|
ru.linux
- RU.LINUX ---------------------------------------------------------------------
From : Innocenti Maresin 2:5020/400 09 Oct 2004 17:49:25
To : Slava Astashonok
Subject : [OT] spam via relays
--------------------------------------------------------------------------------
Slava Astashonok wrote:
> Чего уж, продолжим здесь.
Хорошо, пускай модератор даст звезды обоим :)
> Hеужели остались люди, которые думают, что зомбированые хосты пользуются
> релеями? Вы эту идею спамерам подкиньте - они животики надорвут.
Уже давно подкинули, млин :(
Да и они сами не тупят что некоторые, могут и сообразить.
Return-Path: <tcrpp@abuse.net>
Received: from [212.55.154.23] (HELO sapo.pt)
by comtv.ru (CommuniGate Pro SMTP 4.1.8)
with SMTP id 20712501 for av95@comtv.ru; Thu, 12 Feb 2004 22:26:45 +0300
Received: (qmail 19129 invoked from network); 12 Feb 2004 17:52:40 -0000
Received: from unknown (HELO fep04-svc.mail.telepac.pt) (194.65.5.203)
by relay3 with SMTP; 12 Feb 2004 17:52:40 -0000
Received: from ESCRITORIO ([213.13.62.50]) by fep04-svc.mail.telepac.pt
(InterMail vM.5.01.04.13 201-253-122-122-113-20020313) with SMTP
id <20040212175233.ZRQF9122.fep04-svc.mail.telepac.pt@ESCRITORIO>;
Thu, 12 Feb 2004 17:52:33 +0000
Message-ID: <004001c3f1f4$dcdc04df$e2f305e7@yvnbkwk>
Reply-To: "=?windows-1251?B?Qm9keSBCZWx0?=" <z@abuse.net>
From: "=?windows-1251?B?Qm9keSBCZWx0?=" <tcrpp@abuse.net>
To: [длинный список]
Subject:
=?windows-1251?B?weXnIPTo5+j35fHq6PUg8+/w4Obt5e3o6SDoIOTo5fL7IPHh8ODx++Lg6fLlIOL
l8Q==?=
Date: Thu, 12 Feb 2004 20:45:58 +0300
Return-Path: <sjc@tele.net>
Received: from sccrmhc11.comcast.net ([204.127.202.55] verified)
by comtv.ru (CommuniGate Pro SMTP 4.1.8)
with ESMTP id 22308948; Mon, 08 Mar 2004 19:53:39 +0300
Received: from sccrmhc11.comcast.net (localhost[127.0.0.1])
by comcast.net (sccrmhc11) with ESMTP
id <2004030816531501100aarpje>; Mon, 8 Mar 2004 16:53:15 +0000
Received: from 68.37.169.47 ([68.37.169.47])
by comcast.net (sccrmhc11) with SMTP
id <2004030816302601100lopebe>; Mon, 8 Mar 2004 16:30:58 +0000
X-Comment: AT&T Maillennium special handling code - c
Message-ID: <005701c4058e$f681d7f9$ae834acd@drlrbs>
Reply-To: "=?windows-1251?B?0MXKy8DMzc4t0dPCxc3I0M3A3yDKzszPwM3I3w==?="
<fj@tele.net>
From: "=?windows-1251?B?0MXKy8DMzc4t0dPCxc3I0M3A3yDKzszPwM3I3w==?="
<sjc@tele.net>
To: [длинный список]
Subject: =?windows-1251?B?wcjHzcXRIC0g0dPCxc3I0NsgztIgz9DOyMfCzsTI0sXL3w==?=
Date: Mon, 8 Mar 2004 19:27:18 +0300
Organization: =?windows-1251?B?0MXKy8DMzc4t0dPCxc3I0M3A3yDKzszPwM3I3w==?=
Return-Path: <>
Received: from mxout2.netvision.net.il ([194.90.9.21] verified)
by comtv.ru (CommuniGate Pro SMTP 4.1.8)
with ESMTP id 22569342; Fri, 12 Mar 2004 03:06:50 +0300
Received: from CBL217-132-84-30.bb.netvision.net.il ([217.132.84.30])
