[news.sysadmin] Duplicate articles - munged Ids and paths

root@killer.UUCP (Admin) (01/11/88)

    It came to my attention that there seemed to be an unusual number of
duplicate articles on the system. Some representative headers of these
are:

Path: killer!codas!mtune!rutgers!ucla-cs!zen!ucbvax!decvax!decwrl!pyramid!csg
From: csg@pyramid.pyramid.com (Carl S. Gutekunst)
Newsgroups: comp.arch
Subject: Re: Single/Multi Tasking position summary (was Re: Single tasking)
Message-ID: <12600@pyramid.pyramid.com>
Date: 4 Jan 88 17:00:34 GMT
References: <60@amelia.nas.nasa.gov> <2428@encore.UUCP>
Reply-To: csg@pyramid.UUCP (Carl S. Gutekunst)
Organization: Pyramid Technology Corp., Mountain View, CA
Lines: 27

Path: killer!codas!mtune!rutgers!mit-eddie!uw-beaver!tikal!hplsla!hpubvwa!pyramid!csg
From: csg@pyramid
Newsgroups: comp.arch
Subject: Re: Single/Multi Tasking position summary (was Re: Single tasking)
Message-ID: <12600@pyramid>
Date: 4 Jan 88 16:00:00 GMT
References: <60@amelia>
Lines: 27

Path: killer!codas!mtune!rutgers!husc6!bu-cs!keast
From: keast@bu-cs.BU.EDU (Kenneth East)
Newsgroups: comp.sys.ibm.pc
Subject: Need spec. for DB9 to DB25 converter
Message-ID: <18200@bu-cs.BU.EDU>
Date: 4 Jan 88 19:22:49 GMT
Reply-To: keast@bu-cs.UUCP ()
Distribution: usa
Organization: Boston Univ. CS Dept.
Lines: 11

Path: killer!codas!mtune!rutgers!mit-eddie!uw-beaver!tikal!hplsla!hpubvwa!bu-cs!keast
From: keast@bu-cs
Newsgroups: comp.sys.ibm.pc
Subject: Need spec. for DB9 to DB25 converter
Message-ID: <18200@bu-cs>
Date: 4 Jan 88 18:22:00 GMT
Lines: 11

Path: killer!codas!mtune!mtgzz!mtuxo!homxb!ihnp4!ihlpe!dpbaudra
From: dpbaudra@ihlpe.ATT.COM (452is-Braune)
Newsgroups: comp.periphs
Subject: Re: Miniscribe 3425 with RLL?
Message-ID: <2420@ihlpe.ATT.COM>
Date: 4 Jan 88 15:55:52 GMT
References: <2429@emory.uucp>
Reply-To: dpbaudra@ihlpe.UUCP (452is-Braune,D.P.)
Organization: AT&T Bell Laboratories - Naperville, Illinois
Lines: 16

Path: killer!codas!mtune!rutgers!mit-eddie!uw-beaver!tikal!hplsla!hpubvwa!ihlpe!dpbaudra
From: dpbaudra@ihlpe
Newsgroups: comp.periphs
Subject: Re: Miniscribe 3425 with RLL?
Message-ID: <2420@ihlpe>
Date: 4 Jan 88 14:55:00 GMT
References: <2429@emory>
Lines: 16

   It appears that one of the machines in the following paths are doing this.
It seems unlikely that rutgers is the problem as many articles without the
path alterations have come through there.

Path: rutgers!mit-eddie!uw-beaver!tikal!hplsla!hpubvwa
Path: rutgers!mit-eddie!uw-beaver!tikal!hplsla!hpubvwa
Path: rutgers!mit-eddie!uw-beaver!tikal!hplsla!hpubvwa

                                                 Charles Boykin
                                            {ihnp4,codas}!killer!root

boberg@ihuxv.ATT.COM (Bruce Oberg) (01/13/88)

In article <2791@killer.UUCP> root@killer.UUCP (Admin) writes:
>
>    It came to my attention that there seemed to be an unusual number of
>duplicate articles on the system. Some representative headers of these
>are:

...

>Path: killer!codas!mtune!mtgzz!mtuxo!homxb!ihnp4!ihlpe!dpbaudra
>From: dpbaudra@ihlpe.ATT.COM (452is-Braune)
>Newsgroups: comp.periphs
>Subject: Re: Miniscribe 3425 with RLL?
>Message-ID: <2420@ihlpe.ATT.COM>

...

>Path: killer!codas!mtune!rutgers!mit-eddie!uw-beaver!tikal!hplsla!hpubvwa!ihlpe!dpbaudra
>From: dpbaudra@ihlpe
>Newsgroups: comp.periphs
>Subject: Re: Miniscribe 3425 with RLL?
>Message-ID: <2420@ihlpe>


interesting... not only are the "From:" and "Message-ID:" lines
getting crapped up, but the "Path:" line as well!

the first "Path:" appears perfectly reasonable, but the second one
was hacked by someone; ihlpe does not send news to hpubvwa!

i'd suspect tikal, hplsla or hpubvwa...

bruce oberg
..!ihnp4!ihuxv!boberg