[108519] in North American Network Operators' Group
OK, who's the idiot using tcwireless.us?
daemon@ATHENA.MIT.EDU (Valdis.Kletnieks@vt.edu)
Tue Oct 7 16:14:24 2008
To: nanog@nanog.org
From: Valdis.Kletnieks@vt.edu
Date: Tue, 07 Oct 2008 16:14:17 -0400
Errors-To: nanog-bounces@nanog.org
--==_Exmh_1223410457_2912P
Content-Type: text/plain; charset=us-ascii
Somebody on the NANOG mailing list has their mail pointing to tcwireless.us,
which is throwing challenge/response mail like the following:
Your message
From: Valdis.Kletnieks@vt.edu
To: n3td3v <xploitable@gmail.com>
Subject: Re: Fwd: cnn.com - Homeland Security seeks cyber counterattack system (
Einstein 3.0)
Date: 10/6/2008
has been just received by gmail.com mailserver.
To prove that your message was sent by a human and not a computer, please
visit the URL below and type in the alphanumeric text you will see in the
image. You will be asked to do this only once for this recipient.
http://mail.tcwireless.us/challenge/?folder=2008100614384085099427
Your message will be automatically deleted in a few days if you do not
confirm this request.
=====================================================
DO NOT REPLY TO THIS MESSAGE. NO ONE WILL RECEIVE IT.
=====================================================
Note it says 'gmail.com mailserver'. Paul Ferguson reported to me that the one
he saw said 'received by vt.edu mailserver'. Also note that the From/To
has lost nanog@nanog.org - for both my note and Paul's (in fact, looking at
Paul's actual posting and mine show nanog@nanog.org as being the only common
link, thus the "must be a nanog subscriber" conclusion).
Please, if you're going to use a C/R, at least learn how to whitelist the
mailing lists you're on. And if you can't figure out how to do that, please
do us all a favor and not try to run an operational network...
--==_Exmh_1223410457_2912P
Content-Type: application/pgp-signature
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Exmh version 2.5 07/13/2001
iD8DBQFI68MZcC3lWbTT17ARAqhQAJ4nXR1uZHgx8LGMPTXI3BxL+0tbWwCgiE18
za3ytwx1HjCM7xvg22Nsld4=
=AB73
-----END PGP SIGNATURE-----
--==_Exmh_1223410457_2912P--
