Forged Postings

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

Alan J. Wylie - 15 Jan 2008 07:03 GMT

AFL seems so have been caught in the cross-fire of a deranged spammer
(or at least anti-anti-spammer) attempting a denial-of-service attack
on the newsgroup news.admin.net-abuse.email.

Some forged postings have been made - it is possible to delete them
from Google groups if you don't want your name associated with them.
You will need to set up an account with Google groups, at the e-mail
address in the header, then search for the posting, click "more
options" then "remove".

For more information, keywords to search for are "Moris", "Dippy" and
"Hipcrime", thought there is an awful lot of chaff to wade through if
you do.

Signature

Alan J. Wylie http://www.wylie.me.uk/
"Perfection [in design] is achieved not when there is nothing left to add,
but rather when there is nothing left to take away."
-- Antoine de Saint-Exupery

Reply to this Message

Tom Woods - 15 Jan 2008 16:05 GMT

> AFL seems so have been caught in the cross-fire of a deranged spammer
> (or at least anti-anti-spammer) attempting a denial-of-service attack
> on the newsgroup news.admin.net-abuse.email.

I like my forged posting!, its quite cultured sounding spam :)

Reply to this Message

Paul - xxx - 15 Jan 2008 21:46 GMT

Alan J. Wylie wibbled

> AFL seems so have been caught in the cross-fire of a deranged spammer
> (or at least anti-anti-spammer) attempting a denial-of-service attack
> on the newsgroup news.admin.net-abuse.email.

> For more information, keywords to search for are "Moris", "Dippy" and
> "Hipcrime", thought there is an awful lot of chaff to wade through if
> you do.

Alternatively get a less pikey server ...

Signature

Paul - xxx

'96/'97 Landrover Discovery 300 Tdi 'Big and Butch'
'98 Suzuki DR 200 Djebel 'Small but perfectly formed'
Dyna Tech Cro-Mo comp "When I feel fit enough'

Reply to this Message

Alan J. Wylie - 15 Jan 2008 23:18 GMT

> Alternatively get a less pikey server ...

Actually, I run my own INN server. A quick

find . -mtime -1 |
xargs grep -lF "NNTP-Posting-Host: 219.240.36.173" |
xargs grep -h "^Message-ID: " |
while read m i; do ctlinnd cancel $i; done |
awk '/^Ok$/{count++;next} {print;} END{print count;}'

is sufficient to deal with the Dippy/MI5 loonies ;-)

Signature

Alan J. Wylie http://www.wylie.me.uk/
"Perfection [in design] is achieved not when there is nothing left to add,
but rather when there is nothing left to take away."
-- Antoine de Saint-Exupery

Reply to this Message

Ian Rawlings - 15 Jan 2008 23:35 GMT

> Actually, I run my own INN server. A quick

Hehe, I used to do that until about 5 years ago when I switched to
leafnode, have been thinking of switching back though. INN was always
a PITA when trying to set up article fetching from an ISP rather than
peering though (I used to run an ISPs peering INN server back in the
late 90s). I've not looked at it in 5 years or so.

Signature

Blast off and strike the evil Bydo empire!

Reply to this Message

Alan J. Wylie - 16 Jan 2008 06:56 GMT

> INN was always a PITA when trying to set up article fetching from an
> ISP rather than peering though

"suck" <http://home.comcast.net/~bobyetman/> works for me and has
plenty of header based filtering options.

Signature

Alan J. Wylie http://www.wylie.me.uk/
"Perfection [in design] is achieved not when there is nothing left to add,
but rather when there is nothing left to take away."
-- Antoine de Saint-Exupery

Reply to this Message

Ian Rawlings - 16 Jan 2008 07:05 GMT

> "suck" <http://home.comcast.net/~bobyetman/> works for me and has
> plenty of header based filtering options.

Yes, that's what I used to use, although at the time I was using it,
it could have problems with some types of server due to it requiring
disabled NNTP features, I don't recall the detail now. After my last
INN server died I stayed off usenet for a few years and when I came
back I couldn't be arsed to go through the installation and
configuration cycle so just emerged leafnode and it ran.

Signature

Blast off and strike the evil Bydo empire!

Reply to this Message