TB

"Thomas Bunetta"

14/05/2006 6:29 AM

OT: How do they do that?

OK, the idiot that is polluting this NG seems to be able to fake the "from"
names to just about all the regulars here.
How do they do it and more importantly how can we stop them?
I set up a filter for most of the more inflammatory words used in the
various headers, but they keep added new ones.
Tom


This topic has 12 replies

bR

[email protected] (Robert Bonomi)

in reply to "Thomas Bunetta" on 14/05/2006 6:29 AM

16/05/2006 1:57 PM

In article <[email protected]>, WD <[email protected]> wrote:
>On Mon, 15 May 2006 20:48:56 -0600, Dave Balderstone
><dave@N_O_T_T_H_I_Sbalderstone.ca> wrote:
>
>>In article <[email protected]>, WD <[email protected]>
>>wrote:
>>
>>> Why dun someone in this NG report it to his ISP?
>>
>>And what ISP would that be?
>
>I checked, it was posted from a few ISPs and one of them is from Amsterdam
>
>OrgName: RIPE Network Coordination Centre
>OrgID: RIPE
>Address: P.O. Box 10096
>City: Amsterdam
>

BZZZZZT! thank you for playing.

RIPE is *not* an ISP. They are simply the coordinating agency that
allocates IP addresses for Europe. the equivalent of 'ARIN' for North
America.

Tracking this idjit down requires serious expertise.`He uses 'zombie'
machines (a Windows PC that has been 'infected' with software that lets
other people use it *without* the knowledge of the machine's owner)
to inject messages through 'vulnerable' news-servers.

DB

Dave Balderstone

in reply to "Thomas Bunetta" on 14/05/2006 6:29 AM

15/05/2006 8:48 PM

In article <[email protected]>, WD <[email protected]>
wrote:

> Why dun someone in this NG report it to his ISP?

And what ISP would that be?

DB

Dave Balderstone

in reply to "Thomas Bunetta" on 14/05/2006 6:29 AM

16/05/2006 7:11 AM

In article <[email protected]>, WD <[email protected]>
wrote:

> I checked, it was posted from a few ISPs and one of them is from Amsterdam
>
> OrgName: RIPE Network Coordination Centre
> OrgID: RIPE
> Address: P.O. Box 10096
> City: Amsterdam

RIPE is not an ISP.

bm

"bob"

in reply to "Thomas Bunetta" on 14/05/2006 6:29 AM

16/05/2006 12:08 PM

Is it really any mystery who it is?


"Robert Bonomi" <[email protected]> wrote in message
news:[email protected]...
> In article <[email protected]>, WD <[email protected]>
wrote:
> >On Mon, 15 May 2006 20:48:56 -0600, Dave Balderstone
> ><dave@N_O_T_T_H_I_Sbalderstone.ca> wrote:
> >
> >>In article <[email protected]>, WD <[email protected]>
> >>wrote:
> >>
> >>> Why dun someone in this NG report it to his ISP?
> >>
> >>And what ISP would that be?
> >
> >I checked, it was posted from a few ISPs and one of them is from
Amsterdam
> >
> >OrgName: RIPE Network Coordination Centre
> >OrgID: RIPE
> >Address: P.O. Box 10096
> >City: Amsterdam
> >
>
> BZZZZZT! thank you for playing.
>
> RIPE is *not* an ISP. They are simply the coordinating agency that
> allocates IP addresses for Europe. the equivalent of 'ARIN' for North
> America.
>
> Tracking this idjit down requires serious expertise.`He uses 'zombie'
> machines (a Windows PC that has been 'infected' with software that lets
> other people use it *without* the knowledge of the machine's owner)
> to inject messages through 'vulnerable' news-servers.
>

md

mac davis

in reply to "Thomas Bunetta" on 14/05/2006 6:29 AM

14/05/2006 9:07 AM

On Sun, 14 May 2006 06:29:44 -0400, "Thomas Bunetta" <[email protected]> wrote:

>OK, the idiot that is polluting this NG seems to be able to fake the "from"
>names to just about all the regulars here.
>How do they do it and more importantly how can we stop them?
>I set up a filter for most of the more inflammatory words used in the
>various headers, but they keep added new ones.
>Tom
>
I find that if you just scroll past them, they only last for a few days and are
gone... as long as nobody replies to them, they are easily distinguished from
the real posts..

