Chris Shenton
chris@Shenton.Org
16 Apr 2002 15:26:32 -0400
--=-=-= DCC's doing a good job of catching spam to my home system, where I get maybe a thousand msgs a day total or so. But it doesn't seem to be catching any of the increasingly large volume of spam originating in Korea. The following sample message (with obviously forged addresses) came from Korea, as the end of this traceroute shows: 11 t1c2-p9-0.us-la.concert.net (166.49.240.74) 77.220 ms 74.245 ms 74.803 ms 12 t1a1-ge8-0-0.us-la.concert.net (166.49.227.39) 77.632 ms 74.634 ms 79.304 ms 13 166-49-252-22.concert.net (166.49.252.22) 74.638 ms 78.286 ms 74.552 ms 14 glgate194-p10-2.kornet.net (211.48.63.9) 224.748 ms 223.466 ms 224.168 ms 15 211.216.216.14 (211.216.216.14) 217.654 ms 217.751 ms 218.749 ms 16 hh-c4-ge6.kornet.net (211.217.32.134) 216.609 ms 215.959 ms 217.420 ms 17 211.196.155.34 (211.196.155.34) 220.772 ms 220.635 ms 219.880 ms 18 ndg-r1-dg-r2-p2500.kornet.net (211.196.156.86) 221.358 ms 223.117 ms 221.417 ms 19 211.224.147.2 (211.224.147.2) 220.451 ms 220.595 ms 220.741 ms 20 211.229.53.126 (211.229.53.126) 234.535 ms 234.140 ms 240.647 ms This particular message was forwarded from an old work account at NASA to my home. It appears someone's harvested all our NASA HQ addresses (possibly from our public X.500 directory) because many HQ users started complaining about Korean spam recently. If DCC can be persuaded to recognize this as spam, perhaps I can persuade our mail admins to add DCC to our configuration at HQ. I'm guessing maybe the fuzzy body checksum thing isn't quite doing the right thing so I'm not seeing the large counts I'd expect -- unless no one else is getting this stuff, which I seriously doubt. (Or maybe I'm just using DCC wrong, ideas welcomed). Any thoughts? Thanks! --=-=-= Content-Type: message/rfc822 Content-Disposition: inline Return-Path: <test@test.com> Delivered-To: chris-dcc@Shenton.Org Received: (qmail 66390 invoked by uid 1000); 16 Apr 2002 16:08:46 -0000 MBOX-Line: From test@test.com Tue Apr 16 16:08:46 2002 Delivered-To: Chris@Shenton.Org Received: (qmail 66383 invoked from network); 16 Apr 2002 16:08:46 -0000 Received: from gratia.it.hq.nasa.gov (131.182.119.134) by 0 with SMTP; 16 Apr 2002 16:08:46 -0000 Received: from azog.public.hq.nasa.gov (azog.public.hq.nasa.gov [198.116.65.48]) by gratia.it.hq.nasa.gov (980427.SGI.8.8.8/8.7.3) with ESMTP id LAA17174 for <cshenton@it.hq.nasa.gov>; Tue, 16 Apr 2002 11:22:01 -0400 (EDT) Received: from localhost ([211.229.53.126]) by azog.public.hq.nasa.gov (8.9.3/8.9.3) with SMTP id MAA10647 for <cshenton@it.hq.nasa.gov>; Tue, 16 Apr 2002 12:08:27 -0400 (EDT) Message-Id: <200204161608.MAA10647@azog.public.hq.nasa.gov> Reply-To: test@test.com From: "=?iso-8859-1?q?=81=C0=81=CC=81=B8=81=DE=81=C0=81=CF=81=B8=81=B6?= =?iso-8859-1?q?=81=C4=81=CF=81=C6=81=C3?=" <test@test.com> To: cshenton@it.hq.nasa.gov Date: Wed, 17 Apr 2002 01:05:30 +0900 X-DCC-sackHeads-Metrics: thanatos.shenton.org 1012; Body=1 Fuz1=1 Lines: 64 Xref: thanatos.shenton.org in.nasa:6296 in.cshenton:585 MIME-Version: 1.0 Content-Type: text/html; charset=iso-8859-1 Content-Transfer-Encoding: base64 PEhUTUw+DQo8SEVBRD4NCjxUSVRMRT48L1RJVExFPg0KPC9IRUFEPg0KPEJPRFk+DQo8RElWPrq7 ILjewM/AuiDBpLq4xeu9xbjBIMDMv+vDy8H4ILnXIMGkuri6uMijILXuv6EgsPzH0SC5/bf8IMGm IDUwwbY8L0RJVj4NCjxESVY+v6EgwMewxcfRIFuxpLDtXbjewM/A1LTPtNkuIGUtbWFpbCDB1rzS tMIgwM7FzbPdILD4sLOw1L3Dxse787+hvK08L0RJVj4NCjxESVY+w+u15sfPv7TAuLjnLCDAzLje wM8gwda80r/cIL7utrDH0SCws8DOIMGkuri1tSCwocH2sO0gwNbB9iC+yr3AtM+02S48QlI+wMwg uN7Az8C6IDHIuLy6ILjewM/AzLjnILT1IMDMu/MguN7Az8C7ILz2vcXHz7DtIL3NwfYNCr7KwLi9 w7jpIDwvRElWPg0KPERJVj689r3FsMW6ziAoIFVOU1VCU0NSSUJFKSC4piDFrLivx8+8vL/kLiA8 L0RJVj4NCjxESVY+Jm5ic3A7PC9ESVY+DQo8RElWPrW1tOvDvCBlLW1haWwgsaSw7bChILmrvvnA zLHmt6E/PC9ESVY+DQo8RElWPmUtbWFpbMC7IMXrx9EguLbEycbDwMcgyL+w+rTCILnMsbnAxyC4 tsTJxsO6uLDtvK0gsde4rrDtIL/suK6zqrbzwMcgvcW5rizA4sH2u/O/obytILi5wMwgPC9ESVY+ DQo8RElWPrzSsLO1x77uIMDWvcC0z7TZLiA8L0RJVj4NCjxESVY+uPC15yC4tsTJxsPAzCCx17ev x8+17cDMIMDMuN7AzyC4tsTJxsMgv6q9wyC6ucfVwPvAziC4tsTJxsMgseK5/cDMIMD7v+u1x7jp ILjFv+wgxasgyL+w+rimPC9ESVY+DQo8RElWPrq8ILz2IMDWvcC0z7TZLiBlLW1haWzAuyDAzL/r x9EguLbEycbDv6G0wiC03Lz4saSw7SwgyKjG5MDMwfYguea5rsCvtbUgLCC8s7muwba75ywgxse4 xbGksO217jwvRElWPg0KPERJVj6xpLDtwdbAxyC/5LG4v6EgwMfH0SC02b7nx9Egx/zFwr/NILjx wPvAzCDA1sC7ILz2IMDWvcC0z7TZLiZuYnNwOyA8L0RJVj4NCjxESVY+wM7FzbPdueizyrGksO0g udcgv+zG7bmwsaSw7b/NILrxsbPHz7+0wLsgtqcgw9a80iAxMLnov6G8rSDD1rTrIDMwueggwMy7 88DHILP0wLogsaSw7ci/sPogwNTB9TwvRElWPg0KPERJVj7Ap7/NILCwwLogyL+w+rimILDFtdEg vPYgwNa++rT4IMO5ILn4wrAgwMzAr7TCIMDMuN7Az8DMILChwfa0wiCx4rq7wPsgvNO8ur+hILHi