Is anyone getting weird mail at their SDMB e-mail ?

[Mr Goo is typing this, I know nothing computer-wise]

Reprise, raraavisband.com doesn’t have a valid mail exchange record, meaning (in theory) e-mails won’t be delivered to anything @ raraavisband.com :

> server dns1.webhostingprovider.com
Default Server: dns1.webhostingprovider.com
Address: 207.114.164.32

> ls -d raraavisband.com
[dns1.webhostingprovider.com]
raraavisband.com. SOA dns1.webhostingprovider.com noc.webhostin
gprovider.com. (20020221 3600 7200 14400 3600)
raraavisband.com. A 10.0.0.0
raraavisband.com. NS dns1.webhostingprovider.com
raraavisband.com. NS ns1.sysci.org
raraavisband.com. NS ns1.jet.net
raraavisband.com. MX 10 mail.example.com
www A 10.0.0.0
raraavisband.com. SOA dns1.webhostingprovider.com noc.webhostin
gprovider.com. (20020221 3600 7200 14400 3600)

As you can see, the MX record is pointed to mail.example.com at 10.0.0.0. Example.com has been reserved for use in documentation by the IETF and 10.0.0.0/8 is an RFC1918 reserved address.

Therefore none of this is real because example.com can’t be registered and 10.0.0.0 is a reserved private IP.

After reading your last post, something smells a bit fishy… a test gone wrong ?!? Hopefully suspicions are wrong and it’ll be fixed and no more spamming.

[Mr Goo has now left the building] :slight_smile:

I’ve just checked the Unaboard, FFF, and the snopes messageboard to see if people there are reporting anything similar - they aren’t. This seems to be SDMB specific.

Full headers form Steve Richards reply to me, if one of the geeks wants to decipher them :
X-Hd:
steverichards@sobevideo.com Sun Apr 28 10:25:06 2002
Return-Path:
<steverichards@sobevideo.com>
Delivered-To:
xxxx-reprise@xxxx.com.au
Received:
(qmail 4787 invoked from network); 28 Apr 2002 00:11:23 -0000
Received:
from mail112.mail.bellsouth.net (HELO imf12bis.bellsouth.net) (205.152.58.52) by xxxx.com.au with SMTP; 28 Apr 2002 00:11:23 -0000
Received:
from inspiron ([208.63.235.183]) by imf12bis.bellsouth.net (InterMail vM.5.01.04.05 201-253-122- 122-105-20011231) with ESMTP id <20020428001247.ZXCB18573.imf12bis.bellsouth.net@inspiron> for <reprise@xxxx.com.au>; Sat, 27 Apr 2002 20:12:47 -0400
From:
<steverichards@sobevideo.com>
To:
<reprise@xxxx.com.au>
Subject:
RE: remove, unsubscribe
Date:
Sat, 27 Apr 2002 20:15:32 -0400
Message-ID:
<HNELLMBOKADMKANLOEMDMEPLCMAA.steverichards@sobevideo.com>
MIME-Version:
1.0
Content-Type:
text/plain; charset=“Windows-1252”
Content- Transfer- Encoding:
7bit

X-Priority:
3 (Normal)
X-MSMail- Priority:
Normal

X-Mailer:
Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0)
Importance:
Normal
X-MimeOLE:
Produced By Microsoft MimeOLE V6.00.2600.0000
In-Reply-To:
<597FB09XRD98VPSMA7OM86MLANHYV.3ccb3a1c@the-hive>

If this guy is using Outlook and we’re in his address book, could it be that he’s picked up a virus?

Or that he’s an SDMB member and the newsletter has been sent out to his wrong contacts list?

If you are an SDMB member, Steve, could you please let us know that you accidentally mailed the newsletter to the wrong contact list, just so we don’t have to be concerned about the SDMB database having been accessed?

Cancel that last thought - if this is some kind of listbot, we should ALL be receiving every email sent to it, and quite clearly we aren’t.

Curioser and curioser.

My email is available for all, and I signed up at the temp boards.

Havn’t been getting anything, thankfully…

Another data point: I was not registered previously or on the temp board. I registered within the last couple months to finally delurk, have my E-mail address hidden, and did not receive any spam like this.

