Hi Doug, At least some of these messages DO come from the list. Actually their header contains the address of the IEE server as shows this header copy I received today below:
=========================================================== Return-Path: <[email protected]> Received: from localhost (argentum.amsterdam.box.nl [10.0.3.12]) by mail-deliver.box.nl (8.12.9/8.12.9) with ESMTP id i352OA00001006 for <[email protected]>; Mon, 5 Apr 2004 04:24:10 +0200 Received: from mail-accept.box.nl ([10.0.3.10]) by localhost (argentum [10.0.3.12]) (amavisd-new, port 10024) with LMTP id 14274-09 for <[email protected]>; Mon, 5 Apr 2004 04:24:07 +0200 (CEST) Received: from ruebert.ieee.org (ruebert.ieee.org [140.98.193.10]) by mail-accept.box.nl (8.12.9/8.12.9) with ESMTP id i352O6tD000938 for <[email protected]>; Mon, 5 Apr 2004 04:24:07 +0200 Received: from ruebert.ieee.org (localhost [127.0.0.1]) by ruebert.ieee.org (Switch-3.1.0/Switch-3.1.0) with ESMTP id i351aNp4000285 for <[email protected]>; Sun, 4 Apr 2004 21:36:23 -0400 (EDT) Received: (from majordom@localhost) by ruebert.ieee.org (Switch-3.1.0/Switch-3.1.0/Submit) id i351aNrr000284 for emc-pstc-resent; Sun, 4 Apr 2004 21:36:23 -0400 (EDT) Received: from engine.ieee.org (listserv.ieee.org [140.98.193.23]) by ruebert.ieee.org (Switch-3.1.0/Switch-3.1.0) with ESMTP id i351aMp4000276 for <[email protected]>; Sun, 4 Apr 2004 21:36:22 -0400 (EDT) Received: from hormel3.ieee.org (gemini4.ieee.org [140.98.193.189]) by engine.ieee.org (Switch-3.1.2/Switch-3.1.2) with ESMTP id i351aKiv016748 for <[email protected]>; Sun, 4 Apr 2004 21:36:20 -0400 (EDT) Received: from ieee.org (p23254-adsau07doujib2-acca.osaka.ocn.ne.jp [219.114.74.254]) by hormel3.ieee.org (Switch-3.1.2/Switch-3.1.0) with ESMTP id i351aCTX007251 for <[email protected]>; Sun, 4 Apr 2004 21:36:12 -0400 (EDT) Message-Id: <[email protected]> From: [email protected] To: [email protected] Subject: Delivery Failure ([email protected]) List-Post: [email protected] Date: Mon, 5 Apr 2004 09:35:48 +0900 ============================================================================ Several of the IP addresses in square brackets DO belong to IEEE servers, (like ruebert.ieee.org) showing that this message actually origins from the EMC-PSTC server. In this case it's our friend Bill Lyons address that has been used to spam the list. I use the free program "Sam Spade" to find out where messages truly origin from. I think that the IEEE server should not forward "cleaned" messages to the list but delete them and notify the sender only. They are of no relevance anymore to our subscribers. The enclosed attachments (mainly text files) do not contain the original message either. It just makes members think that college subscribers have infected computers, which is not the case. My guess is that a less scrupulous subscriber of our list has downloaded our full members list (that was possible (at least a few years ago) and sold them to a spammer, or someone meticulously scanned all archives of this group and deviously cross-spams the members with virus messages. The IP address of the offending computer can be found near the bottom [219.114.74.254] and it originates somewhere in Osaka ... Regards, Gert Gremmen Approvals manager ====================================================== ce-test, qualified testing Member of EMC committee CENELEC/IEC + Independent Consultancy Services + Compliance Testing and Design for CE + Improvement of product quality and reliability + Testing services according to: Electro magnetic Compatibility 89/336/EC Electrical Safety 73/23/EC Medical Devices 93/42/EC Radio & Telecommunication Terminal equipment 99/5/EC Website: www.ce-test.nl Phone : +31 10 415 24 26 Fax : +31 10 415 49 53 ====================================================== FW>-----Original Message----- FW>From: [email protected] [mailto:owner-emc- FW>[email protected]] On Behalf Of Doug Smith FW>Sent: woensdag 7 april 2004 17:03 FW>To: [email protected] FW>Cc: [email protected] FW>Subject: Re: Viruses FW> FW> FW>Hi All, FW> FW>I replied to an individual a few minutes ago, but will send this to FW>the group for info purposes. FW> FW>You actually do not receive and viruses from the list at all! Viruses FW>these days spoof email addresses and you can't tell where they come FW>from. It just means that your email address and the list address exist FW>on some infected computer somewhere. Leaving the list will not stop FW>the flood! Real messages from IEEE servers are stripped of viruses FW>before being passed on. FW> FW>I get messages all the time from