[58855] in North American Network Operators' Group
Re: Pesky spammers are using my mailbox
daemon@ATHENA.MIT.EDU (Jack Bates)
Tue Jun 3 14:56:42 2003
Date: Tue, 03 Jun 2003 13:59:34 -0500
From: Jack Bates <jbates@brightok.net>
To: "Dominic J. Eidson" <sauron@the-infinite.org>
Cc: nanog@merit.edu
In-Reply-To: <Pine.LNX.4.33.0306031335440.2865-100000@morannon.the-infinite.org>
Errors-To: owner-nanog-outgoing@merit.edu
Dominic J. Eidson wrote:
> I'm having a feeling that someone harvested a bunch of adresses, possibly
> from NANOG, and is using them as the sender address in pretend-to-be KLEZ
> spams.. I have received several bounces lately, several of them appearing
> to be KLEZ, all with me as the original sender - and yet, there's no
> chance I was ever infected with KLEZ (No windows boxes here...)
>
The nature of KLEZ is that it spoofs the sender address. Anyone infected
with KLEZ or one of the variants and on NANOG will likely send out klez
spoofing as NANOG posters.
-Jack
