From mboxrd@z Thu Jan  1 00:00:00 1970
X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on polar.synack.me
X-Spam-Level: 
X-Spam-Status: No, score=-1.9 required=5.0 tests=BAYES_00 autolearn=ham
	autolearn_force=no version=3.4.4
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 103376,e9d84ce06116c5ae
X-Google-Attributes: gid103376,public
X-Google-ArrivalTime: 2003-09-25 13:52:19 PST
From: Henrik Motakef <usenet-reply@henrik-motakef.de>
Subject: [OT] Bad addresses (was: Current "Swen" worm attack - the best
 address)
Date: Thu, 25 Sep 2003 22:52:44 +0200
User-Agent: Pan/0.14.2 (This is not a psychotic episode. It's a cleansing
 moment of clarity.)
Message-ID: <pan.2003.09.25.20.52.43.460929@henrik-motakef.de>
Newsgroups: comp.lang.ada
References: <e2e5731a.0309241431.10694993@posting.google.com>
 <slrnbn598s.gt.randhol+abuse@kiuk0152.chembio.ntnu.no>
 <K2ednSJMVpv_k-6iU-KYvg@gbronline.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-15
Content-Transfer-Encoding: 8bit
NNTP-Posting-Host: 213.23.200.90
X-Trace: 25 Sep 2003 22:51:51 +0200, 213.23.200.90
X-Complaints-To: abuse@arcor-ip.de
Path: 
 archiver1.google.com!news1.google.com!newsfeed.stanford.edu!news-spur1.maxwell.syr.edu!news.maxwell.syr.edu!newsfeed.stueberl.de!newsfeed.r-kom.de!newsfeed.arcor-ip.de!news.arcor-ip.de!213.23.200.90
Xref: archiver1.google.com comp.lang.ada:42934
Date: 2003-09-25T22:52:44+02:00
List-Id: <comp.lang.ada>

On Thu, 25 Sep 2003 11:48:51 -0500, Wes Groleau wrote:

>     Aren't we cool?  By the way, the meaningless forged From address was
[...]

While we are talking about being smart: I guess that Robust Design, LLC
(Seattle) will be really thrilled by you burning their addresses at
no.such.net (which happens to resolve to 216.57.210.200) by posting them
to arbitrary newsgroups, especially since Swen, a worm known for
harvesting newsgroups for victim email addresses, is still active.

Please, people, if you want to use a domain or email address as an
example, don't just guess one - chances are high that it is a real,
existing domain, even if it sounds stupid. At least use "whois" before.

There is even a formal RFC listing addresses that can be used instead
without harming anyone (RFC 2606,
http://www.rfc-editor.org/rfc/rfc2606.txt), these are "example.org",
"example.net", "example.com" and all of their subdomains as well as any
domain with a top-level domain of "example", "test", "invalid" or
"localhost", like for example "no.such.net.example" or "this.is.a.test".

And yes, I write this because I have been burnt by this before. It is a
hostile world.