From: Digest To: "OS/2GenAu Digest" Date: Wed, 6 Aug 2003 00:03:59 EST-10EDT,10,-1,0,7200,3,-1,0,7200,3600 Subject: [os2genau_digest] No. 677 Reply-To: X-List-Unsubscribe: www.os2site.com/list/ ************************************************** Tuesday 05 August 2003 Number 677 ************************************************** Subjects for today 1 Re: There was a meeting? : Peter 2 Re: Article on LVM and JFS : Ian Manners" 3 [Fwd: E-mail Hoax =?iso-8859-1?Q?=A0?= Important Security Update from : Ed Durrant 4 =?us-ascii?q?Re:__[Fwd:_E-mail_Hoax_=FF_Important_Security_Update_from_BigPond]?= : John Angelico" 5 Re: [Fwd: E-mail Hoax ÿ Important Security Update from BigPond] : Robert Traynor (BobT)" 6 =?iso-8859-1?q?Re:__[Fwd:_E-mail_Hoax_=A0_Important_Security_Update_from_BigPond]?= : Ian Manners" 7 =?us-ascii?q?Re:___[Fwd:_E-mail_Hoax_=FF_Important_Security_Update_from_BigPond]?= : John Angelico" 8 =?ISO-8859-1?Q?Re=3A_=5Bos2genau=5D_Re=3A_=5Bos2genau=5D_?= =?ISO-8859-1?Q?=5BFwd=3A_E-mail_Hoax_=FF_Important_Security_?= =?ISO-8859-1?Q?Update_from_BigPond=5D?= : Mike O'Connor" 9 =?ISO-8859-1?Q?Re=3A_=5Bos2genau=5D_Re=3A_=5Bos2genau=5D_?= =?ISO-8859-1?Q?Re=3A_=5Bos2genau=5D_=5BFwd=3A_E-mail_Hoax_=FF_?= =?ISO-8859-1?Q?Important_Security_Update_from_BigPond=5D?= : Mike O'Connor" **= Email 1 ==========================** Date: Tue, 05 Aug 2003 00:06:58 +1000 From: Peter Subject: Re: There was a meeting? You'd call it the best piece of software for someone who's forgetful as long as they REMEMBER to umrem the commands? lol I think you've forgotten how not to be contradictory, Ian. lol Ian Manners wrote: >Hi Peter > >>Fair enough. It was a genuine mistake/oversight/whatever. >> >To many oversights laterly :-( >Maybe its my age :-) > >>But whats a CRON? >> > >A piece of software that carries out commands at a predermined date >and time, its runs the list digest, the os2site reindexing, apache log >rotation, weakly log file archiving for MajorMajor, Weasel, FTPServer >etc. Saves having to go downstairs to run things so I'd call it the best >piece of software for someone who is forgetful, as long as they remember >to unrem the commands in the command file... > >Cheers >Ian Manners >http://www.os2site dot com/ > >"Ever wonder if illiterate people get the full effect of alphabetsoup?" --John Mendoza > > [attachments have been removed] ---------------------------------------------------------------------------------- **= Email 2 ==========================** Date: Tue, 05 Aug 2003 01:29:59 +1000 (EST) From: "Ian Manners" Subject: Re: Article on LVM and JFS Hi Mark > Just to clarify, this and several other articles on LVM appeared first in > the VOICE Newsletter and can be found at > http://www.os2voice dot org/VNL/past_issues/vnlindex.html It probably sounds > annal, but I keep seeing articles that we had done on other sites with no > reference at all to where they originated. All articles in VOICE are the > copyright of the author so sites don't need our permission, just the > authors, but it would be nice to get a little credit for having done the > work on editing the article. I think you, and Voice have every right to be 'anal', the copies of archives I keep all have links, and info re who did what etc, well, most of it does. And I've check my voice mag archives and lo, that is the copy I read, should have looked there first but I came across the copy on os2.cz while looking for some stuff on mathematics and REXX. Short Introduction to LVM and JFS By: Michal Necasek in vnl1100h.zip Cheers Ian Manners http://www.os2site dot com/ "meooOOW!" SPLAT! "wooOOF!" SPLAT! (Raining Cats & Dogs) ---------------------------------------------------------------------------------- **= Email 3 ==========================** Date: Tue, 05 Aug 2003 07:17:33 +1000 From: Ed Durrant Subject: [Fwd: E-mail Hoax =?iso-8859-1?Q?