-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I don't think it's been sent from your computer either. And below is the reason. To anyone reading this it is rather long but it will explain things. Also, considerring how long this message is if anyone wants to reply to this which is highly un-necessary please trim the message down.
Upon careful examination I see the following: Headers from fake message: X-Originating-IP: 85.133.134.54 X-eGroups-Msg-Info: 2:11:20:0 From: mfeir <[EMAIL PROTECTED]> X-Yahoo-Profile: michael_feir Sender: [email protected] headers from the real Michael: X-Mailer: Microsoft Outlook Express 6.00.2900.2670 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2670 X-Originating-IP: 216.221.81.25 X-eGroups-Msg-Info: 1:12:0:0 From: michael feir <[EMAIL PROTECTED]> X-Yahoo-Profile: michael_feir When checking the ip 85.133.134.54 which the spam came from I get: % Information related to '85.133.128.0 - 85.133.255.255' inetnum: 85.133.128.0 - 85.133.255.255 netname: IR-SEPANTA-20051206 descr: Sepanta Communication Development Co. Ltd country: IR org: ORG-SCDC1-RIPE admin-c: KMH104 tech-c: KMH104 status: ALLOCATED PA mnt-by: RIPE-NCC-HM-MNT mnt-lower: SEPANTA-MNT mnt-routes: SEPANTA-MNT source: RIPE # Filtered organisation: ORG-SCDC1-RIPE org-name: Sepanta Communication Development Co. Ltd org-type: LIR address: SEPANTA Network Solutions Kiarash Mizanian 1575718611 TEHRAN IRAN phone: +982188315800 fax-no: +982188843534 e-mail: [EMAIL PROTECTED] admin-c: KMH104 mnt-ref: RIPE-NCC-HM-MNT mnt-ref: SEPANTA-MNT mnt-by: RIPE-NCC-HM-MNT source: RIPE # Filtered person: Kiarash Mizanian address: 123, Malayeri Poor Str, Haft_e_Tir Sq,Tehran phone: +98 21 8831 5800 fax-no: +98 21 8884 3534 e-mail: [EMAIL PROTECTED] nic-hdl: KMH104 source: RIPE # Filtered % Information related to '85.133.128.0/17AS39074' route: 85.133.128.0/17 descr: Sepanta Network Solutions Route origin: AS39074 mnt-by: SEPANTA-MNT source: RIPE # Filtered Now, when checking the ip: 216.221.81.25 which the real Micahel posted from I get: OrgName: Cogeco Telecom OrgID: CGOT Address: 5515 North Service Road City: Burlington StateProv: ON PostalCode: L7L-6G4 Country: CA NetRange: 216.221.64.0 - 216.221.95.255 CIDR: 216.221.64.0/19 NetName: CGOT NetHandle: NET-216-221-64-0-1 Parent: NET-216-0-0-0-0 NetType: Direct Allocation NameServer: NS.CGOCABLE.NET NameServer: NS1.CGOCABLE.NET NameServer: NS2.CGOCABLE.NET Comment: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE RegDate: 1999-05-11 Updated: 2001-09-21 RTechHandle: IS7-ORG-ARIN RTechName: Cogeco Cable RTechPhone: +1-905-333-7055 RTechEmail: [EMAIL PROTECTED] In short, by looking at the IP address of the x-originating-ip header you can definitely tell that it is not Michael sending these spam messages out. The problem is who or what ever is sending them out obviously has his email address and I would assume a copy of his addressbook which is how the blindgamers address is getting email messages. Since Yahoogroups allows these ip addresses then his messages based only on his email address and not any other form of authentication they are arriving here and appearing to be from Michael. If there was a way for us as list moderators to block based on IP address ranges then the problem would go away. As it is however I do not know what to suggest other than changing the email address but that does seem a little drastic. michael feir said the following on Mon, Mar 06, 2006 at 03:49:55PM -0500: > This is pretty odd. I've looked in my sent items folder and can't see any of > the messages. I've also gone over my computer with two anti-virus programs > plus two anti-spyware. I'm beginning to wonder if something's up with > Yahoogroups. None of the other lists I'm on are getting these messages. > Michael Feir - -- "The Schizophrenic: An Unauthorized Autobiography" Raul A. Gallegos ... IliwSsmc -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.7 (GNU/Linux) iD8DBQFEDKX/qqqqyw8Or2IRAgpRAJ9neXxrAEc1QnNC4buGE3rFzxWVyQCfcwf4 j9vYSbE7Lc3OQP2ncIkXbio= =j70q -----END PGP SIGNATURE----- to leave send a blank Email to: [EMAIL PROTECTED] You can contact the list owners/moderators by Emailing [EMAIL PROTECTED] to go nomail send a blank message to: [EMAIL PROTECTED] change "nomail" to "normal" to resume messages. Yahoo! Groups Links <*> To visit your group on the web, go to: http://groups.yahoo.com/group/blindgamers/ <*> To unsubscribe from this group, send an email to: [EMAIL PROTECTED] <*> Your use of Yahoo! Groups is subject to: http://docs.yahoo.com/info/terms/
