This message is being posted to both LSTOWN-L and LSTSRV-L. ------------------------------------------------------------------------------- The name "Fredrik Williamsberg" has been used in the past in apparent attempts to exploit LISTSERV for proxy mailbombing attacks. In several occasions in the past, we have received subscription requests for several lists, all from the same address, all with the name "Fredrik Williamsberg". In nearly every case, the requests were forwarded to us from other sites. On at least one occasion, I traced the requests through two sites before hitting a dead end. It appears that a similar exploit may be in progress. If you are a list owner, you may want to check your subscriber list for "Fredrik Williamsberg" (the spelling may vary) or the addresses in the log entries below. If you are a site administrator, you may want to check your logs for similar activity. ----- Extract from listserv.log ----- 30 Mar 2001 03:16:54 From [log in to unmask]: X-FOR FWDED=2 [log in to unmask] SUBSCRIBE COHERENT Fredrik Williamsberg 30 Mar 2001 03:35:28 From [log in to unmask]: X-FOR FWDED=2 [log in to unmask] SUBSCRIBE COHERENT Fredrik Williamsber (...) 30 Mar 2001 03:47:13 From [log in to unmask]: X-FOR FWDED=2 [log in to unmask] SUBSCRIBE COHERENT Fredrik Williamsberg 30 Mar 2001 04:06:02 From [log in to unmask]: X-FOR FWDED=2 [log in to unmask] SUBSCRIBE COHERENT Fredrik Williamsberg ----- End of extract from listserv.log ----- -- Paul Russell Senior Systems Administrator University of Notre Dame