🚀 go-pugleaf

On Mon, 26 Oct 1998 18:54:24 -0800, "Hari Kari" <rickb794@best.com>
wrote:

>I have obviously stepped on some toes!  Oops! Sorry.  <he he he>
>Makes my day.    :>)
>I've gotten 2 of his hotmail boxes canceled.    :>)
>Now this is a new situation for me.
>He has threatened my machine.
>Do I just complain to his up stream?
>Share your advice.
>
>He is the coordinator at newnet....
>or is misrepresenting himself as such.
>
>whois output
>NewNet, Inc. (NETBLK-NEWNET-234)
>2 Enterprise Drive   Shelton, CT 06484   USA
>   Netname: NEWNET-234
>Netblock: 12.19.234.0 - 12.19.234.255
>Coordinator:
>      Yekani, Niloofar  (NY8-ARIN)  yekani@NEWNET.COM
>203-925-6144
>   Record last updated on 20-Aug-98.
>   Database last updated on 26-Oct-98 16:11:00 EDT.
>
>stonehenge.newnet.com appears to be his private little spamhaus
>
>complete message and headers attached
>less some of his original spam body
>
>**************************************************************
>Return-Path: yekani@newnet.comReceived: from proxy2.ba.best.com
>(root@proxy2.ba.best.com [206.184.139.13])
> by shell5.ba.best.com (8.9.0/8.9.0/best.sh) with ESMTP id HAA05664
> for <rickb794@shell5.ba.best.com>; Mon, 26 Oct 1998 07:29:29 -0800 (PST)
>Received: from stonehenge.newnet.com (stonehenge.newnet.com [206.34.175.254]
>(may be forged))

   Hmmm....... 206.34.175.254 is actually AT&T.....  Yup, I'd say
complain upstream at EDS that supplies NEWNET, but he might be with
AT&T now.    Get in touch with NEWNET anyway because the may be so
lame as to have let this guy know who was complaining. ( I had a
Canadian ISP do that to me once ....  That time the spammer didn't
forge headers or make threats.   I just complained again to the ISP.)
The act of this guy's threat is a more serious crime than spam alone.
Federal offence I beleave....  


