full-disclosure - [Fwd: Legal Notification]

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: editor at infoguerra.com.br (Giordani Rodrigues)
Subject: [Fwd: Legal Notification]

I processed the message header with SpamCop and found the following:

[snip]
Received:  from unknown (HELO isc2.org) (204.87.205.244) by
node-152.hosting-network.com with SMTP; 3 Sep 2002 11:21:32 -0000

[snip]
host isc2.org (checking ip) ip = 209.164.6.194
204.87.205.244 is not an MX for isc2.org
ips don't match; isc2.org discarded as fake
Taking name from IP...
host 204.87.205.244 (getting name) 204.87.205.244 =
cacheflowmty.intervan.net.
host cacheflowmty.intervan.net. (checking ip) ip not found ;
cacheflowmty.intervan.net. discarded as fake.
no MXs for cacheflowmty.intervan.net.
204.87.205.246 is an MX for intervan.net.
204.87.205.244 is not an MX for cacheflowmty.intervan.net.
ips are close enough
Received line accepted

As shown above, the message is not really from ISC2.org

Regards,

----------------------------------------------------------------------------
-
Giordani Rodrigues
URL: http://www.infoguerra.com.br
E-mail: editor@...oguerra.com.br
Phone/fax: +55 (41) 423-6291

----- Original Message -----
From: "Dave Aitel" <dave@...unitysec.com>
To: <full-disclosure@...ts.netsys.com>
Sent: Tuesday, September 03, 2002 9:10 AM
Subject: [Full-Disclosure] [Fwd: Legal Notification]

I figured I'd forward this on to the list as a warning.
-dave