Roger, 

 

Can you tell me, in non technical language, why site-advisor would have a
problem with such a situation.  

 

I have to confess it's just idle curiosity, so if too much work, don't
bother. 

 

Nick 

 

From: [email protected] [mailto:[email protected]] On Behalf
Of Roger Critchlow
Sent: Monday, January 03, 2011 5:28 PM
To: The Friday Morning Applied Complexity Coffee Group
Subject: Re: [FRIAM] dropbox?

 






McAfee SiteAdvisor Warning


 

This e-mail message contains potentially unsafe links to these sites:


 
<http://www.siteadvisor.com/sites/friam.org?pip=false&premium=true&client_ui
d=1064314504&client_ver=3.3.0.168&client_type=IEPlugin&suite=true&aff_id=0&l
ocale=en_us&os_ver=6.1.0.0> 

friam.org


 

 

The problem with friam.org is probably that it uses a cross-site frame to
load its content from redfish.com, SiteAdvisor approves of redfish.com and a
handful of other hand built sites that I know.

 

-- rec --

On Mon, Jan 3, 2011 at 4:53 PM, Owen Densmore <[email protected]> wrote:

Great work, Roger!

 

[email protected] is hosted at joyent.com, not hostgo.

 

My DNS is managed by DNSMadeEasy, I use it to forward all my incoming email
(MX records) to Postini for spam management which then forwards to my joyent
email .. but I doubt this has anything to do with the problem.  You can see
the filtering in the long headers as psmtp.com entries.

 

    -- Owen

 

 

On Jan 3, 2011, at 2:20 PM, Roger Critchlow wrote:





The IP address that the x-spam-report lists as blacklisted [209.86.89.62
listed in list.dnswl.org <http://list.dnswl.org/> ] maps to
elasmtp-dupuy.atl.sa.earthlink.net
<http://elasmtp-dupuy.atl.sa.earthlink.net/>  which doesn't have any
relationship to anything that Owen sent.  Ah, but it is one of smtp servers
that Nick's email client uses, it shows up in the headers as the recipient
of email from NicksPC.  So Nick's earthlink mail sender is/was blacklisted
at dnswl.org <http://dnswl.org/> , but earthlink probably fixed that as fast
as they could.

 

I've looked at headers for several messages, I don't see the x-spam-report
in any, where were they?  Only in messages from Nick delivered to Owen?
Owen, does hostgo.com <http://hostgo.com/>  host the mailbox for
backspaces.net <http://backspaces.net/> ?  They might only insert the
x-spam-report into mail being delivered to locally hosted mailboxes.  The
headers appear in most recently inserted first order, so if the
x-spam-report appears close to the final delivery, it's probably only in
your copies. 

 

The SiteAdvisor warning is probably unrelated to the x-spam-report that Owen
is seeing.  SiteAdvisor is saying that McAffee has friam.org
<http://friam.org/>  (or the IP address that DNS lookup returned for
friam.org <http://friam.org/> ) in a list of hazardous sites, not to be
confused with a list of sites that are spam generators.  

 

Seeing nothing strange at friam.org <http://friam.org/>  according to my DNS
lookup, I would wonder if Nick's DNS has been pwned.  That is, despite the
paranoia which we've instilled in Nick, he still managed to install a trojan
that has hijacked the DNS services on his machine to redirect him to more
bad sites.

 

-- rec --

 

On Mon, Jan 3, 2011 at 11:59 AM, Nicholas Thompson
<[email protected]> wrote:

Isn't it the sort of header that would trigger such a response in mcafee?

 

 

 

From: [email protected] [mailto:[email protected]] On Behalf
Of Owen Densmore
Sent: Monday, January 03, 2011 10:56 AM


To: The Friday Morning Applied Complexity Coffee Group

Subject: Re: [FRIAM] dropbox?

