This message is being posted to both LSTOWN-L and LSTSRV-L.
-------------------------------------------------------------------------------
The name "Fredrik Williamsberg" has been used in the past in apparent attempts
to exploit LISTSERV for proxy mailbombing attacks. In several occasions in the
past, we have received subscription requests for several lists, all from the
same address, all with the name "Fredrik Williamsberg". In nearly every case,
the requests were forwarded to us from other sites. On at least one occasion,
I traced the requests through two sites before hitting a dead end. It appears
that a similar exploit may be in progress. If you are a list owner, you may
want to check your subscriber list for "Fredrik Williamsberg" (the spelling
may vary) or the addresses in the log entries below. If you are a site
administrator, you may want to check your logs for similar activity.

----- Extract from listserv.log -----
30 Mar 2001 03:16:54 From [log in to unmask]: X-FOR FWDED=2
        [log in to unmask] SUBSCRIBE COHERENT      Fredrik Williamsberg
30 Mar 2001 03:35:28 From [log in to unmask]: X-FOR FWDED=2
        [log in to unmask] SUBSCRIBE COHERENT      Fredrik Williamsber (...)
30 Mar 2001 03:47:13 From [log in to unmask]: X-FOR FWDED=2
        [log in to unmask] SUBSCRIBE COHERENT      Fredrik Williamsberg
30 Mar 2001 04:06:02 From [log in to unmask]: X-FOR FWDED=2
        [log in to unmask] SUBSCRIBE COHERENT      Fredrik Williamsberg
----- End of extract from listserv.log -----

--
Paul Russell
Senior Systems Administrator
University of Notre Dame