22 Jun
2006
22 Jun
'06
10:54 p.m.
Hi all
Sometimes I receive messagages like the one below.
I havnt sent anything recently, so I cant see why.
Could someone have sent some HTML, which is being bounced, but copied to
cctalk ?
What worries me, is the line X-RCPT-TO., Where could that come from ?
Nico
----- Original Message -----
Received: from dewey.classiccmp.org [209.145.140.57] by post6.zitechnet.dk
(SMTPD-8.20) id AE350EB4; Fri, 23 Jun 2006 07:37:57 +0200
Received: from dewey.classiccmp.org (localhost [127.0.0.1])
by dewey.classiccmp.org (8.13.1/8.13.1) with ESMTP id k5N5fvC2012780;
Fri, 23 Jun 2006 00:44:01 -0500 (CDT)
(envelope-from cctalk-bounces at classiccmp.org)
Received: from dewey.classiccmp.org (localhost [127.0.0.1])
by dewey.classiccmp.org (8.13.1/8.13.1) with ESMTP id k5N5fr31012770
for <cctalk at classiccmp.org>; Fri, 23 Jun 2006 00:41:53 -0500 (CDT)
(envelope-from cctech-bounces at classiccmp.org)
From: cctech-bounces at classiccmp.org
To: cctalk at classiccmp.org
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============1195093276=="
Message-ID: <mailman.102.1151041311.459.cctech at classiccmp.org>
Date: Fri, 23 Jun 2006 00:41:51 -0500
Precedence: bulk
X-BeenThere: cctech at classiccmp.org
X-Mailman-Version: 2.1.5
X-List-Administrivia: yes
X-Content-Filtered-By: Mailman/MimeDel 2.1.5
Subject: The results of your email commands
X-BeenThere: cctalk at classiccmp.org
Reply-To: "General Discussion: On-Topic and Off-Topic Posts"
<cctalk at classiccmp.org>
List-Id: "General Discussion: On-Topic and Off-Topic Posts"
<cctalk.classiccmp.org>
List-Unsubscribe: <http://www.classiccmp.org/mailman/listinfo/cctalk>,
<mailto:cctalk-request at classiccmp.org?subject=unsubscribe>
List-Archive: <http://www.classiccmp.org/pipermail/cctalk>
List-Post: <mailto:cctalk at classiccmp.org>
List-Help: <mailto:cctalk-request at classiccmp.org?subject=help>
List-Subscribe: <http://www.classiccmp.org/mailman/listinfo/cctalk>,
<mailto:cctalk-request at classiccmp.org?subject=subscribe>
Sender: cctalk-bounces at classiccmp.org
Errors-To: cctalk-bounces at classiccmp.org
X-Declude-Spoolname: D7e35032f00008ac8.smd
X-Spam-Tests-Failed: None [0]
X-RCPT-TO: <nico at farumdata.dk>
Status: U
X-UIDL: 348442292
X-IMail-ThreadID: 7e35032f00008ac8
22 Jun
22 Jun
10:59 p.m.
On Fri, 23 Jun 2006, Nico de Jong wrote:
Hi all
Sometimes I receive messagages like the one below.
I havnt sent anything recently, so I cant see why.
Could someone have sent some HTML, which is being bounced, but copied to
cctalk ?
What worries me, is the line X-RCPT-TO., Where could that come from ?
It looks like someone is sending MIME data to the listserver using forged
From: headers.
--
David Griffith
dgriffi at cs.csubak.edu
A: Because it fouls the order in which people normally read text.
Q: Why is top-posting such a bad thing?
A: Top-posting.
Q: What is the most annoying thing in e-mail?
11:07 p.m.
You're probably right.
Can't this shit be eliminated by Dewey or one of the other nephews ?
Nico
----- Original Message -----
From: "David Griffith" <dgriffi at cs.csubak.edu>
To: "General Discussion: On-Topic and Off-Topic Posts"
<cctalk at classiccmp.org>
Sent: Friday, June 23, 2006 7:59 AM
Subject: Re: Weird : Fw: The results of your email commands
On Fri, 23 Jun 2006, Nico de Jong wrote:
Hi all
Sometimes I receive messagages like the one below.
I havnt sent anything recently, so I cant see why.
Could someone have sent some HTML, which is being bounced, but copied to
cctalk ?
What worries me, is the line X-RCPT-TO., Where could that come from ?
It looks like someone is sending MIME data to the listserver using forged
From: headers.
--
David Griffith
dgriffi at cs.csubak.edu
A: Because it fouls the order in which people normally read text.
Q: Why is top-posting such a bad thing?
A: Top-posting.
Q: What is the most annoying thing in e-mail?
25 Jun
25 Jun
7:37 p.m.
It was written...
You're probably right.
Can't this shit be eliminated by Dewey or one of the other nephews ?
Dewey does
eliminate all MIME before accepting the post to the list.
By the way.... the history - my high school had an HP2000 named Huey, and a
PDP-11/03 with RT11 & TSX+ called Dewey. We never got a third computer
(other than a heathkit EC1).
The original classiccmp server was called Huey, but during transition to a
new machine there was temporarily two machines. The new machine was called
Dewey. Louie is a machine I have at home primarily for HP2100 emulator
development.
Jay
8:45 p.m.
Jay West wrote:
It was written...
Ah, but Louie only was named after he *died*! :>
(deliberately ignoring the Donald Duck reference)
I had three LX's that I used to have set up side by side
carrying the same names :>
You're probably right.
Can't this shit be eliminated by Dewey or one of the other nephews ?
Dewey
does eliminate all MIME before accepting the post to the list.
By the way.... the history - my high school had an HP2000 named Huey,
and a PDP-11/03 with RT11 & TSX+ called Dewey. We never got a third
computer (other than a heathkit EC1).
The original classiccmp server was called Huey, but during transition to
a new machine there was temporarily two machines. The new machine was
called Dewey. Louie is a machine I have at home primarily for HP2100
emulator development. 
1 Jul
1 Jul
2:09 a.m.
On Sun, 2006-06-25 at 21:34 -0500, Jay West wrote:
Someone wrote....
Well, it's not sent as text/plain, and it's base64 encoded. That sounds
like MIME to me... Of course the actual content-type is lost so there's
no way to determine what it actually is. I might just stick a filter in
to bit-bucket it.
Gordon.
It looks like someone is sending MIME data to the
listserver using forged
From: headers.
Nah, the list software strips all posts with MIME content. It would never
get out to list traffic if someone sent that in.
Jay
23 Jun
23 Jun
5:23 a.m.
At 01:54 AM 6/23/2006, Nico de Jong wrote:
Hi all
Sometimes I receive messagages like the one below.
I havnt sent anything recently, so I cant see why.
Could someone have sent some HTML, which is being bounced, but copied to
cctalk ?
It looks like something is posting to cctech forging cctalk as the
source. Possibly a virus/worm.
Jay can probably track down the source and block them, but there's not
much else we can do other than delete the junk.
What worries me, is the line X-RCPT-TO., Where could
that come from ?
Your mail server is inserting it to allow you to track the RCPT TO
envelope transaction. (Probably because the "To:" mail body header
doesn't show your address.) It's being 'helpful'.
The copies of these bounces that I've been getting don't have such a
header.
-Rick
6701
days inactive
6709
days old
7 comments
6 participants
participants (6)
-
dgriffi＠cs.csubak.edu -
dgy＠DakotaCom.Net -
gordon＠gjcp.net -
jwest＠classiccmp.org -
nico＠farumdata.dk -
rick＠rickmurphy.net