Fergies "friends"

Fri Dec 16 16:08:00 UTC 2005

Is this personal or just a creative way of sending spam?

It could have been anybody hitting the "send this article to a friend" button.

Nevertheless, you might be able to find the guys ip, if he really angers you.

Maybe his boss is on the list too :)

Cheers
Peter and Karin

=======================================

Received: from tribuneinteractive.com (s89.tribuneinteractive.com [12.130.90.37])
         by fiji.merit.edu (Postfix) with ESMTP id 856EA18B4
         for <nanog at merit.edu>; Fri, 16 Dec 2005 02:26:54 -0500 (EST)

Received: from s79 (s79.rc.trb [192.168.120.78])
         by tribuneinteractive.com (8.12.10/8.12.8) with ESMTP id jBG7Qs6E017130
         for <nanog at merit.edu>; Thu, 15 Dec 2005 23:26:54 -0800 (PST)

Message-ID: <17556548.1134718014005.JavaMail.turbine at s79>

Received: from tribuneinteractive.com (s89.tribuneinteractive.com [12.130.90.37])
           by fiji.merit.edu (Postfix) with ESMTP id 93DD617D6
           for <nanog at merit.edu>; Fri, 16 Dec 2005 02:24:28 -0500 (EST)

Received: from s79 (s79.rc.trb [192.168.120.78])
           by tribuneinteractive.com (8.12.10/8.12.8) with ESMTP id jBG7OR6E017004
           for <nanog at merit.edu>; Thu, 15 Dec 2005 23:24:27 -0800 (PST)

Message-ID: <32577964.1134717867400.JavaMail.turbine at s79>

Received: from tribuneinteractive.com (s89.tribuneinteractive.com [12.130.90.37])
           by fiji.merit.edu (Postfix) with ESMTP id E4F3A17D6
           for <nanog at merit.edu>; Fri, 16 Dec 2005 02:26:32 -0500 (EST)

Received: from s79 (s79.rc.trb [192.168.120.78])
           by tribuneinteractive.com (8.12.10/8.12.8) with ESMTP id jBG7QW6E017114
           for <nanog at merit.edu>; Thu, 15 Dec 2005 23:26:32 -0800 (PST)

Message-ID: <15230846.1134717992333.JavaMail.turbine at s79>

The admin of

; <<>> DiG 9.1.3 <<>> -t any s89.tribuneinteractive.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 22482
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 4

;; QUESTION SECTION:
;s89.tribuneinteractive.com.    IN      ANY

;; ANSWER SECTION:
s89.tribuneinteractive.com. 300 IN      A       12.130.90.37

;; AUTHORITY SECTION:
tribuneinteractive.com. 300     IN      NS      chisun2.tribune.com.
tribuneinteractive.com. 300     IN      NS      latsun6.tribune.com.
tribuneinteractive.com. 300     IN      NS      ns-east.cerf.net.
tribuneinteractive.com. 300     IN      NS      ns-west.cerf.net.

;; ADDITIONAL SECTION:
chisun2.tribune.com.    170593  IN      A       163.192.1.10
latsun6.tribune.com.    170593  IN      A       144.142.2.6
ns-east.cerf.net.       170593  IN      A       207.252.96.3
ns-west.cerf.net.       170593  IN      A       192.153.156.3

;; Query time: 513 msec
;; SERVER: 192.168.48.228#53(192.168.48.228)
;; WHEN: Fri Dec 16 17:01:41 2005
;; MSG SIZE  rcvd: 228

and of

; <<>> DiG 9.1.3 <<>> -t any s79.tribuneinteractive.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11428
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;s79.tribuneinteractive.com.    IN      ANY

;; AUTHORITY SECTION:
tribuneinteractive.com. 300     IN      SOA     chisun2.tribune.com. \
                                                 tis-dnsadmin at tribune.com.
                                                 2005111701 3600 900 604800 86400

;; Query time: 233 msec
;; SERVER: 192.168.48.228#53(192.168.48.228)
;; WHEN: Fri Dec 16 17:04:42 2005
;; MSG SIZE  rcvd: 109

Could probably help

-- 
Peter and Karin Dambier
The Public-Root Consortium
Graeffstrasse 14
D-64646 Heppenheim
+49(6252)671-788 (Telekom)
+49(179)108-3978 (O2 Genion)
+49(6252)750-308 (VoIP: sipgate.de)
mail: peter at peter-dambier.de
mail: peter at echnaton.serveftp.com
http://iason.site.voila.fr/
https://sourceforge.net/projects/iason/