zfs discuss - Jun 2008 - What is this, who is doing it, and how do I get you to stop?

Every time I post to this list, I get an AUTOREPLY from somebody who if
you ask me is up to no good, otherwise they would set a proper From: address
instead of spoofing my domain.
> Received: from mail01.csw-datensysteme.de ([62.153.225.98])
>  by wiggum.4amlunch.net
>  (Sun Java(tm) System Messaging Server 6.3-6.03 (built Mar 14 2008; 32bit))
>  with ESMTP id <0K2V001OTFRXVM00 at wiggum.4amlunch.net> for wonko at
4amlunch.net;
>  Sun, 22 Jun 2008 11:46:14 -0400 (EDT)
> Original-recipient: rfc822;wonko at 4amlunch.net
> From: Irrl*ufer at 4amlunch.net
> Subject: AUTOREPLY Re: [zfs-discuss] ZFS-Performance: Raid-Z vs. Raid5/6
v...
> To: wonko at 4amlunch.net
> Date: Sun, 22 Jun 2008 15:44:50 +0000
> Priority: normal
> X-Priority: 3 (Normal)
> Importance: normal
> X-Mailer: DvISE by Tobit Software, Germany (0241.444A46454D464F4D4E50),
>  Mime Converter 101.20
> X-David-Sym: 0
> X-David-Flags: 0
> Message-id: <00032C57.485E8F72 at mail01.csw-datensysteme.de>
> MIME-version: 1.0
> Content-type: text/plain; charset=iso-8859-1
> Content-transfer-encoding: 7Bit
I don''t know who you are, and honestly I don''t think I care,
I''m going to just
start firewalling you.  I recommend everyone else on the list does the same.

-brian
-- 
"Coding in C is like sending a 3 year old to do groceries. You gotta
tell them exactly what you want or you''ll end up with a cupboard full
of
pop tarts and pancake mix." -- IRC User (http://www.bash.org/?841435)

Hello Brian!

> Every time I post to this list, I get an AUTOREPLY from somebody who if
> you ask me is up to no good, otherwise they would set a proper From:
address
> instead of spoofing my domain.
Everyone who post gets this autoreply.
> From: Irrl*ufer at 4amlunch.net
These people are not spoofing your domain, they set a "From:" header
with no "@domain".  Many MTAs append the local domain in this case.
Maybe it''s because they use a German umlaut in the "From:"
string.

Judging from the word "Irrl?ufer", someone at their site has
subscribed
to zfs-discuss but does not exist there any more.
> Received: from mail01.csw-datensysteme.de ([62.153.225.98])
It seems to be a German company (not too far away from me, too. :-)
> > X-Mailer: DvISE by Tobit Software, Germany
(0241.444A46454D464F4D4E50),
As you can see, they use a commercial mail appliance.  It''s probably
just misconfigured.
> I don''t know who you are, and honestly I don''t think I
care, I''m going to just
> start firewalling you.  I recommend everyone else on the list does the
same.
No need to get uptight, just tell them politely.  Eventually they
will figure it out.  :-)


Regards -- Volker
-- 
------------------------------------------------------------------------
Volker A. Brandt                  Consulting and Support for Sun Solaris
Brandt & Brandt Computer GmbH                   WWW: http://www.bb-c.de/
Am Wiesenpfad 6, 53340 Meckenheim                     Email: vab at bb-c.de
Handelsregister: Amtsgericht Bonn, HRB 10513              Schuhgr??e: 45
Gesch?ftsf?hrer: Rainer J. H. Brandt und Volker A. Brandt

On Sun, Jun 22, 2008 at 06:11:21PM +0200, Volker A. Brandt
wrote:
> 
> Everyone who post gets this autoreply.
So what do the rest of you do?  Ignore it?
> > From: Irrl*ufer at 4amlunch.net
> 
> These people are not spoofing your domain, they set a "From:"
header
> with no "@domain".  Many MTAs append the local domain in this
case.
> Maybe it''s because they use a German umlaut in the
"From:" string.
That''s not a valid email address either, which is still wrong.
> Judging from the word "Irrl?ufer", someone at their site has
subscribed
> to zfs-discuss but does not exist there any more.
Then they should send back a message pointing out that the user is not longer
there, not just send the whole message back.
> > Received: from mail01.csw-datensysteme.de ([62.153.225.98])
> It seems to be a German company (not too far away from me, too. :-)
Hmmmm, are you for hire?  Maybe you could take a trip out there and deliver
some clue. ;)
> > > X-Mailer: DvISE by Tobit Software, Germany
(0241.444A46454D464F4D4E50),
> 
> As you can see, they use a commercial mail appliance.  It''s
probably
> just misconfigured.
Email appliances and Exchange servers are the bane of the internet.  You
don''t need
to know how to properly setup and email server because now anyone can do it! :)
> > I don''t know who you are, and honestly I don''t think
I care, I''m going to just
> > start firewalling you.  I recommend everyone else on the list does the
same.
> 
> No need to get uptight, just tell them politely.  Eventually they
> will figure it out.  :-)
If they had sent some sort of "this user is no longer here" message or
some such I
would have been less likely to get all jumpy about it.  I''ll redirect
my misguided
anger at yet another poorly managed mail server at the poor sods who admin it.

-brian
-- 
"Coding in C is like sending a 3 year old to do groceries. You gotta
tell them exactly what you want or you''ll end up with a cupboard full
of
pop tarts and pancake mix." -- IRC User (http://www.bash.org/?841435)

> > Everyone who post gets this autoreply.
>
> So what do the rest of you do?  Ignore it?
I for one do ignore it. :-)
> > > From: Irrl*ufer at 4amlunch.net
> >
> > These people are not spoofing your domain, they set a
"From:" header
> > with no "@domain".  Many MTAs append the local domain in
this case.
> > Maybe it''s because they use a German umlaut in the
"From:" string.
>
> That''s not a valid email address either, which is still wrong.
You''re right, it''s wrong.  But I didn''t say it was
right, right?
> > Judging from the word "Irrl?ufer", someone at their site has
subscribed
> > to zfs-discuss but does not exist there any more.
>
> Then they should send back a message pointing out that the user is not
longer
> there, not just send the whole message back.
Preaching to the choir...
> > > Received: from mail01.csw-datensysteme.de ([62.153.225.98])
> > It seems to be a German company (not too far away from me, too. :-)
>
> Hmmmm, are you for hire?  Maybe you could take a trip out there and deliver
> some clue. ;)
I am, and I could, but my clue-bat''s on loan to a Windows guy. :-)))
> > > > X-Mailer: DvISE by Tobit Software, Germany
(0241.444A46454D464F4D4E50),
> >
> > As you can see, they use a commercial mail appliance.  It''s
probably
> > just misconfigured.
>
> Email appliances and Exchange servers are the bane of the internet.
Amen!
> If they had sent some sort of "this user is no longer here"
message or some such I
> would have been less likely to get all jumpy about it.
Certainly!  See above, look for "choir".
>  I''ll redirect my misguided
> anger at yet another poorly managed mail server at the poor sods who admin
it.
Fair enough.


Regards -- Volker
-- 
------------------------------------------------------------------------
Volker A. Brandt                  Consulting and Support for Sun Solaris
Brandt & Brandt Computer GmbH                   WWW: http://www.bb-c.de/
Am Wiesenpfad 6, 53340 Meckenheim                     Email: vab at bb-c.de
Handelsregister: Amtsgericht Bonn, HRB 10513              Schuhgr??e: 45
Gesch?ftsf?hrer: Rainer J. H. Brandt und Volker A. Brandt