admins that I sent a virus message to FW>which I answer I use Mac OS X. It is not possible to become infected FW>by clicking on an attachment because Unix treats all attachments as FW>data files and most people using OS X don't know how to change FW>attachments to executables even if they wanted to. Those that do know FW>the danger in doing so. But I still get the messages. FW> FW>Doug FW> FW> FW>[email protected] wrote: FW>> yes, me too FW>> FW>> FW>> FW>> -----Original Message----- FW>> From: Donnelly, Thomas [mailto:[email protected]] FW>> Sent: 07 April 2004 13:44 FW>> To: EMC-PST (E-mail) FW>> Subject: Viruses FW>> FW>> FW>> FW>> I don't know about anyone else but I seem to be getting allot of e- FW>mails FW>> from this group with viruses lately. Particularly the Netsky Worm. If FW>this FW>> continues I will be forced by my company to withdraw from the group. FW>Anyone FW>> else in the same boat? FW>> FW>> ------------------------------------------- FW>> This message is from the IEEE EMC Society Product Safety FW>> Technical Committee emc-pstc discussion list. FW>> FW>> Visit our web site at: http://www.ieee-pses.org/ FW>> FW>> To cancel your subscription, send mail to: FW>> [email protected] FW>> with the single line: FW>> unsubscribe emc-pstc FW>> FW>> For help, send mail to the list administrators: FW>> Ron Pickard: [email protected] FW>> Dave Heald: [email protected] FW>> FW>> For policy questions, send mail to: FW>> Richard Nute: [email protected] FW>> Jim Bacher: [email protected] FW>> FW>> All emc-pstc postings are archived and searchable on the web at: FW>> http://www.ieeecommunities.org/emc-pstc FW>> FW>> FW>> ********************************************************************** FW>> This email and any files transmitted with it are confidential and FW>> intended solely for the use of the individual or entity to whom they FW>> are addressed. If you have received this email in error please notify FW>> the system manager. FW>> FW>> This footnote also confirms that this email message has been swept by FW>> MIMEsweeper for the presence of computer viruses. FW>> FW>> NCHT FW>> ********************************************************************** FW>> FW>> FW>> FW>> ------------------------------------------- FW>> This message is from the IEEE EMC Society Product Safety FW>> Technical Committee emc-pstc discussion list. FW>> FW>> Visit our web site at: http://www.ieee-pses.org/ FW>> FW>> To cancel your subscription, send mail to: FW>> [email protected] FW>> with the single line: FW>> unsubscribe emc-pstc FW>> FW>> For help, send mail to the list administrators: FW>> Ron Pickard: [email protected] FW>> Dave Heald: [email protected] FW>> FW>> For policy questions, send mail to: FW>> Richard Nute: [email protected] FW>> Jim Bacher: [email protected] FW>> FW>> All emc-pstc postings are archived and searchable on the web at: FW>> http://www.ieeecommunities.org/emc-pstc FW>> FW>> FW> FW> FW>-- FW>------------------------------------------------------- FW> ___ _ Doug Smith FW> \ / ) P.O. Box 1457 FW> ========= Los Gatos, CA 95031-1457 FW> _ / \ / \ _ TEL/FAX: 408-356-4186/358-3799 FW> / /\ \ ] / /\ \ Mobile: 408-858-4528 FW>| q-----( ) | o | Email: [email protected] FW> \ _ / ] \ _ / Website: http://www.dsmith.org FW>------------------------------------------------------- FW> FW> FW>------------------------------------------- FW>This message is from the IEEE EMC Society Product Safety FW>Technical Committee emc-pstc discussion list. FW> FW>Visit our web site at: http://www.ieee-pses.org/ FW> FW>To cancel your subscription, send mail to: FW> [email protected] FW>with the single line: FW> unsubscribe emc-pstc FW> FW>For help, send mail to the list administrators: FW> Ron Pickard: [email protected] FW> Dave Heald: [email protected] FW> FW>For policy questions, send mail to: FW> Richard Nute: [email protected] FW> Jim Bacher: [email protected] FW> FW>All emc-pstc postings are archived and searchable on the web at: FW> http://www.ieeecommunities.org/emc-pstc This message is from the IEEE EMC Society Product Safety Technical Committee emc-pstc discussion list. Visit our web site at: http://www.ieee-pses.org/ To cancel your subscription, send mail to: [email protected] with the single line: unsubscribe emc-pstc For help, send mail to the list administrators: Ron Pickard: [email protected] Dave Heald: [email protected] For policy questions, send mail to: Richard Nute: [email protected] Jim Bacher: [email protected] All emc-pstc postings are archived and searchable on the web at: http://www.ieeecommunities.org/emc-pstc
