North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

OK, who's the idiot using

  • From: Valdis . Kletnieks
  • Date: Tue Oct 07 16:14:34 2008

Somebody on the NANOG mailing list has their mail pointing to,
which is throwing challenge/response mail like the following:

Your message

From: [email protected]
To: n3td3v <[email protected]>
Subject: Re: Fwd: - Homeland Security seeks cyber counterattack system (
Einstein 3.0)
Date: 10/6/2008

has been just received by mailserver.

To prove that your message was sent by a human and not a computer, please
visit the URL below and type in the alphanumeric text you will see in the
image. You will be asked to do this only once for this recipient.

Your message will be automatically deleted in a few days if you do not
confirm this request.


Note it says ' mailserver'.  Paul Ferguson reported to me that the one
he saw said 'received by mailserver'.  Also note that the From/To
has lost [email protected] - for both my note and Paul's (in fact, looking at
Paul's actual posting and mine show [email protected] as being the only common
link, thus the "must be a nanog subscriber" conclusion).

Please, if you're going to use a C/R, at least learn how to whitelist the
mailing lists you're on.  And if you can't figure out how to do that, please
do us all a favor and not try to run an operational network...

Attachment: pgp00007.pgp
Description: PGP signature