lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <012901c25352$6c5c7ee0$1600000a@organizacao>
From: editor at infoguerra.com.br (Giordani Rodrigues)
Subject: [Fwd: Legal Notification]

I processed the message header with SpamCop and found the following:


[snip]
Received:  from unknown (HELO isc2.org) (204.87.205.244) by
node-152.hosting-network.com with SMTP; 3 Sep 2002 11:21:32 -0000

[snip]
host isc2.org (checking ip) ip = 209.164.6.194
204.87.205.244 is not an MX for isc2.org
ips don't match; isc2.org discarded as fake
Taking name from IP...
host 204.87.205.244 (getting name) 204.87.205.244 =
cacheflowmty.intervan.net.
host cacheflowmty.intervan.net. (checking ip) ip not found ;
cacheflowmty.intervan.net. discarded as fake.
no MXs for cacheflowmty.intervan.net.
204.87.205.246 is an MX for intervan.net.
204.87.205.244 is not an MX for cacheflowmty.intervan.net.
ips are close enough
Received line accepted


As shown above, the message is not really from ISC2.org

Regards,

----------------------------------------------------------------------------
-
Giordani Rodrigues
URL: http://www.infoguerra.com.br
E-mail: editor@...oguerra.com.br
Phone/fax: +55 (41) 423-6291



----- Original Message -----
From: "Dave Aitel" <dave@...unitysec.com>
To: <full-disclosure@...ts.netsys.com>
Sent: Tuesday, September 03, 2002 9:10 AM
Subject: [Full-Disclosure] [Fwd: Legal Notification]



I figured I'd forward this on to the list as a warning.
-dave




Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