Mac

https://home.comcast.net/~mac.davis
https://home.comcast.net/~mac.davis/wood_stuff.htm

sD

[email protected] (Doug Miller)

in reply to "Thomas Bunetta" on 14/05/2006 6:29 AM

14/05/2006 5:06 PM

In article <[email protected]>, "Thomas Bunetta" <[email protected]> wrote:
>OK, the idiot that is polluting this NG seems to be able to fake the "from"
>names to just about all the regulars here.
>How do they do it and more importantly how can we stop them?
>I set up a filter for most of the more inflammatory words used in the
>various headers, but they keep added new ones.

See my sig...


--
Regards,
Doug Miller (alphageek-at-milmac-dot-com)

Get a copy of my NEW AND IMPROVED TrollFilter for NewsProxy/Nfilter
by sending email to autoresponder at filterinfo-at-milmac-dot-com
You must use your REAL email address to get a response.

Download Nfilter at http://www.milmac.com/np-120.exe

Ww

WD

in reply to "Thomas Bunetta" on 14/05/2006 6:29 AM

15/05/2006 9:37 PM

On Mon, 15 May 2006 22:40:01 GMT, Brian Henderson
<[email protected]> wrote:

Why dun someone in this NG report it to his ISP?

>On Sun, 14 May 2006 06:29:44 -0400, "Thomas Bunetta"
><[email protected]> wrote:
>
>>OK, the idiot that is polluting this NG seems to be able to fake the "from"
>>names to just about all the regulars here.
>>How do they do it and more importantly how can we stop them?
>>I set up a filter for most of the more inflammatory words used in the
>>various headers, but they keep added new ones.
>
>You really can't. Just ignore it and it'll go away in a couple days
>when they don't get any attention. That's all they want after all.

Ww

WD

in reply to "Thomas Bunetta" on 14/05/2006 6:29 AM

16/05/2006 12:09 AM

On Mon, 15 May 2006 20:48:56 -0600, Dave Balderstone
<dave@N_O_T_T_H_I_Sbalderstone.ca> wrote:

>In article <[email protected]>, WD <[email protected]>
>wrote:
>
>> Why dun someone in this NG report it to his ISP?
>
>And what ISP would that be?

I checked, it was posted from a few ISPs and one of them is from Amsterdam

OrgName: RIPE Network Coordination Centre
OrgID: RIPE
Address: P.O. Box 10096
City: Amsterdam

ER

Enoch Root

in reply to "Thomas Bunetta" on 14/05/2006 6:29 AM

14/05/2006 5:02 AM

Thomas Bunetta wrote:
> OK, the idiot that is polluting this NG seems to be able to fake the "from"
> names to just about all the regulars here.
> How do they do it and more importantly how can we stop them?
> I set up a filter for most of the more inflammatory words used in the
> various headers, but they keep added new ones.

Keep at it, there really is an end to them. :)

I see, momentarily, 750+ posts, which are immediately reduced to 10 or
so, with one highly offensive filter.

er
--
email not valid

Cs

"CW"

in reply to "Thomas Bunetta" on 14/05/2006 6:29 AM

14/05/2006 8:33 PM

Those posts are very easily taken care of. The ones from everybody talking
about them are the problem.

"mac davis" <[email protected]> wrote in message
news:[email protected]...
> On Sun, 14 May 2006 06:29:44 -0400, "Thomas Bunetta" <[email protected]>
wrote:
>
> >OK, the idiot that is polluting this NG seems to be able to fake the
"from"
> >names to just about all the regulars here.
> >How do they do it and more importantly how can we stop them?
> >I set up a filter for most of the more inflammatory words used in the
> >various headers, but they keep added new ones.
> >Tom
> >
> I find that if you just scroll past them, they only last for a few days
and are
> gone... as long as nobody replies to them, they are easily distinguished
from
> the real posts..
>
> Mac
>
> https://home.comcast.net/~mac.davis
> https://home.comcast.net/~mac.davis/wood_stuff.htm

BH

Brian Henderson

in reply to "Thomas Bunetta" on 14/05/2006 6:29 AM

15/05/2006 10:40 PM

On Sun, 14 May 2006 06:29:44 -0400, "Thomas Bunetta"
<[email protected]> wrote:

>OK, the idiot that is polluting this NG seems to be able to fake the "from"
>names to just about all the regulars here.
>How do they do it and more importantly how can we stop them?
>I set up a filter for most of the more inflammatory words used in the
>various headers, but they keep added new ones.

You really can't. Just ignore it and it'll go away in a couple days
when they don't get any attention. That's all they want after all.

BA

B A R R Y

in reply to "Thomas Bunetta" on 14/05/2006 6:29 AM

16/05/2006 5:05 PM

bob wrote:
> Is it really any mystery who it is?

I have a theory...


You’ve reached the end of replies