Subject: [os2genau_digest] No. 677
From: Digest <deadmail>
To: "OS/2GenAu Digest"<deadmail>
Date: Wed, 6 Aug 2003 00:03:59 EST-10EDT,10,-1,0,7200,3,-1,0,7200,3600

**************************************************
Tuesday 05 August 2003
 Number  677
**************************************************

Subjects for today
 
1  Re:  There was a meeting? : Peter <pgc at sub dot net dot au>
2  Re:  Article on LVM and JFS : Ian Manners" <deadmail>
3   [Fwd: E-mail Hoax =?iso-8859-1?Q?=A0?= Important Security Update from : Ed Durrant <edurrant at bigpond dot net dot au>
4   =?us-ascii?q?Re:__[Fwd:_E-mail_Hoax_=FF_Important_Security_Update_from_BigPond]?= : John Angelico" <talldad at kepl dot com dot au>
5  Re:  [Fwd: E-mail Hoax ÿ Important Security Update from BigPond] : Robert Traynor  (BobT)" <rtraynor at optusnet dot com dot au>
6   =?iso-8859-1?q?Re:__[Fwd:_E-mail_Hoax_=A0_Important_Security_Update_from_BigPond]?= : Ian Manners" <deadmail>
7   =?us-ascii?q?Re:___[Fwd:_E-mail_Hoax_=FF_Important_Security_Update_from_BigPond]?= : John Angelico" <talldad at kepl dot com dot au>
8   =?ISO-8859-1?Q?Re=3A_=5Bos2genau=5D_Re=3A_=5Bos2genau=5D_?= =?ISO-8859-1?Q?=5BFwd=3A_E-mail_Hoax_=FF_Important_Security_?= =?ISO-8859-1?Q?Update_from_BigPond=5D?= : Mike O'Connor" <mikeoc at dodo dot com dot au>
9   =?ISO-8859-1?Q?Re=3A_=5Bos2genau=5D_Re=3A_=5Bos2genau=5D_?= =?ISO-8859-1?Q?Re=3A_=5Bos2genau=5D_=5BFwd=3A_E-mail_Hoax_=FF_?= =?ISO-8859-1?Q?Important_Security_Update_from_BigPond=5D?= : Mike O'Connor" <mikeoc at dodo dot com dot au>

**= Email   1 ==========================**

Date:  Tue, 05 Aug 2003 00:06:58 +1000
From:  Peter <pgc at sub dot net dot au>
Subject:  Re:  There was a meeting?

You'd call it the best piece of software  for someone who's forgetful as 
long as they REMEMBER to umrem  the commands?  lol

I think you've forgotten how not to be contradictory, Ian.  lol

Ian Manners wrote:

>Hi Peter
>
>>Fair enough.  It was a genuine mistake/oversight/whatever.
>>
>To many oversights laterly :-(
>Maybe its my age :-)
>
>>But whats a CRON?
>>
>
>A piece of software that carries out commands at a predermined date
>and time, its runs the list digest, the os2site reindexing, apache log
>rotation, weakly log file archiving for MajorMajor, Weasel, FTPServer
>etc. Saves having to go downstairs to run things so I'd call it the best
>piece of software for someone who is forgetful, as long as they remember
>to unrem the commands in the command file...
>
>Cheers
>Ian Manners
>http://www.os2site dot com/
>
>"Ever wonder if illiterate people get the full effect of alphabetsoup?"  --John Mendoza

> 

>

[attachments have been removed]
----------------------------------------------------------------------------------

**= Email   2 ==========================**

Date:  Tue, 05 Aug 2003 01:29:59 +1000 (EST)
From:  "Ian Manners" <deadmail>
Subject:  Re:  Article on LVM and JFS

Hi Mark

> Just to clarify, this and several other articles on LVM appeared first in
> the VOICE Newsletter and can be found at
> http://www.os2voice dot org/VNL/past_issues/vnlindex.html  It probably sounds
> annal, but I keep seeing articles that we had done on other sites with no
> reference at all to where they originated.  All articles in VOICE are the
> copyright of the author so sites don't need our permission, just the
> authors, but it would be nice to get a little credit for having done the
> work on editing the article.

I think you, and Voice have every right to be 'anal', the copies of
archives I keep all have links, and info re who did what etc, well,
most of it does.

And I've check my voice mag archives and lo, that is the copy I
read, should have looked there first but I came across the copy
on os2.cz while looking for some stuff on mathematics and REXX.

