Re: Spam? label - my response to GJ's 3 test mails

From	Jeremy Nicoll - news posts <jn.nntp.scrap007@wingsandbeaks.org.uk>
Newsgroups	comp.sys.acorn.misc
Subject	Re: Spam? label - my response to GJ's 3 test mails
Date	2012-09-15 22:58 +0100
Message-ID	<mpro.maevpm0072zcj00vs@wingsandbeaks.org.uk.invalid> (permalink)
References	(15 earlier) <mpro.macxdq006gm6a031c@wingsandbeaks.org.uk.invalid> <52cf4120fagraham@gjenkins.me.uk> <mpro.mad0uq00952d7031c@wingsandbeaks.org.uk.invalid> <52cf8e3c40graham@gjenkins.me.uk> <mpro.maes7f004dma700vs@wingsandbeaks.org.uk.invalid>

Show all headers | View raw

Jeremy Nicoll - news posts <jn.nntp.scrap007@wingsandbeaks.org.uk> wrote:

Following up my earlier post...

There was discussion upthread about whose SMTP server Graham's mails were
being sent by.  All three of the test mails he sent me started off with a
Received: header showing (to my mind) that the spellings SMTP server was the
relevant one:

The "Test3" mail, from Pluto/Iyonix/POPstar to my newsreply---@wab address

>Received: from host81-155-130-95.range81-155.btcentralplus.com
>([81.155.130.95]:49554 helo=Graham)
> by server1.spellings.net with esmtp (Exim 4.77)
> (envelope-from <graham@gjenkins.me.uk>)
> id 1TCppD-0000Ge-2X
> for newsreply---@wingsandbeaks.org.uk; Sat, 15 Sep 2012 11:42:11 +0100

The same mail sent to the other address I suggested:

>Received: from host81-155-130-95.range81-155.btcentralplus.com
>([81.155.130.95]:49554 helo=Graham)
> by server1.spellings.net with esmtp (Exim 4.77)
> (envelope-from <graham@gjenkins.me.uk>)
> id 1TCppD-0000Ge-B8
> for jn.wb.gpn.----@letterboxes.org; Sat, 15 Sep 2012 11:42:11 +0100

The "Test 4" mail which was sent from OE on his laptop to my
newsreply----@wab address:

>Received: from host81-155-130-95.range81-155.btcentralplus.com
>([81.155.130.95]:2287 helo=Glap)
> by server1.spellings.net with smtp (Exim 4.77)
> (envelope-from <graham@gjenkins.me.uk>)
> id 1TCppL-0000HG-6G
> for newsreply---@wingsandbeaks.org.uk; Sat, 15 Sep 2012 11:42:19 +0100

I think the 81-155-130-95 address is for whatever in BT's network is
attached to his router, or is the modem/router itself.

Also, are the ":49554" and ":2287" values shown with the IP address port
addresses?   Does anyone know what they might mean in this context?  Is it
possible that these represent different customer connections to whatever it
is that has address 81.155.130.95?   I mean, could more than one BT customer
at once be attached to that device?

With my Virgin Media cable connection if I do a tracert to somewhere the
thing associated with my public IP address is not my router, but instead
something whose name shows where in VM's network my modem is attached to:

C:\Documents and Settings\Laptop>tracert www.bbc.co.uk

Tracing route to www.bbc.net.uk [212.58.246.92]
over a maximum of 30 hops:

  1    <1 ms    <1 ms    <1 ms  router [192.168.1.1]

  2   190 ms    20 ms     8 ms 
cpc6-sgyl35-2-0-gw.18-2.cable.virginmedia.com [80.192.44.1]

   ...     (sygl is South Gyle, Edinburgh)

If I send an email to myself it's the "80.192.44.1" address that the SMTP
server I use shows the mail being submitted from; 80.192.44.1 is definitely
not an SMTP server.

Graham: if you do a tracert (from a Windows command window) to somewhere
what are the first few lines of response you see? 

If it's the same for Graham's connection, ie that the 81-155-130-95 address
is just his connection into the BT network, then we're back to BT needing to
be involved in getting the block list entry lifted... but it wouldn't be
because there's a BT SMTP server at that address.  Presumably it just means
that someone who has once had this IP address - assuming that it's assigned
dynamically - has originated spam, directly injecting it or runing a relay. 

I hate to say it, but is there a not also a possibility that Graham's PC, or
someone else using his network, actually has originated spam?   I have no
idea how one would find out if that's the case, nor when the address (if it
is just a single one rather than a range of addresses) went onto the block
lists.  

