Cancel messages

lokie.spods lokie.spods at ntlworld.com
Mon Dec 31 20:58:06 CET 2001


"Rob Mitchell" <black_sheep at cartooney.org> wrote in message
news:6e43133.0112310938.6f93f585 at posting.google.com...
> Gerhard Häring <gh_pythonlist at gmx.de> wrote in message
news:<mailman.1009779577.25166.python-list at python.org>...
> > Le 28/12/01 à 07:18, Syver Enstad écrivit:
> > > [...]
> > > ========= WAS CANCELLED BY =======:
> > > Path:
news.sol.net!spool1-nwblwi.newsops.execpc.com!newsfeeds.sol.net!newspump.sol
.net!newsfeed.direct.ca!look.ca!newshub2.rdc1.sfba.home.com!news.home.com!sj
c1.nntp.concentric.net!newsfeed.concentric.net!newsfeed.ozemail.com.au!ozema
il.com.au!not-for-mail
> > > Message-ID: <cancel.u7kr73m1w.fsf at online.no>
> > > Control: cancel <u7kr73m1w.fsf at online.no>
> > > Subject: cmsg cancel <u7kr73m1w.fsf at online.no>
> > > From: Syver Enstad <syver-en+usenet at online.no>
> > > Newsgroups: comp.lang.python
> > > X-No-Archive: yes
> > > Lines: 2
> > > NNTP-Posting-Host: wonenara.ozemail.com.au
> > > X-Trace: ozemail.com.au 1009643103 203.108.164.177 (Sun, 30 Dec 2001
03:25:03 EST)
> > > NNTP-Posting-Date: Sun, 30 Dec 2001 03:25:03 EST
> > > Organization: OzEmail Ltd, Australia
> > > Distribution: world
> > > Date: Sat, 29 Dec 2001 13:32:11 GMT
> > >
> > > This message was cancelled from within Mozilla.
> >
> > Just curious.
> >
> > What's going on here? A mailman bug from the mail <-> news gateway, or
> > somebody coverage-testing their Mozilla?!
>
> It's HipCrime, who does this sort of thing all the time.  Google has
> archived thousands of these rogue cancels all originating from
> 203.108.164.177 on December 13, 14, 15, 16, 17, 18, 20, 21, 29, 30, &
> 31:
>
> http://groups.google.com/groups?q=203.108.164.177&num=100&hl=en&scoring=d
>

He is rather well known isn't he.
He's also well known to the realtime spamfiltering lists:
http://www.orbz.org/b.php?203.108.164.177
http://spamcop.net/w3m?action=checkblock&ip=203.108.164.177
http://www.ordb.org/lookup/rbls/?host=203.108.164.177

I suspect that he'll be in a few more by the time this propergates :-)'s

> I would first try complaining to abuse at ozemail.com.au , & then if the
> rogue cancels continue after that date, to the newsfeeds propagating
> the rogue cancel forgery floods to the rest of Usenet, as shown on the
> Path line.  For example, for the header above, one would complain to
> concentric.net, home.com, look.ca, etc.  If the abuse still continues
> after that, these newsfeeds should be asked to block Ozemail entirely
> until it demonstrates itself to be a responsible ISP.
>
> Rob

Heres the AUP for ozemail :-
http://www.ozemail.com.au/info/about/userpolicy/acceptusepolicy.html

As they seem to be part of Yahoo, I suspect that a barrage of complaints
from ourselves will get someones account fried.

Anthony McDonald
--
Spammers please note all spam sent to this address immediately raises a
complaint with your network administrator.





More information about the Python-list mailing list