> by proxy2.ba.best.com (8.9.0/8.9.0/best.in) with SMTP id HAA10134;
> Mon, 26 Oct 1998 07:27:18 -0800 (PST)
>Received: by stonehenge.newnet.com; id JAA14728; Mon, 26 Oct 1998
>09:49:13 -0500
>Received: from nn1svr.newnet.com(155.226.146.40) by stonehenge.newnet.com
>via smap (3.2)
> id xma014720; Mon, 26 Oct 98 14:48:46 GMT
>Received: from orville.ebs.com by nn1svr (SMI-8.6/SMI-SVR4)
> id KAA15385; Mon, 26 Oct 1998 10:27:31 -0500
>Received: from orville by orville.ebs.com (SMI-8.6/SMI-SVR4)
> id KAA05740; Mon, 26 Oct 1998 10:27:39 -0500
>Message-Id: <199810261527.KAA05740@orville.ebs.com>
>Date: Mon, 26 Oct 1998 10:27:39 -0500 (EST)
>From: Niloofar Yekani <yekani@newnet.com>
>Reply-To: Niloofar Yekani <yekani@newnet.com>
>Subject: Re: UCE ALERT 54 - wc12005-toner
>To: rickb794@best.com, postmaster@best.com, root@best.com
>MIME-Version: 1.0
>Content-Type: TEXT/plain; charset=us-ascii
>Content-MD5: 4rV93QsvgV+z18Oi+82gHQ==
>X-Mailer: dtmail 1.2.0 CDE Version 1.2 SunOS 5.6 sun4m sparc
>X-UIDL: ff39d3379085d42e1cc79df3c550c811
>
>YOU ARE UNDER INVESTIGATION FOR ABUSING THE NET. GET READY TO MEET THE
>CONSEQUENCES. DON'T BE SURPRISED IF YOUR COMPUTER TURNED INTO A CACHE
>REGISTER.
>
>
>
>From: "Rick Begeman" <rickb794@best.com>
>> To: <abuse@hotmail.com>, <postmaster@newnet.com>
>> Subject: UCE ALERT 54 - wc12005-toner
>> Date: Sun, 25 Oct 1998 18:58:52 -0800
>> MIME-Version: 1.0
>> Content-Transfer-Encoding: 7bit
>> X-Priority: 3
>> X-MSMail-Priority: Normal
>> X-MimeOLE: Produced By Microsoft MimeOLE V4.72.3155.0
>>
>> You have received this message because,
>> - you are hosting a spammer,
>> - a spammer has gained access to your system,
>> - an account hosted by you is advertised in a spam,
>> - your domain was fraudulently used in a spam,
>> - or you have an open mail relay.
>>
>> Please take appropriate action.
>>
>> Attached below is a sample copy (with headers) of spam received.
>>
>> To prevent your address and domain from being added to auto
>> responding spam filtering software, please respond to this message
>> reporting action taken.
>>
>> Thank you for helping keep the 'net free from this type of abuse
>>
>> Note:
>> "Opt out" or "remove" lists are not an acceptable solution,
>> they impose a burden on the recipients part, and are
>> much too vulnerable to abuse by proving a valid address.
>>
>> More information about anti-spam policies can be found at
>>      http://spam.abuse.net/
>> and
>>      http://www.cauce.org/
>> More information about Internet abuse by mail relaying is available from
>>      http://maps.vix.com/
>> and an updated version of the sendmail program, which will probably
>> make it much easier for you to block inappropriate relays, should
>> be available from:  The current stable version of sendmail is 8.9.0/8.9.0
>>      http://www.sendmail.com/
>>
>> ***************************************
>>
>>
>> ***************************************
>> Return-Path: hh2550@hotmail.comReceived: from proxy2.ba.best.com
>> (root@proxy2.ba.best.com [206.184.139.13])
>>  by shell5.ba.best.com (8.9.0/8.9.0/best.sh) with ESMTP id NAA20094
>>  for <rickb794@shell5.ba.best.com>; Sun, 25 Oct 1998 13:24:38 -0800 (PST)
>> From: hh2550@hotmail.com
>> Received: from stonehenge.newnet.com (stonehenge.newnet.com
>> [206.34.175.254])
>>  by proxy2.ba.best.com (8.9.0/8.9.0/best.in) with SMTP id NAA04453
>>  for <rickb794@best.com>; Sun, 25 Oct 1998 13:24:13 -0800 (PST)
>> Received: by stonehenge.newnet.com; id PAA11680; Sun, 25 Oct 1998
>> 15:18:05 -0500
>> Received: from unknown(12.69.99.82) by stonehenge newnet.com via smap
>(3.2)
>>  id xmaba1445; Sun, 25 Oct 98 20:17:34 GMT
>> Date: Sun, 25 Oct 98 15:52:25 EST
>> To: Friend@public.com
>> Subject: wc12005-toner
>> Message-ID: <>
>> X-UIDL: 625ddc3f864de6b522b53f098654e462
>>
>>
>>
>>
>>
>>
>>
>> BENCHMARK PRINT SUPPLY
>> 1091 REDSTONE LANE
>> ATLANTA GA 30338
>>
>> CALL---->       770-399-0953   FOR TONER SUPPLIES ORDERS/PRICING ONLY
>>
>> CALL---->       770-399-5505   CUSTOMER SERVICE/SUPPORT ISSUES
>>
>> CALL---->       770-399-5614    E-MAIL REMOVAL COMPLAINTS LINE
>>
>((((((((((((SNIP)))))))))))))))))))
>>
>>
>>
>>
>>
>
>******************************************************
>* Niloofar Yekani                                    *
>* ADC NewNet Inc.,                                   *
>* System and Network administrator                   *
>*                                                    *
>* e-mail: yekani@newnet.com    Phone: (203)925-6144  *
>*                                Fax: (203)926-2664  *
>******************************************************
>
>
>
>