[58865] in North American Network Operators' Group
Re: Metoo Was: Pesky spammers are using my mailbox
daemon@ATHENA.MIT.EDU (Jerry Eyers)
Tue Jun 3 16:27:32 2003
Date: Tue, 3 Jun 2003 16:24:40 -0400 (Eastern Daylight Time)
From: "Jerry Eyers" <jeyers@rebma.com>
To: <nanog@merit.edu>
Errors-To: owner-nanog-outgoing@merit.edu
--------------Boundary-00=_41AXG6G0000000000000
Content-Type: Text/Plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Add a "metoo" here. Unless we all have visited some other site in commo=
n..
=0D
=0D
Jerry=0D
=0D
-------Original Message-------=0D
=0D
From: Daniel Karrenberg=0D
Date: Tuesday, June 03, 2003 04:22:04 PM=0D
To: Dominic J. Eidson=0D
Cc: nanog@merit.edu=0D
Subject: Metoo Was: Pesky spammers are using my mailbox=0D
=0D
On 03.06 13:44, Dominic J. Eidson wrote:=0D
>=0D
> I'm having a feeling that someone harvested a bunch of adresses, possib=
ly=0D
> from NANOG, and is using them as the sender address in pretend-to-be KL=
EZ=0D
> spams.. I have received several bounces lately, several of them appeari=
ng=0D
> to be KLEZ, all with me as the original sender ....=0D
=0D
Just to add another data point:=0D
=0D
The same thing started happening to me a few days ago. I do not know=0D
any of the recipients of the bounces but some people I *do* know advised =
me=0D
they are getting them. I cannot say whether this is really KLEZ or not,=0D
not enough data.=0D
=0D
Daniel=0D
=2E
--------------Boundary-00=_41AXG6G0000000000000
Content-Type: Text/HTML;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; charset=3Diso-8859-=
1">
<META content=3D"IncrediMail 1.0" name=3DGENERATOR>
<!--IncrdiXMLRemarkStart>
<IncrdiX-Info>
<X-FID>FLAVOR00-NONE-0000-0000-000000000000</X-FID>
<X-FVER></X-FVER>
<X-CNT>;</X-CNT>
</IncrdiX-Info>
<IncrdiXMLRemarkEnd-->
</HEAD>
<BODY style=3D"BACKGROUND-POSITION: 0px 0px; FONT-SIZE: 12pt; MARGIN: 5px=
10px 10px; FONT-FAMILY: Arial" bgColor=3D#ffffff background=3D"" scroll=3D=
yes ORGYPOS=3D"0" X-FVER=3D"3.0">
<TABLE id=3DINCREDIMAINTABLE cellSpacing=3D0 cellPadding=3D2 width=3D"100=
%" border=3D0>
<TBODY>
<TR>
<TD id=3DINCREDITEXTREGION style=3D"FONT-SIZE: 12pt; CURSOR: auto; FONT-F=
AMILY: Arial" width=3D"100%">
<DIV> Add a "metoo" here. Unless we all have visited some othe=
r site in common...</DIV>
<DIV> </DIV>
<DIV>Jerry</DIV>
<DIV> </DIV>
<DIV id=3DIncrediOriginalMessage><I>-------Original Message-------</I></D=
IV>
<DIV> </DIV>
<DIV id=3Dreceivestrings>
<DIV dir=3Dltr style=3D"FONT-SIZE: 11pt" <i><B>From:</B></I> <A href=3D"m=
ailto:daniel.karrenberg@ripe.net">Daniel Karrenberg</A></DIV>
<DIV dir=3Dltr style=3D"FONT-SIZE: 11pt" <i><B>Date:</B></I> Tuesday, Jun=
e 03, 2003 04:22:04 PM</DIV>
<DIV dir=3Dltr style=3D"FONT-SIZE: 11pt" <i><B>To:</B></I> <A href=3D"mai=
lto:sauron@the-infinite.org">Dominic J. Eidson</A></DIV>
<DIV dir=3Dltr style=3D"FONT-SIZE: 11pt" <i><B>Cc:</B></I> <A href=3D"mai=
lto:nanog@merit.edu">nanog@merit.edu</A></DIV>
<DIV dir=3Dltr style=3D"FONT-SIZE: 11pt" <i><B>Subject:</B></I> Metoo Was=
: Pesky spammers are using my mailbox</DIV></DIV>
<DIV> </DIV>
<DIV>On 03.06 13:44, Dominic J. Eidson wrote:</DIV>
<DIV>></DIV>
<DIV>> I'm having a feeling that someone harvested a bunch of adresses=
, possibly</DIV>
<DIV>> from NANOG, and is using them as the sender address in pretend-=
to-be KLEZ</DIV>
<DIV>> spams.. I have received several bounces lately, several of them=
appearing</DIV>
<DIV>> to be KLEZ, all with me as the original sender ....</DIV>
<DIV> </DIV>
<DIV>Just to add another data point:</DIV>
<DIV> </DIV>
<DIV>The same thing started happening to me a few days ago. I do not know=
</DIV>
<DIV>any of the recipients of the bounces but some people I *do* know adv=
ised me</DIV>
<DIV>they are getting them. I cannot say whether this is really KLEZ or n=
ot,</DIV>
<DIV>not enough data.</DIV>
<DIV> </DIV>
<DIV>Daniel</DIV>
<DIV>.</DIV></TD></TR>
<TR>
<TD id=3DINCREDIFOOTER width=3D"100%">
<TABLE cellSpacing=3D0 cellPadding=3D0 width=3D"100%">
<TBODY>
<TR>
<TD width=3D"100%"></TD>
<TD id=3DINCREDISOUND vAlign=3Dbottom align=3Dmiddle></TD>
<TD id=3DINCREDIANIM vAlign=3Dbottom align=3Dmiddle></TD></TR></TBODY></T=
ABLE></TD></TR></TBODY></TABLE></BODY></HTML>
--------------Boundary-00=_41AXG6G0000000000000--