by mxout2.netvision.net.il
(iPlanet Messaging Server 5.2 HotFix 1.14 (built Mar 18 2003))
with SMTP id <0HUF00GCVN80QQ@mxout2.netvision.net.il>; Fri,
12 Mar 2004 00:17:36 +0200 (IST)
Date: Fri, 12 Mar 2004 01:12:13 +0300
From: =?windows-1251?B?0e/l9ujg6+jx8vsg7+4g7+Xw5ezl+eXt6P4g8v/m5fHy5ek=?=
<ia@netvision.net.il>
Subject: =?windows-1251?B?w9DTx9fIysgtz9DO1MXR0cjOzcDL2w==?=
To:
Reply-to: =?windows-1251?B?0e/l9ujg6+jx8vsg7+4g7+Xw5ezl+eXt6P4g8v/m5fHy5ek=?=
<xfp@netvision.net.il>
Message-id: <004b01c40818$fc9c9ccb$bf1e4eaf@qxeqkztxwmw>
Organization: =?windows-1251?B?0/HrZ/Pj6CDj8PPn92jo6u7iLg==?=
Received: from mta3.adelphia.net ([68.168.78.181] verified)
by comtv.ru (CommuniGate Pro SMTP 4.1.8)
with ESMTP id 23407235; Tue, 23 Mar 2004 15:27:24 +0300
Received: from 24-49-80-203.bflony.adelphia.net ([24.49.80.203])
by mta9.adelphia.net
(InterMail vM.5.01.06.08 201-253-122-130-108-20031117) with SMTP
id
<20040323111238.RIIC1423.mta9.adelphia.net@24-49-80-203.bflony.adelphia.net>;
Tue, 23 Mar 2004 06:12:38 -0500
Return-path: <vl@comcast.net>
From: "english 25" <vl@comcast.net>
To: [censored]
Subject: Хотите выучить иностранный язык за МИHИМАЛЬHОЕ время?
Reply-To: [censored]
Content-Type: text/html;
Content-Transfer-Encoding: 8bit
Message-Id:
<20040323111238.RIIC1423.mta9.adelphia.net@24-49-80-203.bflony.adelphia.net>
Date: Tue, 23 Mar 2004 06:12:39 -0500
Return-Path: <pfh@adelphia.net>
Received: from mta4.adelphia.net ([68.168.78.184] verified)
by comtv.ru (CommuniGate Pro SMTP 4.1.8)
with ESMTP id 23625645; Thu, 25 Mar 2004 04:00:39 +0300
Received: from 68-234-12-43.clvdoh.adelphia.net ([68.234.12.43])
by mta9.adelphia.net
(InterMail vM.5.01.06.08 201-253-122-130-108-20031117) with SMTP
id
<20040324203224.EULS1423.mta9.adelphia.net@68-234-12-43.clvdoh.adelphia.net>;
Wed, 24 Mar 2004 15:32:24 -0500
Return-path: <pfh@adelphia.net>
From: "ТHТ КЛУБ" <pfh@adelphia.net>
To: [censored]
Subject: ОРУЖИЕ БЕЗ ЛИЦЕHЗИИ
Reply-To: [censored]
Content-Type: text/html;
Content-Transfer-Encoding: 8bit
Message-Id:
<20040324203224.EULS1423.mta9.adelphia.net@68-234-12-43.clvdoh.adelphia.net>
Date: Wed, 24 Mar 2004 15:32:24 -0500
Return-Path: <pm@adelphia.net>
Received: from mta10.adelphia.net ([68.168.78.202] verified)
by comtv.ru (CommuniGate Pro SMTP 4.1.8)
with ESMTP id 23786732; Fri, 26 Mar 2004 22:53:24 +0300
Received: from va-blcksbrg-cuda1-c8b-231.chvlva.adelphia.net
([68.170.91.231]) by mta10.adelphia.net
(InterMail vM.5.01.06.08 201-253-122-130-108-20031117) with SMTP
id
<20040326194004.DNWM15554.mta10.adelphia.net@va-blcksbrg-cuda1-c8b-231.chvlva.ad
elphia.net>;
Fri, 26 Mar 2004 14:40:04 -0500
Return-path: <pm@adelphia.net>
Reply-To: [censored]
From: "Gruzchiki" <pm@adelphia.net>
To: [censored]
Subject: Gruzim_bez_problem!
