We are getting bounces from someone who uses blueyonder.co.uk... if you know of that ISP, please contact us so we can try to prevent the thing from disrupting the list. --- James Newton, Admin #3 mailto:jamesnewton@piclist.com 1-619-652-0593 VM 1-208-279-8767 FAX PIC/PICList FAQ: http://www.piclist.com or .org -----Original Message----- From: James Newton. Admin 3 [mailto:jamesnewton@piclist.com] Sent: Wednesday, August 01, 2001 09:20 To: abuse@blueyonder.co.uk Cc: Jory Bell; Mark Willis; Mike Werner; Dale Botkin Subject: FW: Bounce Detected Someone subscribed to our mailing list is bouncing messages through your system. In the headers below, notice that one valid post is distributed by MITVMA.MIT.EDU at Tue, 31 Jul 2001 15:20:47 -0400 and is then received back from by blueyonder.co.uk on Tue, 31 Jul 2001 20:21:02 -0100 Unfortunately, our membership list shows no subscription by a member at blueyonder.co.uk and the headers do not show who the post was distributed to. Any assistance you could provide in tracking this member down so we can unsubscribe them and prevent a rash of bounced messages would be very appreciated. --- James Newton, Admin #3 mailto:jamesnewton@piclist.com 1-619-652-0593 VM 1-208-279-8767 FAX PIC/PICList FAQ: http://www.piclist.com or .org Received: from MITVMA (NJE origin SMTP@MITVMA) by MITVMA.MIT.EDU (LMail V1.2c/1.8c) with BSMTP id 8828; Wed, 1 Aug 2001 11:53:18 -0400 Received: from pcow028o.blueyonder.co.uk [195.188.53.124] by mitvma.mit.edu (IBM VM SMTP Level 320) via TCP with ESMTP ; Wed, 01 Aug 2001 11:53:17 EDT X-Warning: mitvma.mit.edu: Host pcow028o.blueyonder.co.uk claimed to be blueyonder.co.uk Received: from mail pickup service by blueyonder.co.uk with Microsoft SMTPSVC; Wed, 1 Aug 2001 16:37:28 +0100 Received: from cherry.ease.lsoft.com ([209.119.0.109]) by blueyonder.co.uk with Microsoft SMTPSVC(5.5.1877.687.68); Tue, 31 Jul 2001 20:21:02 +0100 Received: from PEAR.EASE.LSOFT.COM (209.119.0.19) by cherry.ease.lsoft.com (LSMTP for Digital Unix v1.1b) with SMTP id <7.003BD7C3@cherry.ease.lsoft.com>; Tue, 31 Jul 2001 15:20:47 -0400 Received: from MITVMA.MIT.EDU by MITVMA.MIT.EDU (LISTSERV-TCP/IP release 1.8d) with spool id 1603 for PICLIST@MITVMA.MIT.EDU; Tue, 31 Jul 2001 15:19:34 -0400 Received: from MITVMA (NJE origin SMTP@MITVMA) by MITVMA.MIT.EDU (LMail V1.2c/1.8c) with BSMTP id 6534; Tue, 31 Jul 2001 15:17:38 -0400 Received: from web4601.mail.yahoo.com [216.115.105.156] by mitvma.mit.edu (IBM VM SMTP Level 320) via TCP with SMTP ; Tue, 31 Jul 2001 15:17:37 EDT X-Comment: mitvma.mit.edu: Mail was sent by web4601.mail.yahoo.com Received: from [207.61.121.212] by web4601.mail.yahoo.com via HTTP; Tue, 31 Jul 2001 15:17:30 EDT -----Original Message----- From: James Newton [mailto:jamesnewton@piclist.com] Sent: Wednesday, August 01, 2001 09:07 To: piclist-request@mitvma.mit.edu Subject: Bounce Detected The mailbot at http://www.piclist.com/techref/mailbot.asp has detected a bounced, repeat posting from 195.188.53.124. To confirm this, check the headers at http://www.piclist.com/techref/mailbot.asp?id=in@pputioyy.imf which will be retained for 1 day. The mailbot suggests verifiying the domain of source of this bounce: http://spamcop.net/sc?action=trackhost&host=195.188.53.124 and then searching the list for members with email addresses in the suspect domain: mailto:listserv@mitvma.mit.edu?body=scan%20piclist%20pcow028o.blueyonder.co. uk and then set piclist digest for (thier email address). mailto:listserv@mitvma.mit.edu?body=set%20piclist%20digest%20for%20(name)%40 pcow028o.blueyonder.co.uk Form more info on the mailbot, email jamesnewton@geocities.com -- http://www.piclist.com hint: The list server can filter out subtopics (like ads or off topics) for you. See http://www.piclist.com/#topics