Re: Rouge canceller hitting FAQs

---------

Tom Lane (tgl@sss.pgh.pa.us)
Thu, 16 Oct 1997 20:54:26 -0400


Simon Lyall <simon@darkmere.gen.nz> writes:
> Just a note that two of my FAQs were recently cancelled by a rouge
> canceller. Others should check to see if their FAQs are still being
> posted.

Hmm, I wonder if this explains the reports earlier this week that some
people's FAQs didn't make it to rtfm.mit.edu? Perhaps it wasn't rtfm's
fault. They might've got cancelled before getting copied into the
archive area.

If you want to follow this up, I found the cancel on a local news
server with Path:

: Path: news.pgh.net!pitt.edu!dsinc!nntp.upenn.edu!newsserver.jvnc.net!
: news.pn.com!nntp.pn.com!main.Germany.EU.net!main.de.uu.net!fu-berlin.de!
: news-peer.gsl.net!news.gsl.net!gip.net!iagnet.net!198.6.0.23!uunet!
: in3.uu.net!NEWS.BROOK.EDU!not-for-mail

Comparing to your Path:

> |Path: news.per.connect.com.au!news.mel.connect.com.au!munnari.OZ.AU!
> +harbinger.cc.monash.edu.au!news.mira.net.au!Germany.EU.net!de.uu.net!
> +main.Germany.EU.net!main.de.uu.net!fu-berlin.de!news-peer.gsl.net!
> +news.gsl.net!gip.net!iagnet.net!198.6.0.23!uunet!in3.uu.net!NEWS.BROOK.EDU!
> +not-for-mail

makes it look like the injection point was main.Germany.EU.net or one
of the couple sites just past it, with the last several being forgeries.

regards, tom lane