Content-Type: text/plain;
Content-Transfer-Encoding: 8bit
Message-Id:
<20040326194004.DNWM15554.mta10.adelphia.net@va-blcksbrg-cuda1-c8b-231.chvlva.ad
elphia.net>
Date: Fri, 26 Mar 2004 14:40:04 -0500
Return-Path: <jmz@rambler.ru>
Received: from mail-relay-3.tiscali.it ([212.123.84.93] verified)
by comtv.ru (CommuniGate Pro SMTP 4.1.8)
with ESMTP id 29900074; Wed, 02 Jun 2004 22:13:38 +0400
Received: from ppp-82-84-26-20.cust-adsl.tiscali.it (82.84.26.20) by
mail-relay-3.tiscali.it (7.1.021)
id 40BC984E000BADAF; Wed, 2 Jun 2004 20:17:23 +0200
Message-ID: <002101c44930$e979aa14$fb9b68da@fqb>
Reply-To: "=?windows-1251?B?RU5HTElTSA==?=" <rt@rambler.ru>
From: "=?windows-1251?B?RU5HTElTSA==?=" <jmz@rambler.ru>
To: =?windows-1251?B?emVlcmhu?= <qm@mail.ru>
Subject: =?windows-1251?B?wM3Dy8jJ0crIySDxIO/u7O75/P4gMjUt4+4g6uDk8OAu?=
Date: Wed, 2 Jun 2004 22:05:00 +0400
Organization: =?windows-1251?B?a3Vyc2VuZw==?=
Return-Path: <researchlabs@list.ru>
Received: from mail.kaluga.net ([195.112.113.246] verified)
by comtv.ru (CommuniGate Pro SMTP 4.1.8)
with ESMTP id 30159158 for av95@comtv.ru; Sun, 06 Jun 2004 03:20:42 +0400
Received: from illegalmailer (togkaluga.kaluga.net [195.112.112.253] (may be
forged))
by mail.kaluga.net (8.12.10/8.12.8) with SMTP id i55NJtlc003308
for <av95@comtv.ru>; Sun, 6 Jun 2004 03:20:43 +0400 (MSD)
(envelope-from researchlabs@list.ru)
Message-Id: <200406052320.i55NJtlc003308@mail.kaluga.net>
Reply-To: "Research Labs" <researchlabs@list.ru>
From: "Research Labs" <researchlabs@list.ru>
To: <av95@comtv.ru>
Subject: Urgent: Your mailbox is being read (бЮЬ ОHВРHБШИ ЪЫХЙ СЪГБХЛ - бЮЬС
ОHВРС ВХРЮЧР ОHЯРHПHММХЕ)
Date: Sun, 6 Jun 2004 03:20:41 +0400
Return-Path: <xyqvngj@supermail.ru>
Received: from mail.aoth.th.com ([203.155.53.67] verified)
by comtv.ru (CommuniGate Pro SMTP 4.1.8)
with ESMTP-TLS id 30210433; Mon, 07 Jun 2004 03:38:00 +0400
Received: from hwadsl-213-155-199-173.telvia.it ([10.10.10.3])
by mail.aoth.th.com (8.12.8/8.12.8) with SMTP id i56NaX3h014136;
Mon, 7 Jun 2004 06:36:50 +0700
Message-ID: <002201c44c80$b08dcff3$c30db1d5@wrryuevnkqd>
From: "=?windows-1251?B?cnVqeWQ=?=" <xyqvngj@supermail.ru>
To: =?windows-1251?B?ZmJrb2dvemg=?= <bzegbjh@e-mail.ru>
Subject:
=?windows-1251?B?wfP14+Dr8uXw8erg/yDu8vfl8u3u8fL8IOfgIDEg7+7r8+Pu5OjlIDIwMDQg4+7
k4A==?=
Date: Mon, 7 Jun 2004 03:19:15 +0400
Return-Path: <kexnvnq@bot.ru>
Received: from mail-relay-3.tiscali.it ([212.123.84.93] verified)
by comtv.ru (CommuniGate Pro SMTP 4.1.8)
with ESMTP id 31674808; Tue, 22 Jun 2004 13:03:54 +0400
Received: from [82.84.36.224] (82.84.36.224) by mail-relay-3.tiscali.it
(7.1.021.3)
id 40D7F3ED00000F0B; Tue, 22 Jun 2004 11:00:00 +0200
Message-ID: <003001c45898$c648dedf$1e9ffafc@ocrfulbdlh>
Reply-To: "=?windows-1251?B?U3VwZXItU2hvcA==?=" <m@bot.ru>
From: "=?windows-1251?B?U3VwZXItU2hvcA==?=" <kexnvnq@bot.ru>
To: =?windows-1251?B?YWZ0ZXJzaG9ja3M=?= <ecnwnjwm@mail.ru>
Subject: =?windows-1251?B?IsLF183bySIg9O7t4PDo6iE=?=
