Newsgroup: it.comp.appl.access
Titolo: [ATTACCO AL NG]

Ecco che ci risiamo,
anche il nostro NG è stato fatto oggetto di messaggi spazzatura.
Sembra che utilizzino il nome dei frequentatori del NG e la loro e-mail per 
inviare i messaggi.
Credo che bisognerà fare una e.mail all'abuse di 
tin.it
 o mettere un filtro.
Personalmente ho già provveduto con i mittenti bloccati di OE (
tele.dk
).
Tutti i messaggi sembrano provenire da 
80.62.217.218:31209
 
dread11.news.tele.dk
.
La path del messaggio è 
news3.tin.it
!
news-out.tin.it
!
news-in.tin.it
!
news.mailgate.org
!
newsfeed.icl.net
!
newsfeed.icl.net
!
newsfeed.fjserv.net
!
colt.net
!
news.tele.dk
!not-for-mail.
Ho provato a fare un traceroute del sito (di seguito potete scaricare 
l'immagine):
http://www.frantoiogestione.com/8062217218.jpg
Questo il risultato:
Query 
tele.dk
 at 
whois.thur.de
Process query: '
tele.dk
'
Querying 
whois.dk-hostmaster.dk:43
 with whois.
# Hello 217.17.193.190. Your session has been logged.
#
# Copyright (c) 2002 - 2004 by DK Hostmaster A/S
#
# The data in the DK Whois database is provided by DK Hostmaster A/S
# for information purposes only, and to assist persons in obtaining
# information about or related to a domain name registration record.
# We do not guarantee its accuracy. We will reserve the right to remove
# access for entities abusing the data, without notice.
#
# Any use of this material to target advertising or similar activities
# are explicitly forbidden and will be prosecuted. DK Hostmaster A/S
# requests to be notified of any such activities or suspicions thereof.
Domain:       
tele.dk
DNS:          
tele.dk
Registered:   1995-03-08
Registrant
Handle:       TD2488-DK
Name:         Tele Danmark
Address:      Sletvej 30
Postalcode:   8310
City:         Tranbjerg J
Country:      Danmark
Phone:        
+45 80 80 80 80
Fax:          
+45 89 45 06 08
Email:        
hostm...@tele.dk
Administrator
Handle:       TB2675-DK
Name:         Tele Danmark
Attention:    Torben Bajlum
Address:      Sletvej 30
Postalcode:   8310
City:         Tranbjerg J
Country:      Danmark
Phone:        
+45 80 80 80 80
Fax:          +45
Email:        
hostm...@tele.dk
Billing contact
Handle:       TDI4-DK
Name:         TDC Internet
Attention:    Kreditor service Ao6136
Address:      Sletvej, c/o Kreditorfunktionen AO6136
Postalcode:   8310
City:         Tranbjerg J
Country:      Danmark
Phone:        
+45 86 78 33 00
Fax:          
+45 86 78 38 00
Email:        
hostm...@tele.dk
Nameservers
Hostname:     
aix1.inet.tele.dk
Handle:       HF190-DK
Hostname:     
auth01.ns.tele.dk
Handle:       TD169-DK
Hostname:     
auth02.ns.tele.dk
Handle:       TD169-DK
Hostname:     
ns-ext.vix.com
Handle:       HF190-DK
Hostname:     
ns-soa.darenet.dk
Handle:       UR501-DK
Hostname:     
ns2.tele.dk
Handle:       HF190-DK
-- 
  To resolve one of the above handles: whois -h 
whois.dk-hostmaster.dk
 
HANDLE
  OTOH offical handles should be recognised directly.
  Please report errors or misfits to 
lu...@iks-jena.de
.
Query done.
Avete suggerimento o iniziative da intraprendere?
Ciao, Carlo 

Questo il messaggio inviato all'abuse del provider (
ab...@post.tele.dk
):
Dear Sirs,
I have just received the attached unsolicited e-mail and message to NG 
it.comp.appl.access, apparently coming from IP 80.62.217.218 
(
dread11.news.tele.dk
 264 80.62.217.218), inside a network owned by you.
Please check it out, and handle your user according to your TOS/AUP.
Thank you.
Carlo Costarella
---UCE---
Segue il testo del messaggio...

 Personalmente ho già provveduto con i mittenti bloccati di OE (
tele.dk
).
Ciao Carlo
Ho bloccato anche io il mittente in OE
(strumenti->regole messaggi-> mittenti bloccati) forse il dominio non è
corretto?
ma sembra non riesca a bloccare questo dominio (
tele.dk
)
continuo a ricevere messaggi in inglese e quelli in italiano alcuni sono
tradotti. 
tutte le risposte del pomeriggio si sono trasformate in inglese...(stavo
rispondendo ad Alex di fornirci anche la versione italiana, invitando,
contemporaneamente, SV e MA a tradurre la faq... :-)
---
Daniele
-- 
questo articolo e` stato inviato via web dal servizio gratuito 
http://www.newsland.it/news
 segnala gli abusi ad 
ab...@newsland.it


