[59986] in North American Network Operators' Group
Re: Its not just Spam and DDOS anymore (was Re: OT: Re: User negligence?)
daemon@ATHENA.MIT.EDU (Peter Gray)
Tue Jul 29 04:01:32 2003
From: "Peter Gray" <petgray@hotmail.com>
To: william+nanog@hq.dreamhost.com, nanog@merit.edu
Cc: alex@nac.net
Date: Tue, 29 Jul 2003 08:00:14 +0000
Errors-To: owner-nanog-outgoing@merit.edu
For a laugh, take a look at this spammer site, www.ushplans.com, currently
hosted by Net Access Corporation. It claims to be "US Health Plans Inc.,
The Nations (sic) Leading Dental Plan" but its head office appears to be a
mail drop box in New Jersey and its only known employee appears to be a
telephone answering machine in Georgia. The domain name registration
details give a fake address. NAC has been hosting this site for the last
year, I've asked them three times to investigate and remove it, but I didn't
get any constructive response.
>From: william+nanog@hq.dreamhost.com (Will Yardley)
>To: nanog@merit.edu
>Subject: Re: Its not just Spam and DDOS anymore (was Re: OT: Re: User
>negligence?)
>Date: Mon, 28 Jul 2003 11:43:43 -0700
>MIME-Version: 1.0
>Received: from mc9-f35.bay6.hotmail.com ([65.54.166.42]) by
>mc9-s18.bay6.hotmail.com with Microsoft SMTPSVC(5.0.2195.5600); Mon, 28 Jul
>2003 11:45:32 -0700
>Received: from trapdoor.merit.edu ([198.108.1.26]) by
>mc9-f35.bay6.hotmail.com with Microsoft SMTPSVC(5.0.2195.5600); Mon, 28 Jul
>2003 11:45:32 -0700
>Received: by trapdoor.merit.edu (Postfix)id E06BF9124D; Mon, 28 Jul 2003
>14:43:48 -0400 (EDT)
>Received: by trapdoor.merit.edu (Postfix, from userid 56)id A9FBA9124E;
>Mon, 28 Jul 2003 14:43:48 -0400 (EDT)
>Received: from segue.merit.edu (segue.merit.edu [198.108.1.41])by
>trapdoor.merit.edu (Postfix) with ESMTP id 6C42B9124Dfor
><nanog@trapdoor.merit.edu>; Mon, 28 Jul 2003 14:43:45 -0400 (EDT)
>Received: by segue.merit.edu (Postfix)id 4C2835DDF2; Mon, 28 Jul 2003
>14:43:45 -0400 (EDT)
>Received: from mail.hq.newdream.net (mail.hq.newdream.net [66.33.200.10])by
>segue.merit.edu (Postfix) with ESMTP id C3F025DDF0for <nanog@merit.edu>;
>Mon, 28 Jul 2003 14:43:44 -0400 (EDT)
>Received: from 127.0.0.1 (zugzug.hq.newdream.net [127.0.0.1])by
>drama.hq.newdream.net (Postfix) with SMTP id E6AB93B2EDfor
><nanog@merit.edu>; Mon, 28 Jul 2003 11:43:43 -0700 (PDT)
>Received: by mail.hq.newdream.net (Postfix, from userid 1012)id D84513B2EB;
>Mon, 28 Jul 2003 11:43:43 -0700 (PDT)
>X-Message-Info: MxAodtZPLiQ6HPHOc8rBiXjgUFkT69DC
>Delivered-To: nanog-outgoing@trapdoor.merit.edu
>Delivered-To: nanog@trapdoor.merit.edu
>Delivered-To: nanog@merit.edu
>Message-ID: <20030728184343.GC29468@hq.newdream.net>
>Mail-Followup-To: nanog@merit.edu
>References: <Law12-F88E2sCRBHZXF0000ea4c@hotmail.com>
>In-Reply-To: <Law12-F88E2sCRBHZXF0000ea4c@hotmail.com>
>Organization: New Dream Network
>X-Message-Flag: Why are you reading this?
>User-Agent: Mutt/1.5.3i
>Sender: owner-nanog@merit.edu
>Precedence: bulk
>Errors-To: owner-nanog-outgoing@merit.edu
>X-Loop: nanog
>Return-Path: owner-nanog@merit.edu
>X-OriginalArrivalTime: 28 Jul 2003 18:45:32.0357 (UTC)
>FILETIME=[6C832750:01C35538]
>
>
>On Mon, Jul 28, 2003 at 08:56:01AM +0000, Peter Gray wrote:
>
> > On the subject of host security issues and spam, try doing a search of
>the
> > Usenet archive for '"Net Access Corporation" spam'. You get 328
>results.
> > And those are just the spams which people have traced to NAC, never mind
> > the millions of untraced ones....
>
>The fact that their abusebot automatically forwards complaints to the
>spammer^Wcustomer (even setting the 'From' address on the autoresponse
>to the customer's address) may have something to do with this.
>
>--
>"Since when is skepticism un-American?
>Dissent's not treason but they talk like it's the same..."
>(Sleater-Kinney - "Combat Rock")
>
>
_________________________________________________________________
On the move? Get Hotmail on your mobile phone http://www.msn.co.uk/msnmobile