=A0?= Important Security Update from In case anyone hasn't seen this - the mail can also be received by other e-mail clients (including OS/2 ones) however the attachment can only do harm in a windoze environment. Cheers/2 Ed. Happy to use a non-virus prone OS/2 ! -------- Original Message -------- Subject: E-mail Hoax   Important Security Update from BigPond Date: Mon, 4 Aug 2003 17:42:53 +1000 From: BigPond To: BigPond member Dear BigPond Member, Telstra has been advised of a worldwide security issue that could impact customers who do not have the latest version of Microsoft Internet Explorer. A new worm, a form of computer virus, has been detected in Australia. Known as W32/Mimail, the worm deletes anti-virus software leaving your computer vulnerable to other viruses and intrusions. The worm attempts to spread itself by a bogus email that appears to come from your Internet Service Provider. For BigPond customers, the sender address is either 'admin at bigpond' or 'admin at bigpond dot net dot au'. The email subject line is 'your account' followed by random characters. If you receive an email from 'admin at bigpond' we recommend that you do not open it. Delete the email immediately from your inbox and garbage bin/deleted items folder. The email containing the worm reads as follows: "Hello there, I would like to inform you about important information regarding your email address. This email address will be expiring. Please read attachment for details. Best regards, Administrator Attached file: message.zip" If you open the attached file, your anti-virus software may be deleted and your computer infected by the W32/Mimail worm. The worm can also attach itself to your address book and forward itself to all email addresses as if it comes from the recipient s Internet Service Provider. What should you do? A free anti-virus scan that detects and removes the W32/Mimail is available at http://www.pandasoftware dot com For further information about W32/Mimail and the Internet Explorer update provided by Microsoft, go to: http://www.microsoft dot com/technet/security/bulletin/MS03-014.asp http://www.microsoft dot com/technet/security/bulletin/MS02-015.asp We would like to assure customers that the email containing the worm is not sent from BigPond. We would also like to advise customers that BigPond does not ask you to provide personal details such as username, password or credit card detail via email. Leanne Wallis General Manager Customer Service ---------------------------------------------------------------------------------- **= Email 4 ==========================** Date: Tue, 05 Aug 2003 11:39:38 +1000 (AEST) From: "John Angelico" Subject: =?us-ascii?q?Re:__[Fwd:_E-mail_Hoax_=FF_Important_Security_Update_from_BigPond]?= On Tue, 05 Aug 2003 07:17:33 +1000, Ed Durrant wrote: >In case anyone hasn't seen this - the mail can also be received by other >e-mail clients (including OS/2 ones) however the attachment can only do >harm in a windoze environment. > >Cheers/2 >Ed. > >Happy to use a non-virus prone OS/2 ! Yes, Ed. Typically, Telstra *forgets* that there are other systems than MS-Win "out there." I haven't had to receive one of these as my tuxedo-clad ISP uses Linux. But I might be inclined to respond to Telstra: "Dear T, Thanks for the advice but I don't have that problem anymore - I use OS/2! " or more brusquely "Been there done that, using OS/2 as a result!" Best regards John Angelico OS/2 SIG os2 at melbpc dot org dot au or talldad at kepl dot com dot au ___________________ PMTagline v1.50 - Copyright, 1996-1997, Stephen Berg and John Angelico .... Failure is not an option -- it comes bundled with Windows. PMTagline v1.50 - Copyright, 1996-1997, Stephen Berg and John Angelico .... What we have here is a failure to