 Short Introduction to LVM and JFS By: Michal Necasek in
vnl1100h.zip

Cheers
Ian Manners
http://www.os2site dot com/

"meooOOW!" SPLAT! "wooOOF!" SPLAT!  (Raining Cats & Dogs)
----------------------------------------------------------------------------------

**= Email   3 ==========================**

Date:  Tue, 05 Aug 2003 07:17:33 +1000
From:  Ed Durrant <edurrant at bigpond dot net dot au>
Subject:   [Fwd: E-mail Hoax   Important Security Update from

In case anyone hasn't seen this - the mail can also be received by other
e-mail clients (including OS/2 ones) however the attachment can only do
harm in a windoze environment. 

Cheers/2
Ed.

Happy to use a non-virus prone OS/2 !

-------- Original Message --------
Subject: E-mail Hoax   Important Security Update from BigPond
Date: Mon, 4 Aug 2003 17:42:53 +1000
From: BigPond <accounts at bigpond dot com>
To: BigPond member <edurrant at bigpond dot net dot au>

Dear BigPond Member,

Telstra has been advised of a worldwide security issue that could impact
customers who do not have the latest version of Microsoft Internet
Explorer.

A new worm, a form of computer virus, has been detected in Australia. 
Known as W32/Mimail, the worm deletes anti-virus software leaving your
computer vulnerable to other viruses and intrusions.

The worm attempts to spread itself by a bogus email that appears to come
from your Internet Service Provider.  For BigPond customers, the sender
address is either 'admin at bigpond' or 'admin at bigpond dot net dot au'.  The email
subject line is 'your account' followed by random characters.

If you receive an email from 'admin at bigpond' we recommend that you do
not open it.  Delete the email immediately from your inbox and garbage
bin/deleted items folder.

The email containing the worm reads as follows:

"Hello there,
I would like to inform you about important information regarding your
email address.  This email address will be expiring.  Please read
attachment for details.

Best regards, Administrator

Attached file: message.zip"

If you open the attached file, your anti-virus software may be deleted
and your computer infected by the W32/Mimail worm.  The worm can also
attach itself to your address book and forward itself to all email
addresses as if it comes from the recipient s Internet Service Provider.

What should you do?

A free anti-virus scan that detects and removes the W32/Mimail is
available at
http://www.pandasoftware dot com 

For further information about W32/Mimail and the Internet Explorer
update provided by Microsoft, go to:
http://www.microsoft dot com/technet/security/bulletin/MS03-014.asp 
http://www.microsoft dot com/technet/security/bulletin/MS02-015.asp 

We would like to assure customers that the email containing the worm is
not sent from BigPond.  We would also like to advise customers that
BigPond does not ask you to provide personal details such as username,
password or credit card detail via email.

Leanne Wallis
General Manager
Customer Service
----------------------------------------------------------------------------------

**= Email   4 ==========================**

Date:  Tue, 05 Aug 2003 11:39:38 +1000 (AEST)
From:  "John Angelico" <talldad at kepl dot com dot au>
Subject:   =?us-ascii?q?Re:__[Fwd:_E-mail_Hoax_=FF_Important_Security_Update_from_BigPond]?=

On Tue, 05 Aug 2003 07:17:33 +1000, Ed Durrant wrote:

>In case anyone hasn't seen this - the mail can also be received by other
>e-mail clients (including OS/2 ones) however the attachment can only do
>harm in a windoze environment. 
>
>Cheers/2
>Ed.
>
>Happy to use a non-virus prone OS/2 !

Yes, Ed.

Typically, Telstra *forgets* that there are other systems than MS-Win "out
there." 

I haven't had to receive one of these as my tuxedo-clad ISP uses Linux<g>.

But I might be inclined to respond to Telstra:

"Dear T, Thanks for the advice but I don't have that problem anymore - I
use OS/2! "
or more brusquely "Been there done that, using OS/2 as a result!"

Best regards
John Angelico
OS/2 SIG
os2 at melbpc dot org dot au or 
talldad at kepl dot com dot au
___________________

PMTagline v1.50 - Copyright, 1996-1997, Stephen Berg and John Angelico
.... Failure is not an option -- it comes bundled with Windows.

PMTagline v1.50 - Copyright, 1996-1997, Stephen Berg and John Angelico
.... What we have here is a failure to communicate
----------------------------------------------------------------------------------

**= Email   5 ==========================**

Date:  Tue, 05 Aug 2003 12:17:51 +1000
From:  "Robert Traynor  (BobT)" <rtraynor at optusnet dot com dot au>
Subject:  Re:  [Fwd: E-mail Hoax ÿ Important Security Update from BigPond]

Hi John and Ed,

Sorry to rain on your parade John, but your "tuxedo-clad ISP" that 
uses Linux, allowed one of these to get through its servers to me
a few days ago..