 

 

        
McAfee SiteAdvisor Warning


 

This e-mail message contains potentially unsafe links to these sites:


 
<http://www.siteadvisor.com/sites/friam.org?pip=false&premium=true&client_ui
d=1064314504&client_ver=3.3.0.168&client_type=IEPlugin&suite=true&aff_id=0&l
ocale=en_us&os_ver=6.1.0.0> 

 
<http://www.siteadvisor.com/sites/friam.org?pip=false&premium=true&client_ui
d=1064314504&client_ver=3.3.0.168&client_type=IEPlugin&suite=true&aff_id=0&l
ocale=en_us&os_ver=6.1.0.0> friam.org


 
<http://www.siteadvisor.com/sites/friam.org?pip=false&premium=true&client_ui
d=1064314504&client_ver=3.3.0.168&client_type=IEPlugin&suite=true&aff_id=0&l
ocale=en_us&os_ver=6.1.0.0>  

 
<http://www.siteadvisor.com/sites/friam.org?pip=false&premium=true&client_ui
d=1064314504&client_ver=3.3.0.168&client_type=IEPlugin&suite=true&aff_id=0&l
ocale=en_us&os_ver=6.1.0.0>  

 
<http://www.siteadvisor.com/sites/friam.org?pip=false&premium=true&client_ui
d=1064314504&client_ver=3.3.0.168&client_type=IEPlugin&suite=true&aff_id=0&l
ocale=en_us&os_ver=6.1.0.0> Looking at the long headers, I still see the
hostgo tag warning:

 
<http://www.siteadvisor.com/sites/friam.org?pip=false&premium=true&client_ui
d=1064314504&client_ver=3.3.0.168&client_type=IEPlugin&suite=true&aff_id=0&l
ocale=en_us&os_ver=6.1.0.0>
X-Spam-Report:      Spam detection software, running on the system
"milan.hostgo.com", has identified this incoming email as possible spam. The
original message has been attached to this so you can view it (if it isn't
spam) or label similar future email.  If you have any questions, see the
administrator of that system for details. Content preview: Off topic: The
warning only appears only on FRIAM messages and it appears on all of them.
Is there anything about FRIAM that the list-owner should be attending to?
[...]  Content analysis details:   (-2.2 points, 5.0 required) pts rule name
description ---- ----------------------
-------------------------------------------------- -0.0 RCVD_IN_DNSWL_NONE
RBL: Sender listed at http://www.dnswl.org/, low trust [209.86.89.62 listed
in list.dnswl.org] -0.0 T_RP_MATCHES_RCVD Envelope sender domain matches
handover relay domain -1.9 BAYES_00               BODY: Bayes spam
probability is 0 to 1% [score: 0.0000] -0.3 AWL AWL: From: address is in the
auto white-list

 
<http://www.siteadvisor.com/sites/friam.org?pip=false&premium=true&client_ui
d=1064314504&client_ver=3.3.0.168&client_type=IEPlugin&suite=true&aff_id=0&l
ocale=en_us&os_ver=6.1.0.0>  

 
<http://www.siteadvisor.com/sites/friam.org?pip=false&premium=true&client_ui
d=1064314504&client_ver=3.3.0.168&client_type=IEPlugin&suite=true&aff_id=0&l
ocale=en_us&os_ver=6.1.0.0> But I'm not sure that would rase the warning you
see.

 
<http://www.siteadvisor.com/sites/friam.org?pip=false&premium=true&client_ui
d=1064314504&client_ver=3.3.0.168&client_type=IEPlugin&suite=true&aff_id=0&l
ocale=en_us&os_ver=6.1.0.0>  

 
<http://www.siteadvisor.com/sites/friam.org?pip=false&premium=true&client_ui
d=1064314504&client_ver=3.3.0.168&client_type=IEPlugin&suite=true&aff_id=0&l
ocale=en_us&os_ver=6.1.0.0>     -- Owen

 
<http://www.siteadvisor.com/sites/friam.org?pip=false&premium=true&client_ui
d=1064314504&client_ver=3.3.0.168&client_type=IEPlugin&suite=true&aff_id=0&l
ocale=en_us&os_ver=6.1.0.0> 
On Jan 2, 2011, at 8:41 PM, Nicholas Thompson wrote:



 
<http://www.siteadvisor.com/sites/friam.org?pip=false&premium=true&client_ui
d=1064314504&client_ver=3.3.0.168&client_type=IEPlugin&suite=true&aff_id=0&l
ocale=en_us&os_ver=6.1.0.0> Off topic:

The warning only appears only on FRIAM messages and it appears on all of
them.  

Is there anything about FRIAM that the list-owner should be attending to? 

N

-----Original Message-----
From: [email protected] [mailto:[email protected]] On Behalf
Of Owen Densmore
Sent: Sunday, January 02, 2011 6:54 PM
To: The Friday Morning Applied Complexity Coffee Group; SFx Discuss
Subject: Re: [FRIAM] dropbox?

            McAfee SiteAdvisor Warning

            This e-mail message contains potentially unsafe links to these
sites:
            friam.org

I've started to use dropbox and it seems a real winner!  I really like the
way it combines a remote disk along with local sync'ed folders.

Would anyone who doesn't have a dropbox account yet be willing to sign up as
a referral? 
            https://www.dropbox.com/referrals

If you want to start an account, let me refer you first, and we'll BOTH get
250MB more .. up to a limit of 8GB.  Just send me an email, I'll fill the
form above, and we'll both get a larger account.

   -- Owen



============================================================
FRIAM Applied Complexity Group listserv
Meets Fridays 9a-11:30 at cafe at St. John's College lectures, archives,
unsubscribe, maps at http://www.friam.org


============================================================
FRIAM Applied Complexity Group listserv
Meets Fridays 9a-11:30 at cafe at St. John's College
lectures, archives, unsubscribe, maps at http://www.friam.org

 
<http://www.siteadvisor.com/sites/friam.org?pip=false&premium=true&client_ui
d=1064314504&client_ver=3.3.0.168&client_type=IEPlugin&suite=true&aff_id=0&l
ocale=en_us&os_ver=6.1.0.0>  

 
<http://www.siteadvisor.com/sites/friam.org?pip=false&premium=true&client_ui
d=1064314504&client_ver=3.3.0.168&client_type=IEPlugin&suite=true&aff_id=0&l
ocale=en_us&os_ver=6.1.0.0> 
============================================================
FRIAM Applied Complexity Group listserv
Meets Fridays 9a-11:30 at cafe at St. John's College
lectures, archives, unsubscribe, maps at http://www.friam.org

 
<http://www.siteadvisor.com/sites/friam.org?pip=false&premium=true&client_ui
d=1064314504&client_ver=3.3.0.168&client_type=IEPlugin&suite=true&aff_id=0&l
ocale=en_us&os_ver=6.1.0.0>  

 
<http://www.siteadvisor.com/sites/friam.org?pip=false&premium=true&client_ui
d=1064314504&client_ver=3.3.0.168&client_type=IEPlugin&suite=true&aff_id=0&l
ocale=en_us&os_ver=6.1.0.0>
============================================================
FRIAM Applied Complexity Group listserv
Meets Fridays 9a-11:30 at cafe at St. John's College
lectures, archives, unsubscribe, maps at http://www.friam.org

 
<http://www.siteadvisor.com/sites/friam.org?pip=false&premium=true&client_ui
d=1064314504&client_ver=3.3.0.168&client_type=IEPlugin&suite=true&aff_id=0&l
ocale=en_us&os_ver=6.1.0.0>  

 
<http://www.siteadvisor.com/sites/friam.org?pip=false&premium=true&client_ui
d=1064314504&client_ver=3.3.0.168&client_type=IEPlugin&suite=true&aff_id=0&l
ocale=en_us&os_ver=6.1.0.0> 
============================================================
FRIAM Applied Complexity Group listserv
Meets Fridays 9a-11:30 at cafe at St. John's College
lectures, archives, unsubscribe, maps at http://www.friam.org

 
<http://www.siteadvisor.com/sites/friam.org?pip=false&premium=true&client_ui
d=1064314504&client_ver=3.3.0.168&client_type=IEPlugin&suite=true&aff_id=0&l
ocale=en_us&os_ver=6.1.0.0>  

<<image001.gif>>

============================================================
FRIAM Applied Complexity Group listserv
Meets Fridays 9a-11:30 at cafe at St. John's College
lectures, archives, unsubscribe, maps at http://www.friam.org

Reply via email to