Spam filter?

[Shannon McMackin]

KC Ferguson wrote:
> <quote who="Don Levey">
> 
>>fedora-list-admin at redhat.com wrote:
>>
>>>On Tue, 03 Feb 2004 13:33:45 +0000 Paul Furness
>>><paul.furness at vil.ite.mee.com> wrote:
>>>
>>>
>>>>I thought of that, but the headers are a bit confusing. The FROM
>>>>header is saying "postmaster at redhat.com", but the originating mail
>>>>server isn't obviously one of theirs:
>>>
>>>>Received:  from ns0.webmasters.com (ns.serverleasing.com
>>>>[66.118.156.161])
>>>
>>>>My guess is that Redhat (or whoever they buy their server space from)
>>>>was twiddling with their spam filter this morning and it went a bit
>>>>wrong for a while.
>>>
>>>on reflection, i think you're correct. someone installed a change
>>>without
>>>adequate lab testing beforehand. on the one hand, it's kind of sad, on
>>>the other hand, sometimes when people do that they pay me a lot of
>>>money to clean up the mess afterwards, which isn't so sad.
>>>
>>
>>While this is possible, webmasters.com has been implicated in spammish
>>activities in the past.  They also seem to have a click-through affiliate
>>program, which makes it curious that the message (I got one too) tells
>>you to click through to their site to repost the message.
>>
>>The redhat mx machines are in netspace near to webmasters (both in 66.
>>subnets -
>>66.118.156.0 - 66.118.157.255 for webmasters, 66.187.224.0 -
>>66.187.239.255
>>for
>>redhat), but this probably doesn't mean a thing.  What's the possibility
>>that
>>an address at webmasters is subscribed to the list, and trying to get
>>click-throughs?
>>
>> -Don
>>
>>
>>--
> 
> 
> 
> ...go on and click through...  i did... Though I didn't post again using
> their "webmail", by visiting the link i confirmed my address. The next
> message thread came directly to me from MCI...
> 
> ...it seems as though my post to this list got routed to "MCI Internet
> Abuse Investigations" <no-replies-please at mci.com>
> 
> 
> -IOSubSys
> 
> In the header below I've substituted mymta.xxxx-xxxx.net for My MTA.
> 
> 
> Return-Path: <nobody at UU.NET>
> Received: from cmr2.ash.ops.us.uu.net (cmr2.ash.ops.us.uu.net [198.5.241.40])
>      by mymta.xxxx-xxxx.net (8.11.6/8.11.6) with ESMTP id i13FsVu24657
>      for <fedora-list at mymta.xxxx-xxxx.net>; Tue, 3 Feb 2004 09:54:32 -0600
> Received: from cmr2.ash.ops.us.uu.net by cmr2.ash.ops.us.uu.net with ESMTP
>      (peer crosschecked as: localhost [127.0.0.1])
>      id QQqahj07597
>      for <fedora-list at mymta.xxxx-xxxx.net>; Tue, 3 Feb 2004 15:54:25 GMT
> Received: from iaremedy.corp.us.uu.net by cmr2.ash.ops.us.uu.net with ESMTP
>      (peer crosschecked as: iaremedy.corp.us.uu.net [153.39.95.139])
>      id QQqahj07525
>      for <fedora-list at mymta.xxxx-xxxx.net>; Tue, 3 Feb 2004 15:54:21 GMT
> Received: by iaremedy.corp.us.uu.net
>      id QQqahj27686;
>      Tue, 3 Feb 2004 10:50:36 -0500 (EST)
> Date: Tue, 3 Feb 2004 10:50:36 -0500 (EST)
> Message-Id: <QQqahj27686.200402031550 at iaremedy.corp.us.uu.net>
> From: no-replies-please at mci.com (MCI Internet Abuse Investigations)
> To: "me" <fedora-list at mymta.xxxx-xxxx.net>
> Subject: Re: Re: Grub not starting Windows (B-TSI-013732597)
> In-reply-to: Your message of "Tue, 3 Feb 2004 09:38:45 -0600 (CST)"
> <<46967.66.58.42.210.1075822725.squirrel at mymta.xxxx-xxxx.net>>
> Precedence: junk
> Reply-to: no-replies-please at mci.com
> Errors-to: no-replies-please at mci.com
> 
> 
I access this list through gmane so that I can use a newsgroup reader to 
peruse the postings.  I've been getting the spam messages as well.

Shannon McMackin
mcmackin at shentel.net