It pretended to be from Optus Internet and had the message.html file
in an attachment.  I deleted it of course.  No problems here.

Regards,
Robert Traynor (BobT).
5 August 2003   12:16

On Tue, 05 Aug 2003 11:39:38 +1000 (AEST), John Angelico wrote:
> On Tue, 05 Aug 2003 07:17:33 +1000, Ed Durrant wrote:
> 
> >In case anyone hasn't seen this - the mail can also be received by other
> >e-mail clients (including OS/2 ones) however the attachment can only do
> >harm in a windoze environment. 
> >
> >Cheers/2
> >Ed.
> >
> >Happy to use a non-virus prone OS/2 !
> 
> Yes, Ed.
> 
> Typically, Telstra *forgets* that there are other systems than MS-Win "out
> there." 
> 
> I haven't had to receive one of these as my tuxedo-clad ISP uses Linux<g>.
> 
> But I might be inclined to respond to Telstra:
> 
> "Dear T, Thanks for the advice but I don't have that problem anymore - I
> use OS/2! "
> or more brusquely "Been there done that, using OS/2 as a result!"
> 
> 
> Best regards
> John Angelico
> OS/2 SIG
> os2 at melbpc dot org dot au or 
> talldad at kepl dot com dot au

   ,-._|\       Robert Traynor        (BobT)
 /  Oz  \      email            rtraynor at removeme.optusnet dot com dot au
 \_,--.x/ 

----------------------------------------------------------------------------------

**= Email   6 ==========================**

Date:  Tue, 05 Aug 2003 13:43:06 +1000 (EST)
From:  "Ian Manners" <deadmail>
Subject:   Re:  [Fwd: E-mail Hoax   Important Security Update from BigPond]

> In case anyone hasn't seen this - the mail can also be received by other
> e-mail clients (including OS/2 ones) however the attachment can only do
> harm in a windoze environment. 

Sigh, virus scanners :-

Your mail was not delivered to the following recipients.
xxxx at xxx.australis dot com dot au: 554 5.7.1 Message cannot be accepted, virus found
There will be no further attempts to deliver this mail.

Smart scanner OR what....
This is the result of posts just sent from this list about this email :-)

Cheers
Ian Manners
http://www.os2site dot com/

"Opportunity is missed by most people because it is dressed in overalls and  looks like work."  -- Thomas Edison
----------------------------------------------------------------------------------

**= Email   7 ==========================**

Date:  Tue, 05 Aug 2003 14:20:45 +1000 (AEST)
From:  "John Angelico" <talldad at kepl dot com dot au>
Subject:   =?us-ascii?q?Re:___[Fwd:_E-mail_Hoax_=FF_Important_Security_Update_from_BigPond]?=

On Tue, 05 Aug 2003 12:17:51 +1000, Robert Traynor  (BobT) wrote:

>Hi John and Ed,
>
>Sorry to rain on your parade John, but your "tuxedo-clad ISP" that 
>uses Linux, allowed one of these to get through its servers to me
>a few days ago..

No problems Bob.

I was ambiguous, and should have said the thing looked like a special
BigPond scam, so nothing had come via my ISP. I had not meant to imply that
Tux was immune.

>
>It pretended to be from Optus Internet and had the message.html file
>in an attachment.  I deleted it of course.  No problems here.

Now I can see it is a bit bigger than just BigPond, so I will keep my eyes
open and my finger near the delete key.

Best regards
John Angelico
OS/2 SIG
os2 at melbpc dot org dot au or 
talldad at kepl dot com dot au
___________________

PMTagline v1.50 - Copyright, 1996-1997, Stephen Berg and John Angelico
.... OS/2 VirusScan: WINDOWS detected. Delete? (Y/y)
----------------------------------------------------------------------------------

**= Email   8 ==========================**

Date:  Tue, 05 Aug 2003 16:39:40 +1000
From:  "Mike O'Connor" <mikeoc at dodo dot com dot au>
Subject:   Re: [os2genau] Re: [os2genau] [Fwd: E-mail Hoax ÿ Important Security Update from BigPond]

John Angelico wrote:

