North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Virus emails from nanog mail list

  • From: Steven M. Bellovin
  • Date: Tue Aug 19 13:01:05 2003 
In message <[email protected][64.202.132.204]>, David Diaz writes:
>
>Spam may be off topic but in this case relevant.  Has anyone else 
>noticed bounced emails that appear to have origionated from their 
>nanog email boxes and contain viruses?
>
>Obviously some bot has gone threw the nanog list and is now forging 
>headers such that they appear to come from those addresses, and they 
>are attaching viruses.
>
>The IP address (which may or may not be accurate) appears to be 
>[195.157.87.253].
>
>Has anyone else noticed this recently?

I've gotten hundreds of such bounce messages today.  Only a few have 
Received: lines, but those have differed.  I don't know for sure if 
it's the nanog list, since I don't use a different email address for it.


		--Steve Bellovin, http://www.research.att.com/~smb