Date: Tue, 25 Sep 2001 13:17:21 -0400
Reply-To: "Carlen, Gregg" <Gregg.Carlen@DYNCORP.COM>
Sender: Vanagon Mailing List <vanagon@gerry.vanagon.com>
From: "Carlen, Gregg" <Gregg.Carlen@DYNCORP.COM>
Subject: Re: spammed after sending to the list ?
Content-Type: text/plain; charset="iso-8859-1"
Well, fact is that it IS possible to get spammed regardless of where you
send an email. There are two primary methods a bot (short for robot that
collects information) can acquire your email information. First, your email
does not go directly between your computer and the Gerry Server. It goes
through other servers (starting with your ISP), routers, switches, etc,
etc.. Then it Gerry distributes it to all members of the list. So, there
your email (more importantly, the header information with your SNMP address
in it) to all list members through another set of server, routers, switches.
Some are protected & some are not. So, with that said, a single email sent
from your PC to the list and out again may pass through dozens of servers,
routers and switches. Any of these points are prone to attack. A bot can be
used to collect addresses at will. This is the reason that public, 'free'
email accounts are so popular with spammers. Its because they can focus on
collecting email addresses at or near a source of prime targets (e.g.
hotmail, yahoo, pipeline, etc..)
The second main method is to attach a 'range' of addresses. You may have
received an email that was addressed to you and many others as
wolfgang@pipeline.com, wolfgang2@pipeline.com, wolfgang3@pipeline.dom, etc..
This 'shotgun' method trys to send to a range of email addresses in hopes of
getting valid recipients.
There are other methods, (e.g. address book capture, exchange/GroupWise
infiltration, etc.. ) but these are the primary ones used. Hope this
explains a little of why spam occurs. Anyone interested in discussing
further in detail, please email me offline.
Gregg
85 Westy (Vonya) 206k
DynCorp Information Systems, Network Engineer
-----Original Message-----
From: wolfgang [mailto:wolfgang@PIPELINE.COM]
Sent: Tuesday, September 25, 2001 8:47 AM
To: vanagon@GERRY.VANAGON.COM
Subject: Re: spammed after sending to the list ?
I'll repeat since several folks seemed to miss this point. It MUST
be someone on the list. I have NEVER used this email address for
ANYTHING but this list. This is part of my spam and virus
avoidance strategy.
I am not infected. I not only did not open the email, but I did not
even download it. My email client (Pegasus) allows me to view
headers without downloading. If I see something that looks like
spam, and with a title like that it's obvious, I delete it at the ISP's
server.
On 24 Sep 2001, at 20:32, Jim Arnott wrote:
> Snow white is a virus... not a porn site. The likelihood that it came
> from a listmember is small. More likely someone who has your address
> in their address book. If you opened the file, you'll need to
> disinfect. Go to <http://www.symantec.com> or <http://www.mcafee.com>
> and get the cure.
>
> You might also reply to the sender and let them know that their system
> is infected.
>
> Jim Arnott
> List Admin
> Spare Vanagon list
| 
