48793(a)post.96.23.127> Date: 13 Aug 2000 07:17:34 +1200 <snipped> (Offer expires 8-14-00) http://www.smtm1.com http://www.nightauto.com ________________________________________________________________ ********************* This is a 100% opt-in email list. You are recieving this message because you have either subscribed to our newsletter or indicated that you want to recieve this type of email on another website. If you feel that you have recieved this message in error, please send an email to: sea(a)home.com with "Remove" as your subject. We immediately honor all requests to be removed from this list. This message is being sent to you in compliance with the Federal legislation for commercial e-mail (H.R.4176 - Section 101, Paragraph (e)(1)(a)) and Bill s.1618 Title III passed by the 105th US Congress. ********************* --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Fwd: Re: surge in spam email (fwd)
by Andy Linton 10 Aug '00

10 Aug '00

Well I found this a reasonably rational description of the problem and amusing at the same time so I thought I'd share it with you all..... >X-Sieve: cmu-sieve 1.3 >Delivered-To: nanog-outgoing(a)merit.edu >X-Authentication-Warning: world.std.com: bzs set sender to >bzs(a)world.std.com using -f >From: Barry Shein <bzs(a)world.std.com> >Date: Thu, 10 Aug 2000 15:59:25 -0400 (EDT) >To: woods(a)weird.com (Greg A. Woods) >Cc: nanog(a)merit.edu >Subject: Re: surge in spam email (fwd) >X-Mailer: VM 6.75 under Emacs 20.5.2 >Sender: owner-nanog(a)merit.edu >X-Loop: nanog > > > > >I think if *everyone* stood up at once and declared that open relays > >were bad for us all then there wouldn't be too much trouble because > >there'd be nowhere for frustrated customers to jump to! ;-) > >Ya know, Greg, if everyone in China jumped off a 12 inch stool >simultaneously it'd cause a tidal wave which would sweep over the >entire United States. > >Or maybe not. > >But it's not worth losing sleep over. > >I'm not really trying to be too sarcastic, but I think your world-view >of what the net has become is anachronistic and the idea that some >project like ORBS is going to harass every open-relay in the world, >every workstation capable of forwarding mail for example, into >behaving better is at this point in time kinda like the Chinese >footstool tidal wave (is that from Dr Strangelove? whatever.) > >No, we need a legislative approach, with some technical support to >help increase the likelihood that spammers who break the law will get >caught. But first it has to be illegal, or else it's all for naught. > >Put it this way: I consider my house locked up even if I do have glass >windows, and even if glass is rather easy to break. > >If it were legal for a person of ill intent to break the glass to get >into my house to rob me the first approach would not in my mind be to >board up all the glass unless I really lived in some mad max anarchy. > >I'd first want to see it made illegal to break into my property. > >Then, with reasonable diligence, I can enjoy the sunshine and spend my >time and money on more important things than trying to engineer it so >it's impossible to break in. > >Or at least I can do the cost/benefit analysis from the situation >where it's illegal to break in, rather than just a stupid cat and >mouse game as we're currently playing with spammers most of the time. > > > The Walrus and the Carpenter > Were walking close at hand; > They wept like anything to see > Such quantities of sand: > "If this were only cleared away," > They said, "It would be grand!" > > "If seven maids with seven mops > Swept for half a year, > Do you suppose," the walrus said, > "That they could get it clear?" > "I doubt it," said the Carpenter, > And shed a bitter tear. > > >-- > -Barry Shein > >Software Tool & Die | bzs(a)world.std.com | http://www.TheWorld.com >Purveyors to the Trade | Voice: 617-739-0202 | Login: 617-739-WRLD >The World | Public Access Internet | Since 1989 *oo* --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Open IP Directed Broadcast List... (fwd)
by Alan Brown 09 Aug '00

09 Aug '00

For those not on Bugtraq. ---------- Forwarded message ---------- Date: Tue, 8 Aug 2000 22:59:37 -0400 From: dies <dies(a)PULLTHEPLUG.COM> To: BUGTRAQ(a)SECURITYFOCUS.COM Subject: Open IP Directed Broadcast List... Well, I've rescanned the Internet. I've chosen to scan down to /27 subnets this time. My new list of open broadcasts is available at.... http://www.pulltheplug.com If you are an ISP or work for one, PLEASE VISIT THIS SITE AND CHECK FOR YOUR NETWORKS OR DOWNSTREAMS!! If there are no broadcasts to use, there are no broadcast based attacks! 125102 networks broken...I've posted the top 4000 amp sites this time around... As always I'm looking for help...If you think you can help out, email me. Enjoy --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