>On Tue, 05 Aug 2003 07:17:33 +1000, Ed Durrant wrote:
>  
>
>>In case anyone hasn't seen this - the mail can also be received by other
>>e-mail clients (including OS/2 ones) however the attachment can only do
>>harm in a windoze environment. 
>>
>>Cheers/2
>>Ed.
>>
>>Happy to use a non-virus prone OS/2 !
>>    
>>
>
>Yes, Ed.
>
>Typically, Telstra *forgets* that there are other systems than MS-Win "out
>there." 
>
>I haven't had to receive one of these as my tuxedo-clad ISP uses Linux<g>.
>
>But I might be inclined to respond to Telstra:
>
>"Dear T, Thanks for the advice but I don't have that problem anymore - I
>use OS/2! "
>or more brusquely "Been there done that, using OS/2 as a result!"
>
>
>Best regards
>John Angelico
>  
>

Hi John, Ed, Robert,

Here's what I sent off at 5:39 a.m. on

> Hi Tech Support [& Billing],
>
> The following e-mail  fraudulently claiming to be from 
> "admin at dodo dot com dot au" - arrived in my inbox an hour ago at 4:14 a.m. 2nd 
> August.
> Using nslookup I determined from the full headers that it actually 
> originated from " host254.elpasoelectric dot com" :
>
> OS/2      Ctrl+Esc = Window List       Type HELP = help
> [384SDRAM C:\DESKTOP]nslookup 206.57.63.254
> Server:  ns3 dot comindico dot com dot au
> Address:  203.194.27.57
>
> Name:    host254.elpasoelectric dot com
> Address:  206.57.63.254
>
>
> [384SDRAM C:\DESKTOP]
>
> The attached zipfile contains an html page with the words  "no message"!
>
> Not very funny :-(
> --------------------------------------------------
> Here arre the original headers off the message :
>
> X-UIDL: XPM"!pni"!+C`!!cO1"!
> X-Mozilla-Status: 0001
> X-Mozilla-Status2: 10000000
> Return-path: <admin at dodo dot com dot au>
> Envelope-to: mikeoc at dodo dot com dot au
> Delivery-date: Sat, 02 Aug 2003 04:14:10 +1000
> Received: from [206.57.63.254] (helo=localhost)
>     by mail.dodo dot com dot au with smtp (Exim 3.36 #3)
>     id 19iePl-0000KA-00
>     for mikeoc at dodo dot com dot au; Sat, 02 Aug 2003 04:14:09 +1000
> From: admin at dodo dot com dot au
> To: Mikeoc <mikeoc at dodo dot com dot au>
> Reply-To: admin at dodo dot com dot au
> X-Mailer: The Bat! (v1.61)
> X-Priority: 2 (High)
> Subject: your account                         rlcrowao
> MIME-Version: 1.0
> Content-Type: multipart/mixed; boundary="----------C56794AD00F904D"
> Message-Id: <E19iePl-0000KA-00 at mail.dodo dot com dot au>
> Date: Sat, 02 Aug 2003 04:14:09 +1000
> X-UIDL: XPM"!pni"!+C`!!cO1"!
>
> ------------C56794AD00F904D
> Content-Type: text/plain; charset=us-ascii
> Content-Transfer-Encoding: 7bit
>
>
> Hello there,
>
> I would like to inform you about important information regarding your
> email address. This email address will be expiring.
> Please read attachment for details.
>
> ---
> Best regards, Administrator
> rlcrowao
>
> ------------C56794AD00F904D
> Content-Type: application/x-zip-compressed; name="message.zip"
> Content-Transfer-Encoding: base64
> Content-Disposition: attachment; filename="message.zip"
>
> ----------------  Followed by the base64 MIME content -----------

-- 
Regards,
Mike

Failed the exam for
--------------------
MCSE - Minesweeper Consultant and Solitaire Expert
--------------------

[ISP blocks *.exe attachments]
[Please use zipped versions of above]

----------------------------------------------------------------------------------

**= Email   9 ==========================**

Date:  Tue, 05 Aug 2003 16:44:54 +1000
From:  "Mike O'Connor" <mikeoc at dodo dot com dot au>
Subject:   Re: [os2genau] Re: [os2genau] Re: [os2genau] [Fwd: E-mail Hoax ÿ Important Security Update from BigPond]

Mike O'Connor wrote:

