|
Sender: |
|
Date: |
Mon, 2 Feb 2004 17:16:06 -0500 |
Reply-To: |
|
Content-Transfer-Encoding: |
7bit |
Subject: |
|
From: |
|
Content-Type: |
text/plain; charset=us-ascii; format=flowed |
In-Reply-To: |
|
Organization: |
University of Notre Dame |
MIME-Version: |
1.0 |
Others have already explained that forged messages from spammers or viruses
could result in this scenario. Given the fact that the username portion of
the address is 'jimmy', and 'jimmy' is one of the names that MyDoom (NoVarg)
uses to generate random sender and recipient addresses, it is entirely possible
that the message which generated this brouhaha was a MyDoom virus carrier
message.
--
Paul Russell
Senior Systems Adminstrator
University of Notre Dame
F. J. Kelley wrote:
> the mailbox id will often change, but I'd guess this
> subscriber will have "james" "jim" or "jimmy" somewhere in
> their name. I keep a copy of the current subscriber list and
> check for the string with grep. Yes, you will still have a
> number of responses, but not so many you can't send a message
> to check. I'll put up with the bad addresses for a while,
> then get fed up and begin tracking them down.
> --Joe
...
>>>The following 1 subscriber is currently being monitored:
>>>
>>>Err First Last Address
>>>--- ----- ----- -------
>>> 1 01/30 01/30 [log in to unmask]
>>> Last error: SMTP; 550 5.1.1 unknown or
>
> illegal alias:
>
|
|
|