Date: Tue, 22 Jun 2004 12:49:35 +0400
Organization: =?windows-1251?B?Qmx1ZWxpZ2h0?=
Return-Path: <funpzqcy@nm.ru>
Received: from mail.cruzio.com ([63.249.95.37] verified)
by comtv.ru (CommuniGate Pro SMTP 4.1.8)
with ESMTP id 31841637; Thu, 24 Jun 2004 03:39:20 +0400
Received: from gateway.imageintegration.com (dsl2-63-249-108-45.cruzio.com
[63.249.108.45])
by mail.cruzio.com with ESMTP id i5NNZobS023381;
Wed, 23 Jun 2004 16:35:51 -0700 (PDT)
Received: from host114-182.pool82185.interbusiness.it
(gateway.imageintegration.com [63.249.108.45])
by gateway.imageintegration.com (8.12.11/8.12.11) with SMTP id
i5NNQRmT012712;
Wed, 23 Jun 2004 16:26:28 -0700
Message-ID: <005b01c459dc$def74d4d$a32cff59@gxs>
From: "=?windows-1251?B?xOXr6Org8u3u5SDw5fjl7ejlIODw4ejy8ODm7fv1IO/w7uHr5ew=?="
<funpzqcy@nm.ru>
To: =?windows-1251?B?YWR0cGxleQ==?= <wtpnzhbr@email.ru>
Subject: =?windows-1251?B?xOXr6Org8u3u5SDw5fjl7ejlIODw4ejy8ODm7fv1IO/w7uHr5ew=?=
Date: Thu, 24 Jun 2004 03:20:39 +0400
Return-Path: <freetalk-bot@yandex.ru>
Received: from mail.wildpark.net ([217.77.208.132] verified)
by comtv.ru (CommuniGate Pro SMTP 4.1.8)
with ESMTP id 31502072 for av95@comtv.ru; Sun, 20 Jun 2004 12:23:05 +0400
Received: from localhost (localhost.localdomain [127.0.0.1])
by mail.wildpark.net (Postfix) with ESMTP id 147DA56D3D7
for <av95@comtv.ru>; Sun, 20 Jun 2004 11:19:40 +0300 (EEST)
Received: from mail.wildpark.net ([127.0.0.1])
by localhost (mail.wildpark.net [127.0.0.1]) (amavisd-new, port 10024)
with LMTP id 14135-01-51 for <av95@comtv.ru>;
Sun, 20 Jun 2004 11:19:40 +0300 (EEST)
Received: from 192.168.0.168 (ppp-221-6.wildpark.net [217.77.221.6])
by mail.wildpark.net (Postfix) with SMTP id E9B6156D360
for <av95@comtv.ru>; Sun, 20 Jun 2004 11:19:26 +0300 (EEST)
From: "FreeTalk" <freetalk-bot@yandex.ru>
To: <av95@comtv.ru>
Subject:
Sender: "FreeTalk" <freetalk-bot@yandex.ru>
Mime-Version: 1.0
Content-Type: multipart/alternative;
boundary="= Multipart Boundary 0620041119"
Date: Sun, 20 Jun 2004 11:19:27 +0300
Message-Id: <20040620081926.E9B6156D360@mail.wildpark.net>
Return-Path: <oogq@abuse.net>
Received: from smtp-out6.blueyonder.co.uk ([195.188.213.9] verified)
by comtv.ru (CommuniGate Pro SMTP 4.1.8)
with ESMTP id 37267061; Wed, 01 Sep 2004 12:44:09 +0400
Received: from 82-35-151-48.cable.ubr04.enfi.blueyonder.co.uk ([82.35.151.48])
by smtp-out6.blueyonder.co.uk with Microsoft SMTPSVC(5.0.2195.6713);
Wed, 1 Sep 2004 09:42:46 +0100
Message-ID: <004101c49060$a941df4f$9f34bfdd@ouplmms>
Reply-To: "=?windows-1251?B?x+7r7vLu6SDE7uw=?=" <cf@abuse.net>
From: "=?windows-1251?B?x+7r7vLu6SDE7uw=?=" <oogq@abuse.net>
To: =?windows-1251?B?amxna3dnYg==?= <vgtnlpo@mail.ru>
Subject:
=?windows-1251?B?weXx7+vg8u375SDq7u3x8+v88uD26Ogg7+4g7/Du5ery6PDu4uDt6P4sIPHy8O7
o8uXr/PHy4vMg6CDyIOQ=?=
Date: Wed, 1 Sep 2004 12:22:37 +0400
Хочу заметить, что я намеренно *не* приводил примеров,
когда засвеченный "релей" фигурирует в базе www.spews.org.
