I've only received one of these. I find that VERY interesting! openrbl.org
shows no hits on that IP. I found some more interesting info! Stay with me!
The bounce is from thewizard.net which looks like:

IP address: 199.85.4.55
Host name: thewizard.net

Alias:
acquired.pool.com


Registrant:

   David Hastings
   The Cottage, Morton Grange Farm
   Fencehouses, . DH4 6QB
   Great Britain (UK)
   Phone:+44.1913854060

   Domain Name: thewizard.net

      Created on.............: 2003-08-15 14:26:25
      Expires on.............: 2004-08-15 14:26:25
      Record last updated on..: 2003-08-15 15:38:21

   Administrative Contact:
      
      David Hastings
      The Cottage, Morton Grange Farm
      Fencehouses, . DH4 6QB
      Great Britain (UK)
      Phone: +44.1913854060
      Email: [EMAIL PROTECTED]


So lets google David Hastings and Morton Grange! I find more domains. I
check loadline.com and get POSITIVE hits on openrbl.com! Same for a77.com
and 00uk.com! Then I hit the motherload by simply going here:

http://www.00uk.com/

SO I'm not liking this at all. Just don't seem right! If it smells like a
duck and walks like a duck..... :)

Then again, could just be a domain squatter. By the looks of those domains
and RBL results, I don't think I want email from any of those.

--Chris

> -----Original Message-----
> From: Matt Kettler [mailto:[EMAIL PROTECTED]
> Sent: Wednesday, November 12, 2003 4:09 PM
> To: Pedro Sam; [EMAIL PROTECTED]; SATalk list
> Subject: Re: [SAtalk] OT: Administrivia: List mom, please disable the
> bouncing thewizard.net subscriber.
> 
> 
> At 02:14 PM 11/12/2003, Pedro Sam wrote:
> >I had SA learn it as spam, and it never bothered me again :) 
>  Perhaps this is
> >not the proper way of using SA, but it works.
> 
> Or you can add "comingsoon.pool.com" to your /etc/mail/access 
> file with a 
> 550 rejection :)
> 
> Received: from mx10.comingsoon.pool.com (mx10.comingsoon.pool.com 
> [199.85.4.240])
>          by xanadu.evi-inc.com (8.11.6/8.11.6) with SMTP id 
> h9SJ2xj17181
>          for <[EMAIL PROTECTED]>; Tue, 28 Oct 2003 14:03:00 -0500
> Received: from mailnull by mx10.comingsoon.pool.com with 
> local (Exim 4.20)
>          id 1AEZ6p-000E2W-8I
>          for [EMAIL PROTECTED]; Tue, 28 Oct 2003 19:02:27 +0000
> From: [EMAIL PROTECTED]
> 
> 
> 
> 
> -------------------------------------------------------
> This SF.Net email sponsored by: ApacheCon 2003,
> 16-19 November in Las Vegas. Learn firsthand the latest
> developments in Apache, PHP, Perl, XML, Java, MySQL,
> WebDAV, and more! http://www.apachecon.com/
> _______________________________________________
> Spamassassin-talk mailing list
> [EMAIL PROTECTED]
> https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
> 


-------------------------------------------------------
This SF.Net email sponsored by: ApacheCon 2003,
16-19 November in Las Vegas. Learn firsthand the latest
developments in Apache, PHP, Perl, XML, Java, MySQL,
WebDAV, and more! http://www.apachecon.com/
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to