On Fri, 10 Feb 2012 17:45:25 +1100, Nigel Allen
<(E-Mail Removed)> wrote:
> On 10/02/12 16:57, Bob Milutinovic wrote:
>> "F Murtz" <(E-Mail Removed)> wrote in message
>> news:Vn1Zq.3012$%(E-Mail Removed) d.com...
>>> F Murtz wrote:
>>>> Moike wrote:
>>>>> On 10/02/2012 12:02 PM, F Murtz wrote:
>>>>>> How on earth do you killfile this rubbish?
>>>>>> I mass highlight and hit K button but that wastes a few key presses.
>>>>>> It amazes me why someone is doing it, some spam must get a return,
>>>>>> but I
>>>>>> can not see how this sort would.
>>>>> Maybe I'm doing something wrong, but I haven't seen any spam in here
>>>>> for
>>>>> ages. I suppose it's not really worth their time.....
>>>>> Am I missing something?
>>>>>
>>>>> Moike
>>>>>
>>>> It is very strange spam similar subject,Umpteen pages one after
>>>> another
>>>> all with different addresses so you would have to kill them
>>>> individually,which would do no good as they are not used again.
>>>>
>>> Also it is only appearing on my bigpong news not on eternal september
>>
>> If you're the only one who can see it, then it must be a spammer
>> internal to Bigpond. I use both TPG and AIOE news servers and just like
>> the others haven't seen any trace of spam here for quite a while.
>>
>> Have a look at the headers; what does the PATH say? Where was it
>> injected (into the news queue)?
>>
> It's not big pong.
>
> Here's the headers - I picked it all up from iinet. The host is from
> Cable & Wireless Antigua and Barbuda Ltd!
>
> N/
>
>> Path:
>> border1.nntp.dca.giganews.com!nntp.giganews.com!po stnews.google.com!f5g2000yqm.googlegroups.com!not-for-mail
>> From: Lauer White <(E-Mail Removed)>
>> Newsgroups: aus.motorcycles
>> Subject: Buy Methocarbamol and children Methocarbamol earache
>> Methocarbamol alternatives
>> Date: Thu, 9 Feb 2012 15:05:50 -0800 (PST)
>> Organization: http://groups.google.com
>> Lines: 101
>> Message-ID:
>> <c2217dd5-84bb-4555-af71-(E-Mail Removed)>
>> NNTP-Posting-Host: 209.59.70.227
>> Mime-Version: 1.0
>> Content-Type: text/plain; charset=ISO-8859-1
>> X-Trace: posting.google.com 1328829166 15464 127.0.0.1 (9 Feb 2012
>> 23:12:46 GMT)
>> X-Complaints-To: groups-(E-Mail Removed)
>> NNTP-Posting-Date: Thu, 9 Feb 2012 23:12:46 +0000 (UTC)
>> Complaints-To: groups-(E-Mail Removed)
>> Injection-Info: f5g2000yqm.googlegroups.com;
>> posting-host=209.59.70.227;
>> posting-account=ZylGBQoAAACco5x4u1aqPBgS8i7hDnY9
>> User-Agent: G2/1.0
>> X-Google-Web-Client: true
>> X-Google-Header-Order: ARLEUHNKC
>> X-HTTP-UserAgent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1;
>> Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR
>> 3.5.30729; InfoPath.1),gzip(gfe)
>> Bytes: 4367
>> Xref: number.nntp.dca.giganews.com aus.motorcycles:682949
>
Well, the plot thickens!
Either TPG, AIOE and Eternal September all do their own filtering for spam
(not very likely, as there _is_ spam frequently appearing in other
groups), or Google (the most prominent injection point for spam) is
issuing cancels which the aforementioned servers are honouring but
GigaNews (from which iiNet apparently collects its news, based on your
comment and the supplied headers) isn't.
Maybe iiNet's too engrossed in their takeover efforts to establish their
own proper news server? :-P
Anyone using a news server other than the ones already mentioned here,
care to comment about whether you see such spam or not?
--
Bob Milutinovic
Cognicom