The New Zealand Network Operators' Group
by Donald Neal 06 Aug '00

06 Aug '00

The New Zealand Network Operators' Group The New Zealand Network Operators' Group (NZNOG) has no king, president or formal membership. At present it consists of the subscribers to this mailing list, which anyone is free to join. At last count the list had just over 160 subscribers, with the count growing by around five each month. (The addresses aitken(a)voyager.co.nz and stevebar(a)ihug.co.nz have been removed. The users of those addresses are welcome to re-subscribe with addresses which work.) The NZNOG mailing list is provided through a server at The University of Waikato, and is administered by an employee of Telecom NZ Ltd. Neither of these organisations (nor the administrator) is responsible for its content. NZNOG Mailing List Acceptable Use Policy The NZNOG mailing list exists to provide a forum for the exchange of technical information and the discussion of implementation issues that require cooperation among New Zealand network service providers. In order to continue to provide a useful forum for discussion of relevant technical issues, users of the list are asked to respect the following guidelines. 1. Discussion will focus on Internet operational and technical issues. 2. Discussion related to meetings of network service providers is appropriate. 3. Discussion unrelated to these topics is not appropriate. 4. Postings to multiple mailing lists are discouraged. 5. Postings that include foul language, character assassination, and lack of respect for other participants are unacceptable. 6. Blatant product or service marketing is unacceptable. 7. Postings of a political, philosophical or legal nature are discouraged. 8. Postings to the list should be in ASCII or MIME encoded as text/plain. Attachments should not be sent to the list. To present a document, a suitable URL may be referred to. For documents of general interest, the use of proprietary file formats is discouraged. 9. Breaches of list etiquette should be dealt with privately with the offending list user, and should not result in complaints being sent to the list. Mailing List Archives A full archive is available at http://list.waikato.ac.nz/archives/nznog/ To search the archive, see http://list.waikato.ac.nz/archives/search.html (and remember to select nznog). Subscribing to the List To subscribe to the NZNOG list, send email to majordomo(a)list.waikato.ac.nz, where the body of the message reads subscribe nznog There are at present no restrictions on who may subscribe to the list, or even on who may post to the list. Digest Mailing List If you don't wish to receive postings as they are sent, you can instead subscribe to the nznog-digest mailiing list, on which all postings are sent out in a single "digest" every couple of days. Other Activities NZNOG does not at present have other regular activities than this mailing list, though some Auckland subscribers have been known to meet over beer. Some subscribers are likely to attend the Uniforum NZ 2000 conference in Hamilton in the first week of October. Donald Neal NZNOG Mailing List Owner/Administrator/Muggins --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Spammers at NZNET: SPAM: Fwd: ClientTell Newsletter - Marketing Tips (fwd)
by Alan Brown 04 Aug '00

