From owner-freebsd-questions Sat Aug 5 14:52: 5 2000 Delivered-To: freebsd-questions@freebsd.org Received: from mta03-svc.ntlworld.com (mta03-svc.ntlworld.com [62.253.162.43]) by hub.freebsd.org (Postfix) with ESMTP id 1051937B5F7 for ; Sat, 5 Aug 2000 14:52:01 -0700 (PDT) (envelope-from mark@ukug.uk.freebsd.org) Received: from parish.my.domain ([62.253.84.161]) by mta03-svc.ntlworld.com (InterMail vM.4.01.02.27 201-229-119-110) with ESMTP id <20000805215158.DQGY16423.mta03-svc.ntlworld.com@parish.my.domain>; Sat, 5 Aug 2000 22:51:58 +0100 Received: (from mark@localhost) by parish.my.domain (8.9.3/8.9.3) id WAA03752; Sat, 5 Aug 2000 22:52:02 +0100 (BST) (envelope-from mark) Date: Sat, 5 Aug 2000 22:52:01 +0100 From: Mark Ovens To: Jim C Cc: freebsd-questions@freebsd.org Subject: Re: Possible hack attempt? Q&A Message-ID: <20000805225201.J254@parish> References: <4.2.0.58.20000805130626.01549248@mail.enterit.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable User-Agent: Mutt/1.2.5i In-Reply-To: <4.2.0.58.20000805130626.01549248@mail.enterit.com>; from jconner@enterit.com on Sat, Aug 05, 2000 at 01:08:01PM -0400 Organization: Total lack of Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Sat, Aug 05, 2000 at 01:08:01PM -0400, Jim C wrote: > I just found a rejected message from my fetchmail daemon and found it ver= y=20 > interesting. However, since I am not an expert at sendmail hacks, Im=20 > curious to see what information I might be able to get from folks on this= =20 > list. Here are a couple hearders from the message: >=20 I was going to say that it looks like what you see in the lists from time to time when someone posts in Japanese and you only have Latin charset support. Anyway, I loaded the message into emacs to type this reply and guess what; it all appears as Japanese (sorry, I can't tell you what it says :)). I never knew emacs could do this (on an English system), cool. > > The original message was received at Fri, 4 Aug 2000 22:45:27 -0400 (EDT) > from root@localhost.enterit.com [127.0.0.1] > ----- The following addresses had permanent fatal errors ----- > <=1B$(B%V%C%/%J%$%D!&%W%m%8%'%/%H=1B(B=1B> =1B$(B> =1B(B =1B$(B----- Transcript=1B(B =1B$(Bof=1B(B =1B$(Bsession fo= llows ----=1B(B- =1B$(B> 550 =1B(B<=1B$(B%V%C%/%J%$%D!&%W%m%8%'%/%H=1B(B=1B>=1B$(B... Host= =1B(B =1B$(Bunknown (Name server: =1B(B =1B$(B> =1B(B=1B$b=1B$(B%v%c%/%j%$%d.uucp.: host=1B(B =1B$(Bnot found)=1B(B =1B$(B> 550 ... User=1B(B =1B$(Bunknow=1B(Bn =1B$(B> =1B(B =1B$(B> =1B$(B> =1B(B =1B$(B> From: FETCHMAIL-DAEMON@notjames.enterit.co=1B(Bm =1B$(B> To: &%W%m%8%'%/%=1B(BH=1B@=1B$(B%V%C%/%J%$%D.UUC=1B(BP =1B$(B> MIME-Version: 1.=1B(B0 =1B$(B> Content-Type: multipart/report; report-type=3Ddelivery-status;=1B(B =1B$(B> =1B(B =1B$(Bboundary=3D"om-mani-padme-hum-266-1-965443527"=1B(B =1B$(B> Our spam=1B(B =1B$(Bfilter=1B(B =1B$(Brejected=1B(B =1B$(Bthis=1B(B= =1B$(Btransaction.=1B(B =1B$(B> =1B(B =1B$(B> =1B$(B> =1B(B =1B$(B> What=1B(B =1B$(Bdo=1B(B =1B$(Byou guys=1B(B =1B$(Bthink?=1B(B =1B$= (BI think it=1B(B =1B$(Bwas a possible=1B(B =1B$(Battempt that=1B(B =1B$(Bf= ailed=1B(B=20 =1B$(B> (hopefully) but like=1B(B =1B$(BI said, Im=1B(B =1B$(Bno=1B(B =1B$(= Bexpert=1B(B =1B$(Bat=1B(B =1B$(Bsendmail=1B(B. =1B$(B> TIA folk=1B(Bs =1B$(B> =1B(B =1B$(B> - Ji=1B(Bm =1B$(B> =1B(B =1B$(B__________________________=1B(B_ =1B$(B> =1B(B =1B$(B| =1B(B =1B$(BJim C =1B(B | =1B$(B> =1B(B =1B$(B| =1B(B =1B$(BEnterIT.com =1B(B | =1B$(B> =1B(B =1B$(B/ ) | Systems Administrator =1B(B | =1B$(B> =1B(B =1B$(B/ / =1B(B =1B$(B| Network Engineer=1B(B | =1B$(B> =1B(B =1B$(B( ( =1B(B =1B$(B| email:=1B(B =1B$(Bjconner@enterit= .com|=1B(B =1B$(B> =1B(B =1B$(B(((\=1B(B =1B$(B\>=1B(B =1B$(B|/=1B(B =1B$(B) pagejim@= pseudonet.org =1B(B | =1B$(B> =1B(B =1B$(B(\\\\ \_/ /_________________________=1B(B| =1B$(B> =1B(B =1B$(B\ =1B(B / =1B$(B> =1B(B =1B$(B\ =1B(B =1B$(B_/=1B(B =1B$(B> =1B(B =1B$(B/ =1B(B / =1B$(B> =1B(B =1B$(B/ =1B(B / =1B$(B> =1B(B =1B$(B> =1B(B =1B$(B> =1B(B =1B$(B> =1B(B =1B$(B> =1B(B =1B$(B> To=1B(B =1B$(BUnsubscribe:=1B(B =1B$(Bsend=1B(B =1B$(Bmail=1B(B =1B= $(Bto=1B(B =1B$(Bmajordomo@FreeBSD.or=1B(Bg =1B$(B> with=1B(B =1B$(B"unsubscribe=1B(B =1B$(Bfreebsd-questions"=1B(B =1B= $(Bin=1B(B =1B$(Bthe body=1B(B =1B$(Bof=1B(B =1B$(Bthe messag=1B(Be =1B$(B--=1B(B=20 =1B$(BIf=1B(B =1B$(BI buy a copy=1B(B =1B$(Bof=1B(B =1B$(BWinDelete,=1B(B= =1B$(Band it=1B(B =1B$(Bdoesn't delete=1B(B =1B$(BWindows,=1B(B =1B$(Bam=1B(B =1B$(BI entitled=1B(B =1B$(Bto=1B(B =1B$(Bmy=1B(B =1B$(Bmon= ey back=1B(B? =1B$(B________________________________________________________________=1B(B =1B$(B51.440N =1B(B =1B$(BFreeBSD - The Power To=1B(B =1B$(BServe http://ww= w.freebsd.org=1B(B =1B$(B2.0570W =1B(B =1B$(BMy=1B(B =1B$(BWebpage http://ukug.uk.freebsd.org/= ~mark=1B(B =1B$(Bmailto:marko@freebsd.org=1B(B =1B$(Bhttp://www.radan.c= om=1B(B To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message