[lug] message from fschmid

[Ferdinand Schmid]

It appears that this message originated in Vietnam if I read the header correctly. 
Someone fraudulently used my e-mail address and then broadcast their message through BLUG 
(and who knows where else).  I have attached the whois for the originating mail relay.
We have received a significant amount of spam with company user e-mail addresses as the 
sender at our office.  Every originating relay was only used once to prevent us from 
filtering certain IPs.  From schools in PA to servers in Asia.

All I can say is that this message was not sent by me and I am sorry and upset that my 
e-mail address has been (and continues to be) taken hostage.

Ferdinand

whois 203.162.0.55

% Rights restricted by copyright. See http://www.apnic.net/db/dbcopyright.html
% (whois6.apnic.net)

inetnum:     203.162.0.0 - 203.162.7.255
netname:     VNN-VN
descr:       Vietnam Posts and Telecommunications (VNPT)
descr:       18 Nguyen Du street, Hanoi capital, Vietnam
country:     VN
admin-c:     KD8-AP
tech-c:      KNH1-AP
remarks:     Admin contact: cuongng at vnn.vn
remarks:     Tech contact: pbthuy29 at vnn.vn
mnt-by:      VNPT
changed:     admin.vnn at vnnic.net.vn 20020603
source:      APNIC

person:      Khoa Doan
address:     Telecoms Division
address:     Vietnam Posts and Telecommunications (VNPT)
address:     18 Nguyen Du street, Hanoi capital, Vietnam
country:     VN
phone:       +84-4-8264100
fax-no:      +84-4-8226861
e-mail:      cuong.ng at vnn.vn
nic-hdl:     KD8-AP
remarks:     Contact: cuong.ng at vnn.vn
mnt-by:      VNPT
changed:     admin.vnn at vnnic.net.vn 20020604
source:      APNIC

person:      Khanh Nguyen Hien
address:     Vietnam Datacommunications Company (VDC)
address:     258 Ba Trieu street, Hanoi capital, Vietnam
country:     VN
phone:       +84-4-8212680
fax-no:      +84-4-9760397
e-mail:      pbthuy29 at vnn.vn
nic-hdl:     KNH1-AP
remarks:     Contact: pbthuy29 at vnn.vn
mnt-by:      VNPT
changed:     admin.vnn at vnnic.net.vn 20020604
source:      APNIC


Arlan Ramsay wrote:
> It is dated at around 3am Tuesday, and has strange attachments.
> It came to me as if from blug.  Is it a hoax, a virus attempt,
> or what?  There is an octet stream attachment, which I can forward
> if it is useful.  Did everyone on the list get this?
> 
> Arlan Ramsay
> 
> Here is the full header:
> 
>>From fschmid at archenergy.com Wed Jun 26 09:19:21 2002
> Received: from community.tummy.com
>     (IDENT:87FAFAFdewC6aKo7zvgb4YmY7/GLPNcz at community.tummy.com [66.54.152.73])
> 	by euclid.Colorado.EDU (8.10.1/8.10.1/UnixOps+Hesiod) with SMTP id
>     g5Q9cBI01537
> 	for <ramsay at euclid.colorado.edu>; Wed, 26 Jun 2002 03:38:11 -0600 (MDT)
> Date: Wed, 26 Jun 2002 03:38:11 -0600 (MDT)
> Message-Id: <200206260938.g5Q9cBI01537 at euclid.Colorado.EDU>
> Received: (qmail 29129 invoked by uid 0); 26 Jun 2002 09:38:06 -0000
> Received: from localhost (HELO community.tummy.com)
>     (?Pe0oomFqLOW8hxz4ZrrVSTpP0RK7ZIYG?@127.0.0.1)
>   by localhost with SMTP; 26 Jun 2002 09:38:05 -0000
> Delivered-To: mailman-lists.lug.boulder.co.us-lug at lists.lug.boulder.co.us
> Received: (qmail 29096 invoked by alias); 26 Jun 2002 09:37:44 -0000
> Delivered-To: alias-blug_dom-lug at lug.boulder.co.us
> Received: (qmail 29093 invoked by uid 0); 26 Jun 2002 09:37:44 -0000
> Received: from mu11.vnn.vn (203.162.0.46)
>   by community.tummy.com with SMTP; 26 Jun 2002 09:37:43 -0000
> Received: from Vyuumfke ([203.162.0.55]) by mu11.vnn.vn
>           (Netscape Messaging Server 4.15) with SMTP id GYB42W04.1CI for
>           <lug at lug.boulder.co.us>; Wed, 26 Jun 2002 16:37:44 +0700
> From: fschmid <fschmid at archenergy.com>
> To: lug at lug.boulder.co.us
> MIME-Version: 1.0
> Content-Type: multipart/alternative;
> 	boundary=KP9217G70579Uu281AwuZL07DKJ6F6
> Subject: [lug] A  good tool
> Sender: lug-admin at lug.boulder.co.us
> Errors-To: lug-admin at lug.boulder.co.us
> X-BeenThere: lug at lug.boulder.co.us
> X-Mailman-Version: 2.0.11
> Precedence: bulk
> Reply-To: lug at lug.boulder.co.us
> List-Help: <mailto:lug-request at lug.boulder.co.us?subject=help>
> List-Post: <mailto:lug at lug.boulder.co.us>
> List-Subscribe: <http://lists.lug.boulder.co.us/mailman/listinfo/lug>,
> 	<mailto:lug-request at lug.boulder.co.us?subject=subscribe>
> List-Id: Boulder (Colorado) Linux Users Group -- General Mailing List
>     <lug.lug.boulder.co.us>
> List-Unsubscribe: <http://lists.lug.boulder.co.us/mailman/listinfo/lug>,
> 	<mailto:lug-request at lug.boulder.co.us?subject=unsubscribe>
> List-Archive: <http://lists.lug.boulder.co.us/pipermail/lug/>
> Content-Length: 9498
> 
> 
>     [ Part 1, Text/PLAIN  6 lines. ]
>     [ Unable to print this part. ]
> 
> 
>     [ Part 2, Text/HTML  5 lines. ]
>     [ Unable to print this part. ]
> 
> 
>     [ Part 3, Text/PLAIN  5 lines. ]
>     [ Unable to print this part. ]
> 
> 
>     [ Part 5, Application/OCTET-STREAM (Name: "QPLS240USB")  8.2KB. ]
>     [ Unable to print this part. ]
> 
> 
> 
> _______________________________________________
> Web Page:  http://lug.boulder.co.us
> Mailing List: http://lists.lug.boulder.co.us/mailman/listinfo/lug
> Join us on IRC: lug.boulder.co.us port=6667 channel=#colug


-- 
Ferdinand Schmid
Architectural Energy Corporation
Celebrating 20 Years of Improving Building Energy Performance
http://www.archenergy.com