patvdv
4th March 2003, 10:45
Hi all,
It seems we are getting hit by one or more spam attacks from users signing up and posting messages all over the place. It has happened twice so far and all related messages have been removed. However, if you do see such messages not being reacted upon, then don't hesitate to email us (boardmaster@baanboard.com). Removing these messages may inconvenience you if you are receiving threads notifications by email as the referred link will not work anymore. Let's hope this idiotry will cease soon.
OmeLuuk
4th March 2003, 11:03
I received some 15 mails of old postings that were sent as if a new message had been posted, ... Received: from {scrambled} ([{scrambled}]) by {scrambled} with SMTP ({scrambled})
id G1JS9HVN; Tue, 4 Mar 2003 07:35:42 +0100
Received: from 194.151.226.98 by {scrambled} (InterScan E-Mail VirusWall NT); Tue, 04 Mar 2003 07:35:44 +0100
Received: from [213.193.156.130] (helo=blade.cx)
by mailrelay1.kpn.net with esmtp (Exim 3.36 #1)
id 18q5wz-0003fH-00
for {scrambled}; Tue, 04 Mar 2003 07:30:53 +0100
Received: (from nobody@localhost)
by blade.cx (8.11.6/8.11.6) id h246bCW02252;
Tue, 4 Mar 2003 07:37:12 +0100
Date: Tue, 4 Mar 2003 07:37:12 +0100
Message-Id: <200303040637.h246bCW02252@blade.cx>
To: {scrambled}
Subject: Reply to post 'Ding! #3000!'
From: "Baanboard.com Mailer" <boardmaster@baanboard.com>
patvdv
4th March 2003, 11:06
Hi Lucas,
Yes, unfortunately we cannot help that. The only thing we can do is to stop the spammer from posting as soon as he/she is spotted, remove the posts and ban his credentials/IP's. By that time, the email notifications are already sent out.
OmeLuuk
4th March 2003, 11:17
Ok that explains...
patvdv
4th March 2003, 11:23
This is the message I just sent out to the responsibles of the e-mail server that was used for the abuse:
Hi,
This morning we received a large amount of spam messages on our message forum
http://www.baanboard.com from somebody apparently using your email server.
This person registered himself on our forum as 'celebguy_dv' (see attached
picture).
It seems that your email server has been blacklisted as open relay server
before: http://samspade.org/t/lookat?a=207.103.102.78
If you care about people abusing your infrastructure and other people's
websites, then I urge you to close and/or secure your mail server.
Note: we have banned your C-class subnet for the obvious reason.