To Graham: does your PC have up todate anti-virus & anti-malware software? 
Have you recently done a full-scan?   Does anyone else (child, friend,
whatever) ever bring a PC into your house and plug it in (or use a wifi
connection to) your network?   Is your wifi network, if you have one,
secure? 

-- 
Jeremy C B Nicoll - my opinions are my own.

Email sent to my from-address will be deleted. Instead, please reply
to newsreplyaaa@wingsandbeaks.org.uk replacing "aaa" by "284".

Back to comp.sys.acorn.misc | Previous | Next — Previous in thread | Next in thread | Find similar

Thread

Spam? label Graham Jenkins <graham@gjenkins.me.uk> - 2012-09-12 10:31 +0100
  Re: Spam? label Russell Hafter News <see.sig@walkingingermany.invalid> - 2012-09-12 11:16 +0100
    Re: Spam? label Graham Jenkins <graham@gjenkins.me.uk> - 2012-09-12 15:11 +0100
      Re: Spam? label Russell Hafter News <see.sig@walkingingermany.invalid> - 2012-09-12 16:17 +0100
        Re: Spam? label Steve Fryatt <news@stevefryatt.org.uk> - 2012-09-12 19:04 +0100
          Re: Spam? label Graham Jenkins <graham@gjenkins.me.uk> - 2012-09-12 20:10 +0100
            Re: Spam? label Neil Spellings <neil@spellings.net> - 2012-09-13 06:47 +0100
              Re: Spam? label Chris Evans <chris@cjemicros.co.uk> - 2012-09-13 09:29 +0100
              Re: Spam? label Graham Jenkins <graham@gjenkins.me.uk> - 2012-09-13 10:39 +0100
                Re: Spam? label Russell Hafter News <see.sig@walkingingermany.invalid> - 2012-09-13 11:30 +0100
                Re: Spam? label Graham Jenkins <graham@gjenkins.me.uk> - 2012-09-13 18:48 +0100
                Re: Spam? label Steve Fryatt <news@stevefryatt.org.uk> - 2012-09-13 20:40 +0100
                Re: Spam? label spampling <spam.pling@btinternet.com> - 2012-09-14 08:01 +0100
                Re: Spam? label Graham Jenkins <graham@gjenkins.me.uk> - 2012-09-14 11:26 +0100
                Re: Spam? label Alan Wrigley <spamhater@keepyourfilthyspamtoyourself.co.uk> - 2012-09-14 11:45 +0100
                Re: Spam? label Russell Hafter News <see.sig@walkingingermany.invalid> - 2012-09-14 13:51 +0100
                Re: Spam? label "John Williams (News)" <UCEbin@tiscali.co.uk> - 2012-09-14 15:04 +0200
                Re: Spam? label Russell Hafter News <see.sig@walkingingermany.invalid> - 2012-09-14 15:00 +0100
                Re: Spam? label Steve Fryatt <news@stevefryatt.org.uk> - 2012-09-15 21:01 +0100
                Re: Spam? label Graham Jenkins <graham@gjenkins.me.uk> - 2012-09-14 14:14 +0100
                Re: Spam? label Russell Hafter News <see.sig@walkingingermany.invalid> - 2012-09-14 15:01 +0100
                Re: Spam? label Graham Jenkins <graham@gjenkins.me.uk> - 2012-09-14 15:36 +0100
                Re: Spam? label Russell Hafter News <see.sig@walkingingermany.invalid> - 2012-09-14 13:55 +0100
                Re: Spam? label Graham Jenkins <graham@gjenkins.me.uk> - 2012-09-14 14:44 +0100
                Re: Spam? label Alan Wrigley <spamhater@keepyourfilthyspamtoyourself.co.uk> - 2012-09-14 15:11 +0100
                Re: Spam? label Alan Wrigley <spamhater@keepyourfilthyspamtoyourself.co.uk> - 2012-09-14 15:45 +0100
                Re: Spam? label Alan Wrigley <spamhater@keepyourfilthyspamtoyourself.co.uk> - 2012-09-14 15:53 +0100
                Re: Spam? label Alan Wrigley <spamhater@keepyourfilthyspamtoyourself.co.uk> - 2012-09-14 16:23 +0100
                Re: Spam? label Graham Jenkins <graham@gjenkins.me.uk> - 2012-09-14 16:59 +0100
