[net.news.adm] Help - defectoid postings from hplabs!

grr@cbmvax.UUCP (05/03/86)

We have recently received dozens of postings, in various groups, aparently
from an Unknown user at hplabs.  All postings contain zero lines, and also
seem to have bogus Message-ID lines, ie they look like reference lines.

Could somebody near or at hplabs look into this?  It looks like sick software,
a confused user, or a brain damaged gateway...

Sample posting:

X From caip!lll-crg!lll-lcc!well!hplabs!Unknown Fri May  2 18:40:04 EDT 1986
X Relay-Version: version B 2.10.3 4.3bsd-beta 6/6/85; site cbmvax.cbmvax.cbm.UUCP
X Path: cbmvax!caip!lll-crg!lll-lcc!well!hplabs!Unknown
X >From: Unknown@hplabs.UUCP
X Newsgroups: net.sources
X Subject: Response to <2453@brl-smoke.ARPA> <1832@cuae2.UUCP>
X Message-ID: <2453@brl-smoke.ARPA> <1832@cuae2.UUCP>
X Date: 29 Apr 86 13:18:46 GMT
X Date-Received: 2 May 86 16:24:52 GMT
X Lines: 0
X 
-- 
George Robbins - now working with,	uucp: {ihnp4|seismo|caip}!cbmvax!grr
but no way officially representing	arpa: cbmvax!grr@seismo.css.GOV
Commodore, Engineering Department	fone: 215-431-9255 (only by moonlite)

wunder@hpcea.HP (Walter R. Underwood) (05/21/86)

> / hpcea:net.news.adm / grr@cbmvax.cbm.UUCP (George Robbins) /
> 	/  3:52 pm  May  2, 1986 /
> We have recently received dozens of postings, in various groups, aparently
> from an Unknown user at hplabs.  All postings contain zero lines, and also
> seem to have bogus Message-ID lines, ie they look like reference lines.

Why yes, they do look like reference lines, don't they ...

I was teaching Notes to read the reference line and all hell broke loose.
There should be comparatively few messages with multiple message-ID's, but
most of those got out.  The zero-length messages with normal message-ID's
were mostly caught at hplabs before they went out (thanks, Greg).

Some of these messages will have a few garbage characters in the text.
These appear to have been added inside the News code.

You may delete all messages that are "From: hpcea!Unknown" (perhaps
with an at-sign address instead of the banglist, or maybe just
"Unknown").  The presence of "Unknown" in the "From:" line is the only
reliable way to tell which messages are garbage.

My apologies to the news admins across the world.

Walter Underwood
hplabs!hpcea!wunder, or wunder@hplabs.CSNET