communicate ---------------------------------------------------------------------------------- **= Email 5 ==========================** Date: Tue, 05 Aug 2003 12:17:51 +1000 From: "Robert Traynor (BobT)" Subject: Re: [Fwd: E-mail Hoax ÿ Important Security Update from BigPond] Hi John and Ed, Sorry to rain on your parade John, but your "tuxedo-clad ISP" that uses Linux, allowed one of these to get through its servers to me a few days ago.. It pretended to be from Optus Internet and had the message.html file in an attachment. I deleted it of course. No problems here. Regards, Robert Traynor (BobT). 5 August 2003 12:16 On Tue, 05 Aug 2003 11:39:38 +1000 (AEST), John Angelico wrote: > On Tue, 05 Aug 2003 07:17:33 +1000, Ed Durrant wrote: > > >In case anyone hasn't seen this - the mail can also be received by other > >e-mail clients (including OS/2 ones) however the attachment can only do > >harm in a windoze environment. > > > >Cheers/2 > >Ed. > > > >Happy to use a non-virus prone OS/2 ! > > Yes, Ed. > > Typically, Telstra *forgets* that there are other systems than MS-Win "out > there." > > I haven't had to receive one of these as my tuxedo-clad ISP uses Linux. > > But I might be inclined to respond to Telstra: > > "Dear T, Thanks for the advice but I don't have that problem anymore - I > use OS/2! " > or more brusquely "Been there done that, using OS/2 as a result!" > > > Best regards > John Angelico > OS/2 SIG > os2 at melbpc dot org dot au or > talldad at kepl dot com dot au ,-._|\ Robert Traynor (BobT) / Oz \ email rtraynor at removeme.optusnet dot com dot au \_,--.x/ ---------------------------------------------------------------------------------- **= Email 6 ==========================** Date: Tue, 05 Aug 2003 13:43:06 +1000 (EST) From: "Ian Manners" Subject: =?iso-8859-1?q?Re:__[Fwd:_E-mail_Hoax_=A0_Important_Security_Update_from_BigPond]?= > In case anyone hasn't seen this - the mail can also be received by other > e-mail clients (including OS/2 ones) however the attachment can only do > harm in a windoze environment. Sigh, virus scanners :- Your mail was not delivered to the following recipients. xxxx at xxx.australis dot com dot au: 554 5.7.1 Message cannot be accepted, virus found There will be no further attempts to deliver this mail. Smart scanner OR what.... This is the result of posts just sent from this list about this email :-) Cheers Ian Manners http://www.os2site dot com/ "Opportunity is missed by most people because it is dressed in overalls and looks like work." -- Thomas Edison ---------------------------------------------------------------------------------- **= Email 7 ==========================** Date: Tue, 05 Aug 2003 14:20:45 +1000 (AEST) From: "John Angelico" Subject: =?us-ascii?q?Re:___[Fwd:_E-mail_Hoax_=FF_Important_Security_Update_from_BigPond]?= On Tue, 05 Aug 2003 12:17:51 +1000, Robert Traynor (BobT) wrote: >Hi John and Ed, > >Sorry to rain on your parade John, but your "tuxedo-clad ISP" that >uses Linux, allowed one of these to get through its servers to me >a few days ago.. No problems Bob. I was ambiguous, and should have said the thing looked like a special BigPond scam, so nothing had come via my ISP. I had not meant to imply that Tux was immune. > >It pretended to be from Optus Internet and had the message.html file >in an attachment. I deleted it of course. No problems here. Now I can see it is a bit bigger than just BigPond, so I will keep my eyes open and my finger near the delete key. Best regards John Angelico OS/2 SIG os2 at melbpc dot org dot au or talldad at kepl dot com dot au ___________________ PMTagline v1.50 - Copyright, 1996-1997, Stephen Berg and John Angelico .... OS/2 VirusScan: WINDOWS detected. Delete? (Y/y) ---------------------------------------------------------------------------------- **= Email 8 ==========================** Date: Tue, 05 Aug 2003 16:39:40 +1000 From: "Mike O'Connor" Subject: =?ISO-8859-1?Q?Re=3A_=5Bos2genau=5D_Re=3A_=5Bos2genau=5D_?