                Re: Spam? label Alan Wrigley <spamhater@keepyourfilthyspamtoyourself.co.uk> - 2012-09-14 17:15 +0100
                Re: Spam? label Graham Jenkins <graham@gjenkins.me.uk> - 2012-09-14 17:55 +0100
                Re: Spam? label Alan Wrigley <spamhater@keepyourfilthyspamtoyourself.co.uk> - 2012-09-14 18:11 +0100
                Re: Spam? label Jeremy Nicoll - news posts <jn.nntp.scrap007@wingsandbeaks.org.uk> - 2012-09-14 21:39 +0100
                Re: Spam? label Graham Jenkins <graham@gjenkins.me.uk> - 2012-09-14 21:51 +0100
                Re: Spam? label Jeremy Nicoll - news posts <jn.nntp.scrap007@wingsandbeaks.org.uk> - 2012-09-14 22:54 +0100
                Re: Spam? label Graham Jenkins <graham@gjenkins.me.uk> - 2012-09-15 11:53 +0100
                Re: Spam? label Jeremy Nicoll - news posts <jn.nntp.scrap007@wingsandbeaks.org.uk> - 2012-09-15 21:42 +0100
                Re: Spam? label Alan Wrigley <spamhater@keepyourfilthyspamtoyourself.co.uk> - 2012-09-15 22:05 +0100
                Re: Spam? label Jeremy Nicoll - news posts <jn.nntp.scrap007@wingsandbeaks.org.uk> - 2012-09-15 22:08 +0100
                Re: Spam? label Alan Wrigley <spamhater@keepyourfilthyspamtoyourself.co.uk> - 2012-09-15 22:15 +0100
                Re: Spam? label Jeremy Nicoll - news posts <jn.nntp.scrap007@wingsandbeaks.org.uk> - 2012-09-15 22:24 +0100
                Re: Spam? label Alan Wrigley <spamhater@keepyourfilthyspamtoyourself.co.uk> - 2012-09-16 08:44 +0100
                Re: Spam? label - my response to GJ's 3 test mails Jeremy Nicoll - news posts <jn.nntp.scrap007@wingsandbeaks.org.uk> - 2012-09-15 22:58 +0100
                Re: Spam? label - my response to GJ's 3 test mails Graham Jenkins <graham@gjenkins.me.uk> - 2012-09-16 11:05 +0100
                Re: Spam? label - my response to GJ's 3 test mails Graham Jenkins <graham@gjenkins.me.uk> - 2012-09-18 07:59 +0100
                Re: Spam? label - my response to GJ's 3 test mails Jeremy Nicoll - news posts <jn.nntp.scrap007@wingsandbeaks.org.uk> - 2012-09-18 12:09 +0100
                Re: Spam? label druck <news@druck.org.uk> - 2012-09-16 17:41 +0100
                Re: Spam? label Alan Wrigley <spamhater@keepyourfilthyspamtoyourself.co.uk> - 2012-09-15 09:19 +0100
                Re: Spam? label Graham Jenkins <graham@gjenkins.me.uk> - 2012-09-15 12:04 +0100
                Re: Spam? label Alan Wrigley <spamhater@keepyourfilthyspamtoyourself.co.uk> - 2012-09-15 13:41 +0100
                Re: Spam? label Alan Wrigley <spamhater@keepyourfilthyspamtoyourself.co.uk> - 2012-09-15 13:56 +0100
                Re: Spam? label Stuart <Spambin@argonet.co.uk> - 2012-09-15 17:56 +0100
                Re: Spam? label Steve Fryatt <news@stevefryatt.org.uk> - 2012-09-15 20:53 +0100
                Re: Spam? label Stuart <Spambin@argonet.co.uk> - 2012-09-15 21:23 +0100
                Re: Spam? label Stuart <Spambin@argonet.co.uk> - 2012-09-14 23:06 +0100
                Re: Spam? label spampling <spam.pling@btinternet.com> - 2012-09-16 08:44 +0100
                Re: Spam? label Russell Hafter News <see.sig@walkingingermany.invalid> - 2012-09-14 18:39 +0100
                Re: Spam? label Alan Wrigley <spamhater@keepyourfilthyspamtoyourself.co.uk> - 2012-09-15 13:49 +0100
                Re: Spam? label Stuart <Spambin@argonet.co.uk> - 2012-09-14 19:02 +0100
                Re: Spam? label Russell Hafter News <see.sig@walkingingermany.invalid> - 2012-09-14 20:05 +0100
                Re: Spam? label Stuart <Spambin@argonet.co.uk> - 2012-09-14 20:26 +0100