wM7H1bTPtNkuPC9ESVY+DQo8RElWPsHvILzSuvHA2rimIMOjvsawobTCILnmua7H/CC02cDMt7rG riC4tsTJxsO89rTcwLi3zrytLCC757/rwNq0wiC6ucDix9EgwKW8rcfOwLsgx8/B9iC+yrDtx8q/ 5DwvRElWPg0KPERJVj7H0SDBpLq4uKYgud6+xrq8ILz2IMDWtNm0wiDG7cDHvLq/oSCx4sDOx9W0 z7TZLjwvRElWPg0KPERJVj610cKwIMavwaQgyKu6uLTru/O/oSDA+8fVx9EsIMW4xM8gvLHBpMDM ILChtMnH0SC1pcDMxc0guqPAzL26ILi2xMnGw7+hIMDWvcC0z7TZLjwvRElWPg0KPERJVj48QlI+ taXAzMXNuKYgwPrA5cfPsO0gtaXAzMXNILi2wMy017Hiuf3AuyDF68fYIMD7x9XH0SDFuLDZwf20 3MC7ILyxwaTH2CCxpLDtuN7Az8C7ILnfvNvHz7HiILanua48L0RJVj4NCjxESVY+wNS0z7TZIMDM waa0wiCx4r73wMy15yCws8DOwMy15yDH0iCwzSC++MDMIMDOxc2z3b+hvK0gwNq9xcDHIFBSwLog x8q89r/ksMfAzCC1x77usKGw7SDA1r3AtM+02S4gPC9ESVY+DQo8RElWPjxCUj7Az7ndyK21yCDA zsXNs90gyK+w5r+hvK0gwNq9xcC7IL7LuLEgvPYgwNa0wiC89rTcwLi3zrTCILHiurvA+8DOIMio xuTAzMH2ILG4w+Cw+iC09SC09b/tIMHfv+TH0TwvRElWPg0KPERJVj7ApSDHwbfOuPC8x8DMIMDW vcC0z7TZLiC+xrmruK4gwN8guLi16b7uwfggyKjG5MDMwfazqiC788ewLCC8rbrxvbq28yDH0sH2 tvO1tSCw7bC0wMwgw6O+xsHWwfYgvsrAuLjpPC9ESVY+DQo8RElWPrmrv+vB9rmwwMyx4iC1x7Hi ILanua7A1LTPtNkuILHXt6+5x7fOILDtsLSw+sDHIMDOxc3G5MDMvbq4piCw7bfBx9EgyKjG5MDM wfYgwabA27D6ILDLu/a/o8H4te63z8C7PC9ESVY+DQo8RElWPrrxt9TH0SC/qbevILChwfYgwKUg x8G3zrjwvMfAuiDAzsXNs90guvHB7rTPvbq/oSDA1r7uvK20wiDH2b3JILHivPrAzMDaIMfKvPbA +yC/5LDHwMy28yDH0iC89iDA1r3AtM+02S4mbmJzcDsgPC9ESVY+DQo8RElWPsDOxc2z3bvnv+vA zrG4wMcgxvi538D7wM4gwfWwoSwgwM7FzbPdu+e/68DawMcgNzAtODAlwMy788DMIMDMuN7Az8C7 ILvnv+vHz7DtIMDWtMIgv8K288DOIL3DwOW/obytPC9ESVY+DQo8RElWPsDMuN7Az8DMILChwfa0 wiC9xbzTvLosIMD6uvG/6ywgwaTIrry6wLsgw9a068fRIMiwv+vHz7+pILDtsLTAxyC3zr+txry4 piDB9bTrvcPFsLjnLCCw7bC0sPrAxyDAr7TrsPyw6LimPC9ESVY+DQo8RElWPrCtyK29w8WwseIg wKfH0SC47bnpx9EguPHA+8C7ILChwfaw7SDAzLjewM8guLbEycbDwLsgvPbH4MfRtNm46SCzr7fO IMShv63H2MH2tMIgvcPA5b+hvK0guLbEycXNv80gPC9ESVY+DQo8RElWPrDtsLTAuiC788ijuLjB t8C7IMXrx8+/qSC+8MGms6ogtb+53cDawPsgwKfEob+hIMDWsNQgtckgsM3A1LTPtNkuIDwvRElW Pg0KPERJVj4mbmJzcDs8L0RJVj4NCjxESVY+MS4gsKHBpMDHIMioLVBDwMcgQURTTCC2x7TCIMTJ wMy67bjwtakgv6G8rbW1ILjewM8gud+828DMILChtMkgx9W0z7TZLjwvRElWPg0KPERJVj4yLiDH z7fnv6EgMjAwuLiws8DMu/Mgud+82yCwobTJIMfVtM+02S48L0RJVj4NCjxESVY+My4gw8q6uMDa wM/B9rbztbUgwffBoiC43sDPILnfvNsgsKG0ySDH1bTPtNkuPC9ESVY+DQo8RElWPjQuILjewM8g taXAzMXNwMcgsKGw3cDMIL7GwdYgwPq3xSDH1bTPtNkuPC9ESVY+DQo8RElWPjUuILjewM8gud+8 2yC068fgILnXILjewM8gtaXAzMXNuKYgwaaw+CjD38O1KSDH1bTPtNkuPC9ESVY+DQo8RElWPjYu