Sì anche io sto cercando di fare qualcosa.
Questo un altro trace più completo:
http://www.frantoiogestione.com/8062217218B.jpg
Questa la risposta inviatami da 
ab...@post.tele.dk
  in seguito al mio 
messaggio:
(Danish version below / Dansk nedenfor)
ENGLISH:
You have sent an email to TDCs postmaster/abuse function, therefore
you receive this reply.
In general we only take care of requests reguarding:
SPAM:
-----
The complain must contain an IP-address belonging to a TDC private user,
if this is not the case, your mail will be deleted.
Your mail must contain the following;
1. Please use the following subject (not a must): Spam
2. The header of the spam email
3. The spam email itself (do not include virus, as we delete those emails)
For more information see 
http://tdc.mail.dk
VIRUS/TROJAN HORSES:
--------------------
The complain must contain an IP-address belonging to a TDC private user,
if this is not the case, your email will be deleted.
Your email must contain the following;
1. Please use the following subject (not a must): Virus
2. IP-address of the sender
3. Date
4. Timestamp & timezone (please use GMT)
5. Name of the virus if possible
6. Include one of the following:
   6.1 The header of the email
   6.2 Firewall log (only relevant information).
For more information see 
http://tdc.mail.dk
HACKING/PORTSCAN/FIREWALL ALERTS:
---------------------------------
The complain must contain an IP-address belonging to a TDC private user,
if this is not the case, your email will be deleted.
Your email must contain the following;
1. Please use the following subject (not a must): Hacking
2. IP-address
3. Date
4. Timestamp & timezone (please use GMT)
5. Did the attack succeed? What damage has been made to your pc?
For more information see 
http://tdc.mail.dk
COPYRIGHT:
----------
The complain must contain an IP-address belonging to a TDC private user,
if this is not the case, your email will be deleted.
The sender of the email must be the copyright owner, or an orgination that
handles the copyright owners interest.
Your email must contain the following;
1. Please use the following subject (not a must): Copyright
2. Include one of the following;
   2.1 Homepage: link/url to the copyright protected material. If the
       copyright protected material is on a TDC server, it will be
       removed. If it is on the users equipment, the user will be informed.
   2.2 News: Name of the newsgroup, message-id to the copyright protected
       posting.
   2.3 In all other cases we need the IP-address, date, timestamp &
       timezone (please use GMT).
For more information see 
http://tdc.mail.dk
NEWS:
-----
The complain must contain an IP-address belonging to a TDC private user,
if this is not the case, your email will be deleted.
Your email must contain the following;
1. Please use the following subject (not a must): Usenet
2. Newsheader
3. Relevant information for the case. Mail without any questions, commentes
etc., will be deleted.
RBL, FILTER, BLOCKING:
----------------------
If you receive an error message reguarding blocked email, we can only 
process
your email if you send us the following information.
1. Please use the following subject (not a must): Blocking
2. IP-addresse, domain, sender emailaddress.
3. The error message (from our server).
WEBMAIL & MAILBOX CONFIGURATION:
--------------------------------
Through webmail (
http://mail.tdconline.dk
) you can read/send/delete emails, 
autoanswer,
forward, filter, manage addressbook, change password and emailaddress etc.,
depending on your subscription.
HAVE I EMAILED THE CORRECT ABUSE/POSTMASTER:
--------------------------------------------
If you are unsure of where to direct your complaint, please
check the "who is" information of the IP address in question.
You can look up an IP address on the web, e.g. here:
http://www.cyberabuse.org
 or 
http://www.geektools.com/whois.php
IMPORTANT:
----------
- Mails containing virus will be deleted.
- Attachments will not be read. Send ALL information in clear text.
- Do not send more than one case per email (fx. different IP-addresses,
  homepages, newsgroups).
- If you do NOT included the above information, we can not process your
  email and it will be deleted.
- If your email does not contain any questions, comments etc., you will
  not receive a human answer.
- We dont click on links in email.
- We dont answer robot generated emails.
- Please use a valid reply-to address.
- If your email includes the necessary information written above, you
  do not need to email us again.
You only receive this autoanswer once (each day you mail us)!
Note: You cannot reply to this email!
Best regards
TDC
Postmaster
Web: 
http://tdc.mail.dk
Email: 
postm...@post.tele.dk

Ciao Carlo.
Ottimo cane da caccia direi.....!!!
Io non saprei che fare se posso esserti utile in quasiasi modo
dammi qualche direttiva lo faccio con estremo piacere e non solo..!
Ciao
-- 
@Alex (Alessandro Baraldi)
---------------------------------------------------------------------------
http://www.sitocomune.com/
http://www.mantuanet.it/alessandro.baraldi/
---------------------------------------------------------------------------

 ha scritto nel messaggio 
news:cpi3os$tdo$1...@lacerta.tiscalinet.it...

Ivia una e-mail a questi indirizzi:
postm...@post.tele.dk
; 
ab...@post.tele.dk
Oggetto: SPAM
Messaggio: copia uno dei messaggi a te clonati da 
proprietą...dettagli...intero testo
Anzi se altri del NG fanno lo stesso sarebbe un'ottima cosa.
Poi inviane uno anche all'abuse di 
virgilio.it
 a questo indirizzo:
ab...@matrix.it
Con il seguente messaggio o uno che a te sembra idoneo:
La presente per segnalare l'arrivo di messaggi spam nel NG
it.comp.appl.access.
I messaggi sembrano provenire da 80.62.217.218 (
dread11.news.tele.dk
).
Si prega di voler provvedere con urgenza bloccando tale mittente.
Cordiali saluti,
TuaFirma
Ciao, Carlo 

Ottimo.
Fatto tutto.
Grazie


un grazie e complimenti ai "seniores" per l'opera di pulizia sul Ng. Ebo 

 ha scritto nel messaggio 
news:cpi9oc$27u$1...@lacerta.tiscalinet.it...

Si è risolto oppure occorre mandare le mail come ha detto Carlo?
Buon lunedi a tutti!