                Re: Spam? label Russell Hafter News <see.sig@walkingingermany.invalid> - 2012-09-14 20:49 +0100
                Re: Spam? label Neil Spellings <neil@spellings.net> - 2012-09-14 19:12 +0100
                Re: Spam? label Russell Hafter News <see.sig@walkingingermany.invalid> - 2012-09-14 16:23 +0100
                Re: Spam? label Alan Wrigley <spamhater@keepyourfilthyspamtoyourself.co.uk> - 2012-09-14 16:46 +0100
                Re: Spam? label Neil Spellings <neil@spellings.net> - 2012-09-14 19:18 +0100
                Re: Spam? label druck <news@druck.org.uk> - 2012-09-14 19:38 +0100
                Re: Spam? label Jeremy Nicoll - news posts <jn.nntp.scrap007@wingsandbeaks.org.uk> - 2012-09-16 16:43 +0100
  Re: Spam? label Paul Sprangers <Paul@sprie.nl> - 2012-09-12 12:20 +0200
    Re: Spam? label Graham Jenkins <graham@gjenkins.me.uk> - 2012-09-12 15:20 +0100
      Re: Spam? label Jeremy Nicoll - news posts <jn.nntp.scrap007@wingsandbeaks.org.uk> - 2012-09-12 17:26 +0100
        Re: Spam? label Kevin Wells <kev@kevsoft.co.uk> - 2012-09-12 18:03 +0100
          Re: Spam? label Tim Hill <tim@invalid.org.uk> - 2012-09-22 17:05 +0100
  Re: Spam? label Stuart <Spambin@argonet.co.uk> - 2012-09-12 11:32 +0100
    Re: Spam? label Russell Hafter News <see.sig@walkingingermany.invalid> - 2012-09-12 12:31 +0100
      Re: Spam? label Neil Spellings <neil@spellings.net> - 2012-09-13 06:23 +0100
        Re: Spam? label Russell Hafter News <see.sig@walkingingermany.invalid> - 2012-09-13 08:40 +0100
        Re: Spam? label Russell Hafter News <see.sig@walkingingermany.invalid> - 2012-09-13 22:53 +0100
    Re: Spam? label Graham Jenkins <graham@gjenkins.me.uk> - 2012-09-12 15:15 +0100
      Re: Spam? label Jeremy Nicoll - news posts <jn.nntp.scrap007@wingsandbeaks.org.uk> - 2012-09-12 17:07 +0100
  Re: Spam? label charles <charles@charleshope.demon.co.uk> - 2012-09-12 14:43 +0100
  Re: Spam? label Jim Nagel <jimnewsm10d@abbeypress.co.uk> - 2012-09-12 15:33 +0100
    Re: Spam? label Graham Jenkins <graham@gjenkins.me.uk> - 2012-09-12 17:42 +0100
  Re: Spam? label spampling <spam.pling@btinternet.com> - 2012-09-12 17:42 +0100
    Re: Spam? label Russell Hafter News <see.sig@walkingingermany.invalid> - 2012-09-12 18:36 +0100
      Re: Spam? label Graham Jenkins <graham@gjenkins.me.uk> - 2012-09-12 19:14 +0100
        Re: Spam? label Chris Johnson <chrisjohnson+news@spamcop.net> - 2012-09-12 20:13 +0100
          Re: Spam? label Graham Jenkins <graham@gjenkins.me.uk> - 2012-09-12 20:54 +0100
            Re: Spam? label Russell Hafter News <see.sig@walkingingermany.invalid> - 2012-09-12 21:07 +0100
            Re: Spam? label Neil Spellings <neil@spellings.net> - 2012-09-13 06:49 +0100
        Re: Spam? label Steve Fryatt <news@stevefryatt.org.uk> - 2012-09-12 21:52 +0100
          Re: Spam? label Neil Spellings <neil@spellings.net> - 2012-09-13 06:27 +0100
            Re: Spam? label "Rob Hemmings (news2)" <robnews@rgvk.co.uk> - 2012-09-13 19:08 +0100
              Re: Spam? label Steve Fryatt <news@stevefryatt.org.uk> - 2012-09-13 20:54 +0100
                Re: Spam? label Russell Hafter News <see.sig@walkingingermany.invalid> - 2012-09-13 22:43 +0100
                Re: Spam? label "Rob Hemmings (news2)" <robnews@rgvk.co.uk> - 2012-09-14 12:41 +0100
              Re: Spam? label spampling <spam.pling@btinternet.com> - 2012-09-14 08:05 +0100
                Re: Spam? label Russell Hafter News <see.sig@walkingingermany.invalid> - 2012-09-14 10:07 +0100
            Re: Spam? label Steve Fryatt <news@stevefryatt.org.uk> - 2012-09-13 20:25 +0100

csiph-web