speaking of spam.., u seen this guy justin cook pasting all this crap to nznog, oh wait.......... ----- Original Message ----- From: "Justin Cook" To: Sent: Friday, December 02, 2005 3:00 PM Subject: [nznog] [Fwd: Re: Bizarre spam]

It was, and it's already dealt with. Just looking for the reason behind it. Adrian is probably on the mark when he calls it a DoS.

James Clark wrote:

...

Sounds like PHP injection, assume it's PHP. If not ignore me.

These articles explain the cause and fixes in more depth:

http://securephp.damonkohler.com/index.php/Email_Injection http://www.nyphp.org/phundamentals/email_header_injection.php

Justin Cook wrote:

...

I've got a question for the appropriate higher minds.

I fixed one of my clients self-built contact forms after I had an inkling that someone was injecting headers into it to use it as a relay. Turns out I was right, but it's beyond me what they're trying to accomplish:

Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Subject: which a rising moon now threw from the scattered clouds bcc: charleslegbe(a)aol.com

648a4d46b041327ac30fe4f27a9b72ee .

Tons and tons of that just that. What possible use could this garbage be? Is someone trying to blackhole their domain?

Cheers Justin

_______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

_______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog