Spam filter?

[KC Ferguson]

<quote who="Don Levey">
> fedora-list-admin at redhat.com wrote:
>> On Tue, 03 Feb 2004 13:33:45 +0000 Paul Furness
>> <paul.furness at vil.ite.mee.com> wrote:
>>
>>> I thought of that, but the headers are a bit confusing. The FROM
>>> header is saying "postmaster at redhat.com", but the originating mail
>>> server isn't obviously one of theirs:
>>
>>> Received:  from ns0.webmasters.com (ns.serverleasing.com
>>> [66.118.156.161])
>>
>>> My guess is that Redhat (or whoever they buy their server space from)
>>> was twiddling with their spam filter this morning and it went a bit
>>> wrong for a while.
>>
>> on reflection, i think you're correct. someone installed a change
>> without
>> adequate lab testing beforehand. on the one hand, it's kind of sad, on
>> the other hand, sometimes when people do that they pay me a lot of
>> money to clean up the mess afterwards, which isn't so sad.
>>
>
> While this is possible, webmasters.com has been implicated in spammish
> activities in the past.  They also seem to have a click-through affiliate
> program, which makes it curious that the message (I got one too) tells
> you to click through to their site to repost the message.
>
> The redhat mx machines are in netspace near to webmasters (both in 66.
> subnets -
> 66.118.156.0 - 66.118.157.255 for webmasters, 66.187.224.0 -
> 66.187.239.255
> for
> redhat), but this probably doesn't mean a thing.  What's the possibility
> that
> an address at webmasters is subscribed to the list, and trying to get
> click-throughs?
>
>  -Don
>
>
> --


...go on and click through...  i did... Though I didn't post again using
their "webmail", by visiting the link i confirmed my address. The next
message thread came directly to me from MCI...

...it seems as though my post to this list got routed to "MCI Internet
Abuse Investigations" <no-replies-please at mci.com>


-IOSubSys

In the header below I've substituted mymta.xxxx-xxxx.net for My MTA.


Return-Path: <nobody at UU.NET>
Received: from cmr2.ash.ops.us.uu.net (cmr2.ash.ops.us.uu.net [198.5.241.40])
     by mymta.xxxx-xxxx.net (8.11.6/8.11.6) with ESMTP id i13FsVu24657
     for <fedora-list at mymta.xxxx-xxxx.net>; Tue, 3 Feb 2004 09:54:32 -0600
Received: from cmr2.ash.ops.us.uu.net by cmr2.ash.ops.us.uu.net with ESMTP
     (peer crosschecked as: localhost [127.0.0.1])
     id QQqahj07597
     for <fedora-list at mymta.xxxx-xxxx.net>; Tue, 3 Feb 2004 15:54:25 GMT
Received: from iaremedy.corp.us.uu.net by cmr2.ash.ops.us.uu.net with ESMTP
     (peer crosschecked as: iaremedy.corp.us.uu.net [153.39.95.139])
     id QQqahj07525
     for <fedora-list at mymta.xxxx-xxxx.net>; Tue, 3 Feb 2004 15:54:21 GMT
Received: by iaremedy.corp.us.uu.net
     id QQqahj27686;
     Tue, 3 Feb 2004 10:50:36 -0500 (EST)
Date: Tue, 3 Feb 2004 10:50:36 -0500 (EST)
Message-Id: <QQqahj27686.200402031550 at iaremedy.corp.us.uu.net>
From: no-replies-please at mci.com (MCI Internet Abuse Investigations)
To: "me" <fedora-list at mymta.xxxx-xxxx.net>
Subject: Re: Re: Grub not starting Windows (B-TSI-013732597)
In-reply-to: Your message of "Tue, 3 Feb 2004 09:38:45 -0600 (CST)"
<<46967.66.58.42.210.1075822725.squirrel at mymta.xxxx-xxxx.net>>
Precedence: junk
Reply-to: no-replies-please at mci.com
Errors-to: no-replies-please at mci.com