From mboxrd@z Thu Jan 1 00:00:00 1970 From: Lindsay Haisley Date: Mon, 13 Dec 2004 17:50:39 +0000 Subject: Problems with the Sourceforge list server at 66.35.250.220 Message-Id: <20041213175039.GE1777@fmp.com> List-Id: MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit To: linux-hotplug@vger.kernel.org It looks as though one of the Sourceforge list/mail servers has been, or was compromised. My mail server uses advisory blocking lists, including one from SpamCop, and the IP addres 66.35.250.220 (sc8-sf-sshgate.sourceforge.net) was listed (and blocked by my mail server) starting last week. This is the server used by the linux-hotplug-devel list. I disputed the listing and received the following in response to my post. --- FORWARDED MESSAGE --- Date: Sat, 11 Dec 2004 00:40:20 -0600 From: SpamCop/Richard Subject: Re: BL dispute: IP:66.35.250.220 To: Lindsay Haisley Hi Lindsay, There isn't much we can do with this listing -- the listing is proper and legit. There is a copy of PHPNuke on that server that the good old 419 and lottery scammers have discovered and are pumping their spam through it. I trust as a member of sourceforge you are aware of the PHPNuke exploit, so I don't have to explain it. http://www.spamcop.net/sc?id=z700826632z7006e145b61d0b6c6dac99e6152c98cez http://www.spamcop.net/sc?id=z700822535z21f624aad7ce275b8094b16a4af8c99ez Richard Please include all previous correspondence with replies ------- ----- Original Message ----- From: "Lindsay Haisley" To: Sent: Friday, December 10, 2004 10:16 AM Subject: BL dispute: IP:66.35.250.220 >GOOD GOD, PEOPLE!!! You're listing SOURCEFORGE!! > >Please STOP!!!!! > >$ dig -x 66.35.250.220;; ANSWER SECTION: >220.250.35.66.in-addr.arpa. 1339 IN CNAME >220.0/24.250.35.66.in-addr.arpa. >220.0/24.250.35.66.in-addr.arpa. 1339 IN PTR >sc8-sf-sshgate.sourceforge.net. > >There are other IPs belonging to developer lists that are also >blocked. > >I'm on a number of developer mailing lists and can't get ANY email >from them. I'm going to have to remove spamcop from the mix of >advisory blocking lists on my mailserver. > > > >-- >This email generated by SpamCop web support form >Referer: http://www.spamcop.net/w3m?action=blcheck&ipf.35.250.220 >Details: >http://www.spamcop.net/admin?action=runquery;query=ipstats;paramf.35.250.220 > --- END FORWARDED MESSAGE --- -- Lindsay Haisley | "Fighting against human | PGP public key FMP Computer Services | creativity is like | available at 512-259-1190 | trying to eradicate | http://www.fmp.com | dandelions" | | (Pamela Jones) | ------------------------------------------------------- SF email is sponsored by - The IT Product Guide Read honest & candid reviews on hundreds of IT Products from real users. Discover which products truly live up to the hype. Start reading now. http://productguide.itmanagersjournal.com/ _______________________________________________ Linux-hotplug-devel mailing list http://linux-hotplug.sourceforge.net Linux-hotplug-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/linux-hotplug-devel