Cancel forgeries injected at UUNET

---------

Chris Lewis (clewis@ferret.ocunix.on.ca)
Fri, 15 Nov 1996 10:04:40 -0500


UUNET,

Your open NNTP port is being used, yet again, for Usenet abuse. This
time someone is forging our email addresses to cancel FAQs. This is
the _same_ _person_ as the kikecancel/slanteyecancel/fagcancel/twatcancel
canceller.

Here are three samples. The Date: is a fake. If you add exactly 7 days
to it, you'll probably get the right date.

When is UUNET going to stop being the origin of more Usenet abuse than
any other site?

} Path: ix.netcom.com!ix.netcom.com!news.webspan.net!www.nntp.primenet.com!nntp.p
} rimenet.com!news.bbnplanet.com!cam-news-hub1.bbnplanet.com!news.mathworks
} .com!uunet!in1.uu.net!faqcancel!ecicrl!clewis
} From: clewis@ferret.ocunix.on.ca (Chris Lewis)
} Sender: clewis@ferret.ocunix.on.ca (Chris Lewis)
} Approved: news-answers-request@mit.edu
} Newsgroups:
} misc.consumers.house,rec.woodworking,misc.kids.info,misc.answers,rec.answ
} ers,news.answers
} Date: Thu, 07 Nov 1996 10:20:30 GMT
} Subject: cmsg cancel <cribfaq_847376405@ferret.ocunix.on.ca>
} Organization: eh?
} Control: cancel <cribfaq_847376405@ferret.ocunix.on.ca>
} Message-ID: <cancel.cribfaq_847376405@ferret.ocunix.on.ca>
} X-No-Archive: Yes
} X-Cancelled-By: bobfe@ids.net
} X-Original-Date: Thu, 7 Nov 1996 14:20:29 GMT
} X-Original-Subject: FAQ: Crib and Cradle Safety Regulations
} Lines: 29
}
} These cancels are issued as a service to the Internet providers not
} wishing
} to carry the frequently asked questions (FAQ) spam. Sites that do not
} wish
} to take advantage of this free service can easily can opt out of these
} cancels by "aliasing out" the faqcancel pseudosite.
}
} Help protect our right to issue third-party cancels. Vote to stop the NCM
} proposal. Please e-mail this pre-filled ballot to voting@hut.fi today:
}
} ======== BEGINNING OF BALLOT: Delete everything before this line =======
} .-----------------------------------------------------------------------
} | 1ST CALL FOR VOTES: news.software.misc, news.lists reorganization
} | Official Usenet Voting Ballot <NLF-0001> (Do not remove this line!)
} |-----------------------------------------------------------------------
} | Please provide your real name, or your vote may be rejected. Place
} | ONLY your name (ie. do NOT include your e-mail address or any other
} | information; ONLY your name) after the colon on the following line:
}
} Voter name:
}
} | Insert YES, NO, ABSTAIN, or CANCEL inside the brackets for each
} | newsgroup listed below (do not delete the newsgroup name):
}
} Your Vote Newsgroup
} --------- -----------------------------------------------------------
} [ NO ] news.lists.filters
} [ NO ] news.lists.misc
} [ NO ] news.software.misc
}
} ======== END OF BALLOT: Delete everything after this line ==============

|Path: ecicrl!nic.ott.hookup.net!loki.tor.hookup.net!vertex.tor.hookup.net!noc.van.hookup.net!laslo.netnet.net!news.sprintlink.net!news-dc-5.sprintlink.net!voskovec.radio.cz!news.msfc.nasa.gov!bcm.tmc.edu!academ!egsner!news.onramp.net!newshost.cyberramp.net!uunet!in2.uu.net!faqcancel!deshaw.com!do-not-use-path-to-reply
|From: netannounce@deshaw.com (Mark Moraes)
|Sender: netannounce@deshaw.com (Mark Moraes)
|Approved: netannounce@deshaw.com (Mark Moraes)
|Newsgroups: news.admin.misc,news.misc,news.software.readers,news.software.b,news.answers
|Date: Sun, 10 Nov 1996 22:03:56 GMT
|Subject: cmsg cancel <E0r2EH.6B9@deshaw.com>
|Organization: Usenet@Cabal
|Control: cancel <E0r2EH.6B9@deshaw.com>
|Message-ID: <cancel.E0r2EH.6B9@deshaw.com>
|Supersedes: <E0r2DD.61D@deshaw.com>
|X-No-Archive: Yes
|X-Canceled-By: clewis@ferret.ocunix.on.ca
|X-Original-Date: Tue, 12 Nov 1996 09:01:30 GMT
|X-Original-Subject: Changes to "Usenet Software: History and Sources"
|Lines: 29
|
|These cancels are issued as a service to the Internet providers not wishing
|...

|Path: ecicrl!nic.ott.hookup.net!vertex.tor.hookup.net!nic.mtl.hookup.net!noc.van.hookup.net!laslo.netnet.net!node2.frontiernet.net!news.texas.net!news.texas.net!www.nntp.primenet.com!nntp.primenet.com!cpk-news-hub1.bbnplanet.com!news.bbnplanet.com!cam-news-hub1.bbnplanet.com!news.mathworks.com!uunet!in2.uu.net!faqcancel!deshaw.com!do-not-use-path-to-reply
|From: netannounce@deshaw.com (Mark Moraes)
|Sender: netannounce@deshaw.com (Mark Moraes)
|Approved: netannounce@deshaw.com (Mark Moraes)
|Newsgroups: news.misc,news.answers
|Date: Wed, 06 Nov 1996 18:12:34 GMT
|Subject: cmsg cancel <E0r2Cp.5vs@deshaw.com>
|Organization: Usenet@Cabal
|Control: cancel <E0r2Cp.5vs@deshaw.com>
|Message-ID: <cancel.E0r2Cp.5vs@deshaw.com>
|X-No-Archive: Yes
|X-Cancelled-By: jem@xpat.com
|X-Old-Date: Tue, 12 Nov 1996 09:00:25 GMT
|X-Old-Subject: Changes to "Emily Postnews Answers Your Questions on Netiquette" [No Changes]
|Lines: 29
|
|These cancels are issued as a service to the Internet providers not wishing
|...

-- 
For more information on spam, including countermeasures and resources,
see the Internet Spam Boycott, at <URL:http://www.vix.com/spam/>.

Chris Lewis: _Una confibula non sat est_



[ Usenet Hypertext FAQ Archive | Search Mail Archive | Authors | Usenet ]
[ 1993 | 1994 | 1995 | 1996 | 1997 ]

---------

faq-admin@landfield.com

© Copyright The Landfield Group, 1997
All rights reserved