Т.е. если не во всех, то в большинстве приведённых случаев
спам пёр именно через SMTP-сервер вполне благопристойного ISP.
Также, я намеренно отбросил примеры,
когда спам был направлен через релей очевидно с другого конца планеты,
т.е. явные ошибки настройки самого релея.
А вот и тот самый упомянутый мною ранее пример:
Return-Path: <>
Received: from outmx002.isp.belgacom.be ([195.238.3.52] verified)
by comtv.ru (CommuniGate Pro SMTP 4.1.8)
with ESMTP-TLS id 31927441 for av95@comtv.ru; Fri, 25 Jun 2004 03:05:05 +0400
Received: from outmx002.isp.belgacom.be (localhost [127.0.0.1])
by outmx002.isp.belgacom.be (8.12.11/8.12.11/Skynet-OUT-2.22) with ESMTP
id i5OMwYkW026642
for <av95@comtv.ru>; Fri, 25 Jun 2004 00:58:34 +0200
(envelope-from <>)
Received: from inmx012.isp.belgacom.be (inmx012.isp.belgacom.be [195.238.3.90])
by outmx002.isp.belgacom.be (8.12.11/8.12.11/Skynet-OUT-2.22) with ESMTP
id i5OMwVj8026626
for <av95@comtv.ru>; Fri, 25 Jun 2004 00:58:32 +0200
(envelope-from <>)
Received: from localhost (localhost)
by inmx012.isp.belgacom.be (8.12.11/8.12.11/Skynet-IN-2.32) id
i5OMwSNK019177;
Fri, 25 Jun 2004 00:58:31 +0200
(envelope-from <MAILER-DAEMON>)
Date: Fri, 25 Jun 2004 00:58:31 +0200
From: Mail Delivery Subsystem <MAILER-DAEMON@inmx012.isp.belgacom.be>
Message-Id: <200406242258.i5OMwSNK019177@inmx012.isp.belgacom.be>
To: <av95@comtv.ru>
MIME-Version: 1.0
Content-Type: multipart/report; report-type=delivery-status;
boundary="i5OMwSNK019177.1088117911/inmx012.isp.belgacom.be"
Subject: Returned mail: see transcript for details
Auto-Submitted: auto-generated (failure)
[skip]
The original message was received at Fri, 25 Jun 2004 00:58:18 +0200
from 24-205-215-167.fln-cres.charterpipeline.net [24.205.215.167]
----- The following addresses had permanent fatal errors -----
[skip]
--i5OMwSNK019177.1088117911/inmx012.isp.belgacom.be
Content-Type: message/rfc822
Return-Path: <av95@comtv.ru>
Received: from fqinqoudd.ru (24-205-215-167.fln-cres.charterpipeline.net
[24.205.215.167])
by inmx012.isp.belgacom.be (8.12.11/8.12.11/Skynet-IN-2.32) with SMTP id
i5OMwHqo019053;
Fri, 25 Jun 2004 00:58:18 +0200
(envelope-from <av95@comtv.ru>)
From: av95@comtv.ru
Date: Thu, 24 Jun 2004 22:18:17 GMT
MIME-Version: 1.0
Subject: SEHBEHINDERTER VON AUSLAENDERN VERPRUEGELT (1542)
Importance: Normal
X-Priority: 3 (Normal)
Message-ID: <d2a25af5068626.51715.qmail@comtv.ru>
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset="us-ascii"
To: undisclosed-recipients:;
Hе хочу выставить себя крутым знатоком предмета.
Hо просто я и общался со специалистами,
и сам изучал спам, и специальные посвящённые ему материалы.
В _специализированных_ источниках, а не в попсовых эхах.
--
qq~~~~\ [ ЗА IP БЕЗ ЦЕHЗУРЫ ]
/ /\ \ [ FAQ you ] Д http://www.comtv.ru/~av95/chainik.html
\ /_/ /
\____/ Linux console notes http://www.comtv.ru/~av95/linux/console/
--- ifmail v.2.15dev5.3
* Origin: [ за IP без цензуры ] http://internet.comtv.ru/ (2:5020/400)
Вернуться к списку тем, сортированных по: возрастание даты уменьшение даты тема автор
|