04 Aug '00

NZNET traces through CLIX, clienttell.com traces through netgate. ---------- Forwarded message ---------- Date: Fri, 4 Aug 2000 19:56:13 -0400 Subject: SPAM: Fwd: ClientTell Newsletter - Marketing Tips Anyone (AB?) with insider knowledge of this yoyo <stephen(a)clienttell.com> in Kiwiland? He even had the balls to put his photo into the sig (and he's just as ugly as Rodent's better side....) and apparently is not even trying to hide who he is. We just got a few of these 23 Kb spewages in. and it looks like it's a continuing run. TGIF for the chickenboners - but this looks like professionalism - or a joe-job. TIA Paul whois -h whois.networksolutions.com clienttell.com ... Registrant: S R ANDREWS (CLIENTTELL-DOM) 4 Blakeborough Drive Forrest Hill Auckland, NZ 1310 NZ Domain Name: CLIENTTELL.COM Administrative Contact, Technical Contact, Zone Contact, Billing Contact: Andrews, Stephen (SA4085) stephen(a)NZNET.GEN.NZ NZNet Internet Services Limited Unit C1 - 5 Douglas Alexander Parade North Harbour Industrial Estate Auckland NZ +64 9 914 0058 (FAX) +64 9 914 0040 Record last updated on 07-Nov-1999. Record expires on 07-Nov-2001. Record created on 07-Nov-1999. Database last updated on 4-Aug-2000 14:26:02 EDT. Domain servers in listed order: NS1.CLIENTTELL.COM 203.167.232.54 NS2.NZNET.GEN.NZ 210.54.156.35 >X-Persona: <z-default-stormy> >Return-Path: <ezine(a)clienttell.com> >Received: from bo.nznet.gen.nz (bo.nznet.gen.nz [210.54.156.34]) > by eagle.reach.net (8.10.2/8.9.3) with ESMTP id e74NOQj04691; > Fri, 4 Aug 2000 19:24:26 -0400 >X-Envelope-From: ezine(a)clienttell.com >Received: from localhost (roscoe.nznet.gen.nz [210.54.156.38]) > by bo.nznet.gen.nz (8.8.7/8.8.7) with ESMTP id LAA07978; > Sat, 5 Aug 2000 11:12:25 +1200 >Message-Id: <200008042312.LAA07978(a)bo.nznet.gen.nz> >X-Sender: ezine(a)clienttell.com >From: Stephen Andrews <ezine(a)clienttell.com> >To: "ClientTells Free For All Links Site" <ezine(a)clienttell.com> >Date: Sat, 05 Aug 2000 11:12:02 +1200 >Subject: ClientTell Newsletter - Marketing Tips >Reply-To: ezine(a)clienttell.com >Organization: ClientTell Marketing >MIME-Version: 1.0 >Content-Type: multipart/alternative; > boundary="----=_NextPart_000_001__8215413_40322.45" >Status: > [snip a bunch of html] >Article by Stephen Andrews is the owner of NZNET Internet Services Ltd (Since 1994), an Internet Service Provider based in New Zealand that specializes in Internet solutions for small to medium businesses. He is a qualified Electrical Engineer who has specialized in Telecommunication Systems. He has the concept that a business should be automated as much as possible to be competitive in todays marketplace. --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Mail flood from 202.46.160.18 (www-wlg.domainz.net.nz)
by Mark Seward 04 Aug '00

04 Aug '00

Just a heads up in case any other ISPs are seeing the same thing.. I've had to block inbound traffic from www-wlg.domainz.net.nz - the load average on our primary MX was at a nice healthy 97 thanks to an extremely large number of connections originating from this mail server. Thankfully, we were dropping it all on the floor because the sender domain doesn't exist (why not?): ruleset=check_mail, arg1=<4Service(a)wlg-iis.domainz.net.nz>, relay=www-wlg.domainz.net.nz [202.46.160.18], reject=501 5.1.8 <4Service(a)wlg-iis.domainz.net.nz>... Domain of sender address 4Service(a)wlg-iis.domainz.net.nz does not exist Domainz, please investigate and explain. I suspect whatever caused this will have left a large amount of mail queued on 202.46.160.18 waiting to be sent on. Regards, - -- Mark Seward [ Network Operations Manager ] Paradise Net Telstra Saturn Limited Phone: 0800 467272 Fax: 0800 367200 Email: <mds(a)tsnz.net> --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

