[ale] Is delivered mail

James Baldwin jbaldwin at antinode.net
Sun Feb 20 17:16:19 EST 2005


On 20 Feb 2005, at 11:03, William Bagwell wrote:

> Just out of curiosity, are others getting live virus? I have received 
> five
> "cfowler's" since last Wednesday, all with an *empty* attachment. 
> Others
> were discussing blocking 202.9.146.122 on Tuesday the 15th one day 
> before
> the first one.
>
> If this is a new policy by my ISP I want to write and thank them. 
> Previously
> they were alternating between dropping them silently and sending a 
> totally
> useless notice with no original headers.

Yes, I have received multiple attachment from 202.9.146.122 which is 
the ONLY source of this virus. This is why I brought this to the 
attention of the list days ago. This IP is listed in the CBL and 
Spamhaus XBL. It is passing the W32/Bagle.bk at MM virus.

Here is the delivery line to room17:

Received: from unknown (HELO hemant.com) (202.9.146.122)
	by mail.room17.com with SMTP; 19 Feb 2005 12:42:17 -0000

Received: from unknown (HELO hemant.com) (202.9.146.122)
	by mail.room17.com with SMTP; 19 Feb 2005 10:55:06 -0000

Received: from unknown (HELO hemant.net) (202.9.146.122)
	by mail.room17.com with SMTP; 18 Feb 2005 10:19:17 -0000

Received: from unknown (HELO hemant.org) (202.9.146.122)
	by mail.room17.com with SMTP; 17 Feb 2005 09:11:03 -0000

Received: from unknown (HELO hemant.net) (202.9.146.122)
	by mail.room17.com with SMTP; 16 Feb 2005 09:32:52 -0000

Received: from unknown (HELO hemant.net) (202.9.146.122)
	by mail.room17.com with SMTP; 16 Feb 2005 08:51:50 -0000

Received: from unknown (HELO hemant.com) (202.9.146.122)
	by mail.room17.com with SMTP; 16 Feb 2005 07:17:29 -0000

Received: from unknown (HELO hemant.net) (202.9.146.122)
	by mail.room17.com with SMTP; 15 Feb 2005 07:06:12 -0000

Received: from unknown (HELO hemant.net) (202.9.146.122)
	by mail.room17.com with SMTP; 14 Feb 2005 07:55:19 -0000

Received: from unknown (HELO hemant.org) (202.9.146.122)
	by mail.room17.com with SMTP; 14 Feb 2005 07:04:26 -0000

Received: from unknown (HELO hemant.org) (202.9.146.122)
	by mail.room17.com with SMTP; 12 Feb 2005 09:55:28 -0000

Received: from unknown (HELO hemant.com) (202.9.146.122)
	by mail.room17.com with SMTP; 12 Feb 2005 07:04:07 -0000

Received: from unknown (HELO hemant.org) (202.9.146.122)
	by mail.room17.com with SMTP; 11 Feb 2005 08:10:38 -0000

Received: from unknown (HELO hemant.net) (202.9.146.122)
	by mail.room17.com with SMTP; 11 Feb 2005 06:48:49 -0000

-------------- next part --------------
A non-text attachment was scrubbed...
Name: PGP.sig
Type: application/pgp-signature
Size: 186 bytes
Desc: This is a digitally signed message part




More information about the Ale mailing list