IL2xsNQguc/AvcDMIL7Iv8C9w7TCILrQtenAuyDAp8fYIMDat+G4piC53rDUIMfYteW4sMjEIMDU sd3AuyC53rTCIL3Fv+sgxse4xSC55r3EIMDUtM+02S48L0RJVj4NCjxESVY+Jm5ic3A7PC9ESVY+ DQo8RElWPsDavLzH0SC4tsTJxsMgua7Ax7imIL/4x8+9w7jpIMDMuN7Az8C6ILnfvNsgwPy/67je wM/AzLTPIMi4vcXAuyC0qbijwfYguLa9w7DtILTZwL0gwMy43sDPIMHWvNK4piA8L0RJVj4NCjxE SVY+xay4r8fPvcO/qSDA2ry8x9Egua7Ax7imIMfYwda9w7HiILnZtvi0z7TZLjwvRElWPg0KPERJ Vj4mbmJzcDs8Rk9OVCBzaXplPTc+Jm5ic3A7Jm5ic3A7Jm5ic3A7PC9GT05UPjxBDQpocmVmPSJt YWlsdG86aTNnb2xkQGhvdG1haWwubmV0Ij48Rk9OVCBzaXplPTc+aTNnb2xkQGhvdG1haWwubmV0 PC9GT05UPjwvQT48Rk9OVA0Kc2l6ZT03PiZuYnNwOyZuYnNwOyA8L0ZPTlQ+PC9ESVY+DQo8RElW PjxGT05UIHNpemU9Nz48L0ZPTlQ+Jm5ic3A7PC9ESVY+DQo8RElWPjxGT05UIHNpemU9ND7AzLje wM+067euud+827HiK8WpuLK9vCC/obXwxc0yMDAwK8DMwfbGxMDOtPUyMDAwK8Datb+w1L3Dxse1 7rfPseIrwMy43sDPsvay9sDMK7HXt6XAzA0Kw9/D4rHiK8bEwM+60MfSseIruLbHzzLD38PiseIr ucy3ocDMs90rtLq9urHXt+wgxve9usbDK7DLu/a+7rqwILiuvbrGris2MDAwuLjAzLjewM+4rr26 xq4gwNS0z7TZPTMwuLi/+MDUtM+02S48L0ZPTlQ+PC9ESVY+DQo8RElWPjxGT05UIHNpemU9ND48 L0ZPTlQ+Jm5ic3A7PC9ESVY+DQo8RElWPiZuYnNwOzwvRElWPg0KPERJVj4mbmJzcDs8L0RJVj4N CjxESVY+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7Jm5ic3A7DQombHQ7Jmx0O8GkurjF673FuMHAzL/rw8vB+CC51yDBpLq4urjIo7+h ILD8x9Eguf23/L+hIMDHsMUgx6W9wyZndDsmZ3Q7PC9ESVY+DQo8RElWPsfjtvS++MDMILjewM/A uyC6uLO7vK0gwcu828fVtM+02S4gwMwguN7Az8C6IMClvK3HziC1tcHfILD4sLO1yCC43sDPwLsg uriw7SC6uLO7teW4rrTCPC9ESVY+DQo8RElWPrGksO3A1LTPtNkuILDhxNosILjewM/B1rzSwMy/ 3CC01L+hILTrx9Egvu62siDBpLq4tbUgsKHB9rDtIMDWwfYgvsq9wLTPtNkuILjewM8gvPa9xcC7 PC9ESVY+DQo8RElWPr/4xKEgvsrAuL3DuOkgx8+03L+hIMelvcO1yCC89r3FsMW6zsDav6Egte63 z8fYwda9w7jpILTZvcO0wiC43sDPILq4s7vB9iC+yrDavcC0z7TZLiA8L0RJVj4NCjxESVY+v/jE oSC+ysC4vcUgutC16cC6ILjewM8gvPa9xbDFus64piDH2MHWvcq9w7/kLiC4uL7gILrSx8q/5MfR IMGkuri/tLTZuOkgu+ew+iC15biztM+02S48L0RJVj4NCjxESVY+PEJSPiZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNw OyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwOyZuYnNwOyZuYnNwOyZuYnNwOzxGT05UDQpzaXplPTY+Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7PC9GT05UPjxBIGhyZWY9Im1haWx0bzpwY3Q0MjAxQGkzc2hvcC5jb20iPjxGT05U DQpzaXplPTY+Jm5ic3A7ILz2vcWwxbrOICggVU5TVUJTQ1JJQkUpILimIMWsuK/Hz7y8v+QuPC9G T05UPiA8L0E+PC9ESVY+DQo8RElWPjxBIGhyZWY9Im1haWx0bzpwY3Q0MjAxQGkzc2hvcC5jb20i PiZuYnNwOzwvQT48L0RJVj4NCjxESVY+Jm5ic3A7PC9ESVY+DQo8L0JPRFk+DQo8L0hUTUw+DQo= --=-=-=--