4 3

Heads-up: Kiwi spammer looking for a new home (fwd)
by Alan Brown 02 Aug '00

02 Aug '00

Terminated off 2day.com last night (25 domains) Apparently it's their second offence. === Domain Name: ESCAPEADV.COM Administrative Contact, Billing Contact: Etherington, John (JEF127) john(a)ESCAPEADVENTURES.CO.NZ Escape Adventures PO Box 3046 Richmond, 7001 NZ +6425 2307442 (FAX) +648 3261 610 AB ---------- Forwarded message ---------- Date: Wed, 2 Aug 2000 11:55:02 +0100 From: Malcolm Pack <spam-l(a)POTNOODLE.NET> Reply-To: SPAM-L(a)PEACH.EASE.LSOFT.COM To: SPAM-L(a)PEACH.EASE.LSOFT.COM Subject: SPAM: "Escape" NZ insertion and web host, opt-out spam (QP "fixed" by me). | Return-Path: <info(a)escapeadv.com> | Received: from pop3.demon.co.uk by smtpserver.homeip.net with POP3 (Mailtraq/1.1.4.1130) | id SMTP1771244673; Wed, 02 Aug 2000 11:29:22 +0100 | Received: from punt-2.mail.demon.net by mailstore | id 965211792:20:05619:2; | Wed, 02 Aug 2000 10:23:12 GMT | Received: from [212.111.39.44] ([212.111.39.44]) by punt-2.mail.demon.net | id aa2124442; 2 Aug 2000 10:23 GMT | Received: from mta4-rme.xtra.co.nz (mta4-rme.xtra.co.nz [203.96.92.15]) | by pegasus.net90.co.uk (8.10.2/8.10.2) with SMTP id e72AP1O17606; | Wed, 2 Aug 2000 11:25:03 +0100 | Received: from xtr65014501 ([203.96.109.92]) by mta4-rme.xtra.co.nz | (InterMail vM.4.01.02.17 201-229-119) with SMTP | id <20000802102718.OCZW1941812.mta4-rme.xtra.co.nz(a)xtr65014501>; | Wed, 2 Aug 2000 22:27:18 +1200 | Reply-To: <info(a)escapeadv.com> | From: "Escape Adventures" <info(a)escapeadv.com> | To: <info(a)escapeadv.com> | Subject: "Escape" | Date: Wed, 2 Aug 2000 22:37:11 +1200 | Message-ID: <LPBBKLKAGNJIILLBOLBNIEANCEAA.info(a)escapeadv.com> | MIME-Version: 1.0 | Content-Type: text/plain; | charset="Windows-1252" | X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0) | Content-Transfer-Encoding: quoted-printable | X-MIME-Autoconverted: from 8bit to quoted-printable by pegasus.net90.co.uk id e72AP1O17606 | X-Hops: 2 | | Need a break from IT pressures?. | | How about Mountain biking and Cycling in Kenya, Trekking on Kilimanjaro and | Mt Kenya, Rafting the White Nile in Uganda or Biking and Seakayaking in New | Zealand. | | ESCAPE ADVENTURES www.escapeadv.com , | Multi-Activity Adventures in Africa and New Zealand from 2-3 weeks. | | "Late booking special, 15% discount. 26th August departure, Biking in Kenya, | Trek Kilimanjaro, Gameparks and Zanzibar, 3 weeks". | | ESCAPE ADVENTURES | UK, PO Box 19598 London, SW11 1GA. Ph 020 7801 9516. | NZ, PO Box 3046, Richmond, Nelson. Ph +64 3 5489929. | USA, 181 Mt Owen Drive, Driggs, ID 83422.Ph 208 354 0967. | WWW.ESCAPEADV.COM or info(a)escapeadv.com | | | If you would like to be removed from our database please reply with "Remove" | in subject line. Most annoying is that this was harvested from one of Jobserve or Jobsite, UK recruitment listings services, of which I am a member as I am currently seeking work. The idea of a NZ escape adventure is truly tempting. Certainly worth spending my dole-money on... LARTS to abuse(a)xtra.co.nz, postmaster(a)xtra.co.nz with a comment to the effect that "opt-out = spam". -- Malcolm Pack --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Hi! Let's be friend?
by nurul＠excite.com 30 Jul '00

30 Jul '00

Hi, I am Nurul, 17, from Malaysia. From a search, I got your email from your homepage. Want to be friend? I just joined asiadragons efriend to make some new friends. Sign up is free and you can sign up too: http://friend.asiadragons.com/cgi-bin/refsign.pl?refuid=nurul Ok, I make some friends and $ lah :) So, sign up ok? And about me..... http://friend.asiadragons.com/cgi-bin/mdets.pl?uid=nurul After you join in, just write to me ok? Bye. from, Nurul Hisham --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Telstra blacklisted by ORBS
by Paul Montgomery 28 Jul '00

28 Jul '00

Those predictions made by Alan Brown more than a month ago have turned out to be true. The following is forwarded from an Australian mailing list. Ben Elliston <bje(a)redhat.com> wrote: > This morning every IP address in my home network was blacklisted in > ORBS. Upon investigation, I discovered this in the orbs.org name > server: > > 233.38.24.203.relays.orbs.org. 20h54m17s IN TXT "Telstra - spam > haveners, refusing to act. " > > Because my ISP is a customer of Telstra Internet, my entire network > has been blacklisted. As best as I can tell _all_ networks downstream > from Telstra Internet have been blacklisted in ORBS. I have contacted > ORBS and the blacklists will remain in place until the spamming > activity originating from Telstra Internet ceases. Until then, I > cannot send email to company mailing lists. There's something wrong > with this picture. -- Paul Montgomery, CEO @ AusBONE, the ISP peering co-operative. Land: not yet Mobile: 0410 622 589 mailto:monty(a)ausbone.net --------- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 2