Has anyone else who received the email attachment from ginawilkerson scanned it - I don’t trust my virus scanner to quarantine it, but as it’s the first email I got, I wonder if it started this whole chain of events.

I got about 25 of them. Funny thing is they went to the email address that I had registered here BEFORE the board crashed! Not the new one.

FWIW, I just checked my e-mail and have received nothing unusual.

I never registered at the temp board.

I’ve never had my e-mail addy publicly available at the SDMB (not that I’m unfriendly, just very, very careful).

Home this info helps in tracking down the problem.

The following came to me at least 10 times, along with various replies:

Hi there,

This is James at BadRat.com. If you’re a human being and you happen to be reading this, then you’ve been using one of my old e-mail addresses. These include:

badrats@badrat.com
james@sonicopia.com

If you’re a representative of a business, please unsubscribe the above addresses from your database. If you’re a friend or relative, my official address is now info@badrat.com. Please update your address book.

Thanks,
JamesBot

P.S. In case you’re looking for it, http://www.badrat.com is now http://www.badrat.com/music/ .

#############################################################
This message is sent to you because you are subscribed to
the mailing list <newsletter@raraavisband.com>.
To unsubscribe, E-mail to: <newsletter-off@raraavisband.com>
To switch to the DIGEST mode, E-mail to <newsletter-digest@raraavisband.com>
To switch to the INDEX mode, E-mail to <newsletter-index@raraavisband.com>
Send administrative queries to <newsletter-request@raraavisband.com>

EZ-Board membership maybe? I got a 70+ of them at the addy I use here and dopers downunder. My note to steverichards@sobevideo.com was not terribly polite

and yes, I do understand a robot is likely to pick up steverichards@sobevideo.com for spamming purposes

My email is available, and I have received all this as well.

I didn’t register at the temp board, but I did register at Fathom when SDMB went down.

Sheri

I also got them this a.m., sent a blank email out to the unsubscribe address and have not gotten anything since about 1:30 PDT.

I don’t remember if I registered at the temp board or not. I have recently changed my email here; I didn’t check to see if it went to my forwarding account or my school account, and I trashed all the messages.

I never open attachments, and Eudora is supposed to trash them when I trash the message, so I can’t check it out for you.

I got the e-mails from ginawilkerson, but didn’t get the attachment. Got two or three e-mails from her in the mass. The last one she sent I opened and she was begging to be pulled off the list, so I don’t think that she got hit by some kind of virus.

I registered at the temp board and my addy’s always been public here. Reprise if you want, you can send me the attachment, I’ve got to reformat my harddrive anyway, so I doubt that it could do a lot of harm.

The ginawilkerson attachment is just a copy of the newsletter she received - I suspect she was trying to unsubscribe; odd that I recieved that from her addy before I received the newsletter itself.

It’s also extremely odd that we aren’t all receiving every new response to the list.

Just as another data point - how many of you are using Outlook.

I’m not, I use Opera’s inbuilt mail client.

BTW, I’ve sent Steve an email asking him to contact the SDMB admins pronto to explain this mess.

I’m using Outlook Express 6.

Sheri

FWIW, I got a set of this stuff too.

I can’t imagine someone actually sat here and harvested screen names from profiles one at a time, but it COULD happen, if someone was patient enough.

What the point is, however, I don’t see, as no one would appreciate what we’ve been getting . . . and the resultant uproar certainly makes 'em no friends.

Investigation is proceeding.

your humble TubaDiva
Administrator

Farkel said

Amazing. I would never have thought about a bot picking up something as mundane as steverichards@sobevideo.com

I feel sorry for steverichards@sobevideo.com as he will not like to get all that mail addressed to steverichards@sobevideo.com

ditto, and I’m using OE6

Lucky me

I hate “me too” posts, but ME TOO!

I’ve gotten 35 so far. I was registered at the temp board but don’t recall if my e-mail address was public. It is public here.

I did not respond to any of the messages sent to me.

Let me know if there is anything I can do to help solve this mystery.

Thanks,

Ruby

Don’t feel sorry for Steve : this was his email response to me -

We’re very sorry for the problem. This was a test that went awry I’m
afraid. We’ll get you off the list and are trying to figure out what
happened. Very sorry for the trouble its caused you and others.

Steve Richards

Suggest everyone keeps up with the ATMB thread where Tuba has posted.