Re: Attack on Usenet - missing news.answers

---------

Chris Lewis (clewis@ferret.ocunix.on.ca)
Wed, 30 Oct 1996 18:12:30 -0500


On Oct 30, 7:24, Danny R. Faught wrote:
} Subject: Re: Attack on Usenet - missing news.answers
} Olivier MJ Crepin-Leblond wrote:
} > news.answers was rmgroup'ed by some dorks wanting to change
} > the way Usenet is run - the hard way. Any idea on how quickly
} > the newgroup message will propagate ?
}
} Don't most sites verify where control messages like that come from? I
} don't remember whether it's an Approval: header of the From: header,
} but we certainly don't accept rmgroups from just any kook out there.

These rmgroups (for news.groups, news.software.nntp, news.admin.misc,
news.admin.net-abuse.misc, news.admin.net-abuse.announce and a few
other) were forged in Dave Lawrence's name. There is _nothing_
in stock INN or Cnews that would allow you to accept Dave's control
messages and block the forged ones.

Now, Dave Lawrence signs his control messages with PGP.

You need to install Dave's PGP patches into your INN server. You
can get them off UUNET.

-- 
Chris Lewis: _Una confibula non sat est_


[ Usenet Hypertext FAQ Archive | Search Mail Archive | Authors | Usenet ]
[ 1993 | 1994 | 1995 | 1996 | 1997 ]

---------

faq-admin@landfield.com

© Copyright The Landfield Group, 1997
All rights reserved