= =?ISO-8859-1?Q?=5BFwd=3A_E-mail_Hoax_=FF_Important_Security_?= =?ISO-8859-1?Q?Update_from_BigPond=5D?= John Angelico wrote: >On Tue, 05 Aug 2003 07:17:33 +1000, Ed Durrant wrote: > > >>In case anyone hasn't seen this - the mail can also be received by other >>e-mail clients (including OS/2 ones) however the attachment can only do >>harm in a windoze environment. >> >>Cheers/2 >>Ed. >> >>Happy to use a non-virus prone OS/2 ! >> >> > >Yes, Ed. > >Typically, Telstra *forgets* that there are other systems than MS-Win "out >there." > >I haven't had to receive one of these as my tuxedo-clad ISP uses Linux. > >But I might be inclined to respond to Telstra: > >"Dear T, Thanks for the advice but I don't have that problem anymore - I >use OS/2! " >or more brusquely "Been there done that, using OS/2 as a result!" > > >Best regards >John Angelico > > Hi John, Ed, Robert, Here's what I sent off at 5:39 a.m. on > Hi Tech Support [& Billing], > > The following e-mail fraudulently claiming to be from > "admin at dodo dot com dot au" - arrived in my inbox an hour ago at 4:14 a.m. 2nd > August. > Using nslookup I determined from the full headers that it actually > originated from " host254.elpasoelectric dot com" : > > OS/2 Ctrl+Esc = Window List Type HELP = help > [384SDRAM C:\DESKTOP]nslookup 206.57.63.254 > Server: ns3 dot comindico dot com dot au > Address: 203.194.27.57 > > Name: host254.elpasoelectric dot com > Address: 206.57.63.254 > > > [384SDRAM C:\DESKTOP] > > The attached zipfile contains an html page with the words "no message"! > > Not very funny :-( > -------------------------------------------------- > Here arre the original headers off the message : > > X-UIDL: XPM"!pni"!+C`!!cO1"! > X-Mozilla-Status: 0001 > X-Mozilla-Status2: 10000000 > Return-path: > Envelope-to: mikeoc at dodo dot com dot au > Delivery-date: Sat, 02 Aug 2003 04:14:10 +1000 > Received: from [206.57.63.254] (helo=localhost) > by mail.dodo dot com dot au with smtp (Exim 3.36 #3) > id 19iePl-0000KA-00 > for mikeoc at dodo dot com dot au; Sat, 02 Aug 2003 04:14:09 +1000 > From: admin at dodo dot com dot au > To: Mikeoc > Reply-To: admin at dodo dot com dot au > X-Mailer: The Bat! (v1.61) > X-Priority: 2 (High) > Subject: your account rlcrowao > MIME-Version: 1.0 > Content-Type: multipart/mixed; boundary="----------C56794AD00F904D" > Message-Id: > Date: Sat, 02 Aug 2003 04:14:09 +1000 > X-UIDL: XPM"!pni"!+C`!!cO1"! > > ------------C56794AD00F904D > Content-Type: text/plain; charset=us-ascii > Content-Transfer-Encoding: 7bit > > > Hello there, > > I would like to inform you about important information regarding your > email address. This email address will be expiring. > Please read attachment for details. > > --- > Best regards, Administrator > rlcrowao > > ------------C56794AD00F904D > Content-Type: application/x-zip-compressed; name="message.zip" > Content-Transfer-Encoding: base64 > Content-Disposition: attachment; filename="message.zip" > > ---------------- Followed by the base64 MIME content ----------- -- Regards, Mike Failed the exam for -------------------- MCSE - Minesweeper Consultant and Solitaire Expert -------------------- [ISP blocks *.exe attachments] [Please use zipped versions of above] ---------------------------------------------------------------------------------- **= Email 9 ==========================** Date: Tue, 05 Aug 2003 16:44:54 +1000 From: "Mike O'Connor" Subject: =?ISO-8859-1?Q?Re=3A_=5Bos2genau=5D_Re=3A_=5Bos2genau=5D_?= =?ISO-8859-1?Q?Re=3A_=5Bos2genau=5D_=5BFwd=3A_E-mail_Hoax_=FF_?= =?ISO-8859-1?Q?Important_Security_Update_from_BigPond=5D?