procmail
[Top] [All Lists]

Professional Courtesy Advisement...

1995-10-11 14:51:37

To:    postmaster(_at_)ixc(_dot_)net
       postmaster(_at_)ingress(_dot_)com
       webmaster(_at_)ixc(_dot_)net
       webmaster(_at_)ingress(_dot_)com

As a Professional Courtesy, I am hereby advising you that you may
be contacted by the FBI regarding a suspicious, somewhat "clandestine"
mailing which appears to possibly have involved one of the machines
or mailers on your system.  The information has already been supplied
to the FBI Computer & Fraud By Wire Division in New York.

You may wish to launch an immediate investigation of your own, and to
take proactive efforts to locate the person(s) responsible for blanketing
various Internet mailing lists with an Anonymous ("disguised") point-of
origin marketing letter.  This is precisely the type of crap which must be 
stopped *NOW* [extreme emphasis added].

It would also appear that perhaps the alleged "magazine" organization
involved may be operating as a front for a pornography ring.  At least
the cleverly worded marketing letter would seem to suggest this, IMHO.

To assist you in your internal audit, here is a copy of a header from
the procmail mailing list also submitted as evidence to the FBI:

---<snip>---
Subject: Evidence

Most notably, originating host: 198.70.48.62 (pm1-62.ixc.net)
Possibly involved: 205.230.67.34 (ppp34.ingress.com)

From 
For(_dot_)a(_dot_)prompter(_dot_)reply(_dot_)please(_dot_)fax(_at_)If(_dot_)you(_dot_)do(_dot_)not(_dot_)have(_dot_)a(_dot_)fax(_dot_)smail(_dot_)is(_dot_)ok
 Wed Oct 11 13:49:44 1995
Received: from cornell.edu (cornell.edu [132.236.56.6]) by 
Campino.Informatik.RWTH-Aachen.DE (RBI-Z-4/8.6.12)
      with ESMTP id NAA05643; Wed, 11 Oct 1995 13:49:31 +0100
Received: from [198.70.48.62] (pm1-62.ixc.net [198.70.48.62]) by cornell.edu 
(8.6.12/8.6.12) with SMTP id EAA02068; Wed, 11 Oct 1995 04:28:53 -0400
X-Sender: 
For(_dot_)a(_dot_)prompter(_dot_)reply(_dot_)please(_dot_)fax(_at_)If(_dot_)you(_dot_)do(_dot_)not(_dot_)have(_dot_)a(_dot_)fax(_dot_)smail(_dot_)is(_dot_)ok
(Unverified)
Message-Id: <v0153050baca1267766ab(_at_)[205(_dot_)230(_dot_)67(_dot_)34]>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Date: Wed, 11 Oct 1995 05:03:27 -0500
To: 
For(_dot_)a(_dot_)prompter(_dot_)reply(_dot_)please(_dot_)fax(_at_)If(_dot_)you(_dot_)do(_dot_)not(_dot_)have(_dot_)a(_dot_)fax(_dot_)smail(_dot_)is(_dot_)ok
From: 
For(_dot_)a(_dot_)prompter(_dot_)reply(_dot_)please(_dot_)fax(_at_)If(_dot_)you(_dot_)do(_dot_)not(_dot_)have(_dot_)a(_dot_)fax(_dot_)smail(_dot_)is(_dot_)ok
(You will
get a quick reply via email within 1 business day of receipt of the info
request form below.)
Subject: *new* reply info: ===>> FREE 1 yr. Magazine Sub sent worldwide- 300+ 
Popular USA
Titles

----> NOTE:  if you previously replied via email to this message, filling
in the form completely, and it has been more than 48 hrs. since you sent it
in and still have not received a reply, please reply again, to the FAX OR
SMAIL ADDRESS shown below.  They will then send you their FREE catalogue by
email, along with complete info on how their club works.  They are very
sorry if you have not yet received a reply and would appreciate your
sending it again to their fax or smail address.  Thank you. <-----


The alleged "student" involved used the name Janet Dove, which to me,
appears to be simply an alias.  

Again, you may be contacted soon by Mr. William Duff or other agents
of the FBI in New York.  If you have any questions, feel free to drop
me an e-mail or call Mr. Duff directly at the FBI (212)335-2780.  I
had to FAX the info...apparently they are not yet on-line (or won't
admit to it :-)

I hope you will appreciate this Professional Courtesy Advisement, and
trust you will cooperate fully in helping find who is responsible for
this horric abuse of the Internet (and, quite suspiciously, perhaps
much more than appears on the surface).

Cordially,

Eric Hilding
eric(_at_)hilding(_dot_)com