Re: Forger posting from Wisc.Edu?

From: Uncle Bob (realonespam_at_bogusnet.net)
Date: 12/28/04 

Date: 28 Dec 2004 15:26:00 GMT

Val Kraut wrote:
> Am I right is assuming this refers to the weird recipes. If so any idea what
> news.doit.wisc.edu is associated with.These messages seem to be all over the
> boards.
>
>
> Val Kraut
>
>
> "Uncle Bob" <realonespam@bogusnet.net> wrote in message
> news:41d161b0$2_2@news1.uncensored-news.com...
>
>>The headers are forged, but all bear and X-trace field
>>"news.doit.wisc.edu" which is a real resolvable address.
>>
>>Let us investigate further and see if we can nip this in the bud.
>>
>>Clear skies,
>>Uncle Bob

I am assuming (and that's dangerous) that the messages are being
generated by abuse software authored by a person known as hipcrime, who
apparently wishes to make usenet un-useable (that is his only reason for
doing this).
Looking at the headers (and I'm no expert) it appears all the fields are
forged (altered) except the nntp posting host field, which points to a
news server at the University of Wisconson, Madison in the Dept. of
Information Technology (hence, DOIT). This is the only header, AFAIK,
that doesn't change from post to post.
If this header is not forged, there should be a log kept of access and
posting on the news server, which would point to posts in this group and
give the account of the person posting the messages.

Perhaps there is someone in this group who can contact UWM's DOIT and
inquire...

Uncle Bob

_______________________________________________________________________________
Posted Via Uncensored-News.Com - Accounts Starting At $6.95 - http://www.uncensored-news.com
               <><><><><><><> The Worlds Uncensored News Source <><><><><><><><>
  

Relevant Pages

  • Re: Bleach Episode 140 Summary
    ... I apologize for not posting my observations under your ... header. ... My news server didn't show your article when I posted mine ...
    (rec.arts.anime.misc)
  • Re: IP number question
    ... You *should* be talking about NNTP, because that is all that is ... The news server ACKs the windows by sending TCP ... You didn't read the original posting carefully. ... So how does google -know- that 192.70.172.31 was the posting host? ...
    (comp.security.misc)
  • Re: Stats comp.os.linux.misc (last 7 days)
    ... On Sun, 07 May 2006, in the Usenet newsgroup comp.os.linux.misc, in article ... 'alt.linux' and 'alt.os.linux' but posting to the appropriate group is ... on my news server, ... and haven't killfiles groups.google who are laughing. ...
    (comp.os.linux.misc)
  • Re: Censorship
    ... Microsoft's news posting filter which will auto-block certain content ... Topic subject matter the MS News Server admin. ... posts at Microsoft's discretion. ... Pass a Net Neutrality Law in the US!!!! ...
    (microsoft.public.security)
  • Re: stolen operating system
    ... So MS has included its machine header address in the posting since there are ... Scared of public outcry concerning privacy rights? ... If I go online I know that I'm out in the public's eye therefore I ...
    (microsoft.public.security)