rees@apollo.uucp (Jim Rees) (11/25/85)
It seems there is a notes site out there somewhere that is forging message-IDs
on orphaned responses. The two articles that I have seen this on recently
were <-24500@cernvax.UUCP> and <-88400@mcvax.UUCP>. These were duplicates
of legitimate artices <245@cernvax.UUCP> and <88400@mcvax.UUCP>. They were
generated by out of date notes software. Current notes systems do not have
the bug that causes duplicates of this type to be generated.
The site generating these duplicates lies somewhere on the path
voder!nsc!pyramid!decwrl!Glacier!oliveb!hplabs!hao!ICO!cernvax
The only notes sites on that path (according to "Known News Versions in use")
are ICO and hplabs.dougm@ICO.UUCP (11/27/85)
/* Written 1:39 pm Nov 25, 1985 by rees@<2a59b4b6 in ICO:net.news */
/* ---------- "Bad software polluting the net" ---------- */
The only notes sites on that path (according to "Known News Versions in use")
are ICO and hplabs.
I'll disable forwarding of notes to news until I can determine if we are the
guilty party. If we are, I won't reenable forwarding until our Ultrix
conversion next month. Our former notesfile administrator is no longer working
here and I am just now taking over and don't know the age of our notes software.
I wouldn't be surprised if ICO is the culprit.
voder!nsc!pyramid!decwrl!Glacier!oliveb!hplabs!hao!ICO!cernvax
The interesting thing here is that ICO doesn't talk to cernvax. ICO only
talks to hao and haddock. Currently we only get net.lan and net.dcom plus
locally generated articles from hao.
Doug McCallum
Interactive Systems Corp.
{hao, cbosgd, ima}!ico!dougm