= Mike O'Connor wrote: > John Angelico wrote: > >> On Tue, 05 Aug 2003 07:17:33 +1000, Ed Durrant wrote: >> >> >>> In case anyone hasn't seen this - the mail can also be received by >>> other >>> e-mail clients (including OS/2 ones) however the attachment can only do >>> harm in a windoze environment. >>> Cheers/2 >>> Ed. >>> >>> Happy to use a non-virus prone OS/2 ! >>> >> >> >> Yes, Ed. >> >> Typically, Telstra *forgets* that there are other systems than MS-Win >> "out >> there." >> I haven't had to receive one of these as my tuxedo-clad ISP uses >> Linux. >> >> But I might be inclined to respond to Telstra: >> >> "Dear T, Thanks for the advice but I don't have that problem anymore - I >> use OS/2! " >> or more brusquely "Been there done that, using OS/2 as a result!" >> >> >> Best regards >> John Angelico >> >> > > Hi John, Ed, Robert, > > Here's what I sent off at 5:39 a.m. on > >> Hi Tech Support [& Billing], >> >> The following e-mail fraudulently claiming to be from >> "admin at dodo dot com dot au" - arrived in my inbox an hour ago at 4:14 a.m. >> 2nd August. >> Using nslookup I determined from the full headers that it actually >> originated from " host254.elpasoelectric dot com" : >> >> OS/2 Ctrl+Esc = Window List Type HELP = help >> [384SDRAM C:\DESKTOP]nslookup 206.57.63.254 >> Server: ns3 dot comindico dot com dot au >> Address: 203.194.27.57 >> >> Name: host254.elpasoelectric dot com >> Address: 206.57.63.254 >> >> >> [384SDRAM C:\DESKTOP] >> >> The attached zipfile contains an html page with the words "no message"! >> >> Not very funny :-( >> -------------------------------------------------- >> Here arre the original headers off the message : >> >> X-UIDL: XPM"!pni"!+C`!!cO1"! >> X-Mozilla-Status: 0001 >> X-Mozilla-Status2: 10000000 >> Return-path: >> Envelope-to: mikeoc at dodo dot com dot au >> Delivery-date: Sat, 02 Aug 2003 04:14:10 +1000 >> Received: from [206.57.63.254] (helo=localhost) >> by mail.dodo dot com dot au with smtp (Exim 3.36 #3) >> id 19iePl-0000KA-00 >> for mikeoc at dodo dot com dot au; Sat, 02 Aug 2003 04:14:09 +1000 >> From: admin at dodo dot com dot au >> To: Mikeoc >> Reply-To: admin at dodo dot com dot au >> X-Mailer: The Bat! (v1.61) >> X-Priority: 2 (High) >> Subject: your account rlcrowao >> MIME-Version: 1.0 >> Content-Type: multipart/mixed; boundary="----------C56794AD00F904D" >> Message-Id: >> Date: Sat, 02 Aug 2003 04:14:09 +1000 >> X-UIDL: XPM"!pni"!+C`!!cO1"! >> >> ------------C56794AD00F904D >> Content-Type: text/plain; charset=us-ascii >> Content-Transfer-Encoding: 7bit >> >> >> Hello there, >> >> I would like to inform you about important information regarding your >> email address. This email address will be expiring. >> Please read attachment for details. >> >> --- >> Best regards, Administrator >> rlcrowao >> >> ------------C56794AD00F904D >> Content-Type: application/x-zip-compressed; name="message.zip" >> Content-Transfer-Encoding: base64 >> Content-Disposition: attachment; filename="message.zip" >> >> ---------------- Followed by the base64 MIME content ----------- > > BTW, the response from Dodo was as follows: >Dear Mike, > >Thank you for bringing this abuse to our attention, as a national service >provider we take abuse seriously and have acted on this appropriately. >The abuse originated from another service provider ISP called Global >Crossing. We have reported this problem to Global Crossing. > >This type of activity should not occur in the future and should you have >any problems please feel free to contact us again. > > >Regards, >Dodo Abuse Team >Phone: 1300 36 36 05 >E-mail: abuse at dodo dot com dot au >Web: http://www.dodo dot com dot au > -- Regards, Mike Failed the exam for -------------------- MCSE - Minesweeper Consultant and Solitaire Expert -------------------- ----------------------------------------------------------------------------------