Flood of control messages

Hans Lambermont Hans.Lambermont at garg.mpn.cp.philips.com
Wed Nov 3 08:32:59 UTC 1999


Javier Henderson wrote:

> For the last week or two, I've been seeing a plethora [1] of newgroups
> with "hipcrime" in the group name. Many (most?) are faked up 1) Has
> anyone else noticed this?

yes :-(

> 1a) Any hints on how to deal with this problem?

I think
  all:*:*hipcrime*:drop
will do. Right ?

Some header info:
 checkgroup.fetish2 at pqxlywjucj.org
 news.amphenol.com.tw!ierbvpqvds.net                                            
 Newsgroups: eye.config,school.config,biz.config                             
 Subject: CmSg ChEcKgRoUpS                                                   
 NNTP-Posting-Host: 203.73.81.131      (resolves to dns.amphenol.com.tw.)
 Frequency: at least twice-per-day (and increasing)
            ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
            eeks, no! Have Mercy ! :-) 

The website at http://amphenol.com.tw/ looks like a normal, non-hacker,
site to me (trying to sell some stupid NT-SP4). Perhaps we can complain
with them ?

regards,
   Hans Lambermont


More information about the inn-workers mailing list