> John Angelico wrote:
>
>> On Tue, 05 Aug 2003 07:17:33 +1000, Ed Durrant wrote:
>>  
>>
>>> In case anyone hasn't seen this - the mail can also be received by 
>>> other
>>> e-mail clients (including OS/2 ones) however the attachment can only do
>>> harm in a windoze environment.
>>> Cheers/2
>>> Ed.
>>>
>>> Happy to use a non-virus prone OS/2 !
>>>   
>>
>>
>> Yes, Ed.
>>
>> Typically, Telstra *forgets* that there are other systems than MS-Win 
>> "out
>> there."
>> I haven't had to receive one of these as my tuxedo-clad ISP uses 
>> Linux<g>.
>>
>> But I might be inclined to respond to Telstra:
>>
>> "Dear T, Thanks for the advice but I don't have that problem anymore - I
>> use OS/2! "
>> or more brusquely "Been there done that, using OS/2 as a result!"
>>
>>
>> Best regards
>> John Angelico
>>  
>>
>
> Hi John, Ed, Robert,
>
> Here's what I sent off at 5:39 a.m. on
>
>> Hi Tech Support [& Billing],
>>
>> The following e-mail  fraudulently claiming to be from 
>> "admin at dodo dot com dot au" - arrived in my inbox an hour ago at 4:14 a.m. 
>> 2nd August.
>> Using nslookup I determined from the full headers that it actually 
>> originated from " host254.elpasoelectric dot com" :
>>
>> OS/2      Ctrl+Esc = Window List       Type HELP = help
>> [384SDRAM C:\DESKTOP]nslookup 206.57.63.254
>> Server:  ns3 dot comindico dot com dot au
>> Address:  203.194.27.57
>>
>> Name:    host254.elpasoelectric dot com
>> Address:  206.57.63.254
>>
>>
>> [384SDRAM C:\DESKTOP]
>>
>> The attached zipfile contains an html page with the words  "no message"!
>>
>> Not very funny :-(
>> --------------------------------------------------
>> Here arre the original headers off the message :
>>
>> X-UIDL: XPM"!pni"!+C`!!cO1"!
>> X-Mozilla-Status: 0001
>> X-Mozilla-Status2: 10000000
>> Return-path: <admin at dodo dot com dot au>
>> Envelope-to: mikeoc at dodo dot com dot au
>> Delivery-date: Sat, 02 Aug 2003 04:14:10 +1000
>> Received: from [206.57.63.254] (helo=localhost)
>>     by mail.dodo dot com dot au with smtp (Exim 3.36 #3)
>>     id 19iePl-0000KA-00
>>     for mikeoc at dodo dot com dot au; Sat, 02 Aug 2003 04:14:09 +1000
>> From: admin at dodo dot com dot au
>> To: Mikeoc <mikeoc at dodo dot com dot au>
>> Reply-To: admin at dodo dot com dot au
>> X-Mailer: The Bat! (v1.61)
>> X-Priority: 2 (High)
>> Subject: your account                         rlcrowao
>> MIME-Version: 1.0
>> Content-Type: multipart/mixed; boundary="----------C56794AD00F904D"
>> Message-Id: <E19iePl-0000KA-00 at mail.dodo dot com dot au>
>> Date: Sat, 02 Aug 2003 04:14:09 +1000
>> X-UIDL: XPM"!pni"!+C`!!cO1"!
>>
>> ------------C56794AD00F904D
>> Content-Type: text/plain; charset=us-ascii
>> Content-Transfer-Encoding: 7bit
>>
>>
>> Hello there,
>>
>> I would like to inform you about important information regarding your
>> email address. This email address will be expiring.
>> Please read attachment for details.
>>
>> ---
>> Best regards, Administrator
>> rlcrowao
>>
>> ------------C56794AD00F904D
>> Content-Type: application/x-zip-compressed; name="message.zip"
>> Content-Transfer-Encoding: base64
>> Content-Disposition: attachment; filename="message.zip"
>>
>> ----------------  Followed by the base64 MIME content -----------
>
>
BTW, the response from Dodo was as follows:

>Dear Mike,
>
>Thank you for bringing this abuse to our attention, as a national service
>provider we take abuse seriously and have acted on this appropriately. 
>The abuse originated from another service provider ISP called Global
>Crossing. We have reported this problem to Global Crossing.
>
>This type of activity should not occur in the future and should you have
>any problems please feel free to contact us again.
>
>
>Regards,
>Dodo Abuse Team
>Phone: 1300 36 36 05
>E-mail: abuse at dodo dot com dot au
>Web: http://www.dodo dot com dot au
>
-- 
Regards,
Mike

Failed the exam for
--------------------
MCSE - Minesweeper Consultant and Solitaire Expert
--------------------

----------------------------------------------------------------------------------