dropbox?

classic Classic list List threaded Threaded
26 messages Options
12
Reply | Threaded
Open this post in threaded view
|

Re: dropbox?

Owen Densmore
Administrator
Great work, Roger!

[hidden email] is hosted at joyent.com, not hostgo.

My DNS is managed by DNSMadeEasy, I use it to forward all my incoming email (MX records) to Postini for spam management which then forwards to my joyent email .. but I doubt this has anything to do with the problem.  You can see the filtering in the long headers as psmtp.com entries.

    -- Owen


On Jan 3, 2011, at 2:20 PM, Roger Critchlow wrote:

The IP address that the x-spam-report lists as blacklisted [209.86.89.62 listed in list.dnswl.org] maps to elasmtp-dupuy.atl.sa.earthlink.net which doesn't have any relationship to anything that Owen sent.  Ah, but it is one of smtp servers that Nick's email client uses, it shows up in the headers as the recipient of email from NicksPC.  So Nick's earthlink mail sender is/was blacklisted at dnswl.org, but earthlink probably fixed that as fast as they could.

I've looked at headers for several messages, I don't see the x-spam-report in any, where were they?  Only in messages from Nick delivered to Owen?  Owen, does hostgo.com host the mailbox for backspaces.net?  They might only insert the x-spam-report into mail being delivered to locally hosted mailboxes.  The headers appear in most recently inserted first order, so if the x-spam-report appears close to the final delivery, it's probably only in your copies. 

The SiteAdvisor warning is probably unrelated to the x-spam-report that Owen is seeing.  SiteAdvisor is saying that McAffee has friam.org (or the IP address that DNS lookup returned for friam.org) in a list of hazardous sites, not to be confused with a list of sites that are spam generators.  

Seeing nothing strange at friam.org according to my DNS lookup, I would wonder if Nick's DNS has been pwned.  That is, despite the paranoia which we've instilled in Nick, he still managed to install a trojan that has hijacked the DNS services on his machine to redirect him to more bad sites.

-- rec --

On Mon, Jan 3, 2011 at 11:59 AM, Nicholas Thompson <[hidden email]> wrote:

Isn’t it the sort of header that would trigger such a response in mcafee?

 
 
 

From: [hidden email] [mailto:[hidden email]] On Behalf Of Owen Densmore
Sent: Monday, January 03, 2011 10:56 AM


To: The Friday Morning Applied Complexity Coffee Group
Subject: Re: [FRIAM] dropbox?

 



McAfee SiteAdvisor Warning

 

This e-mail message contains potentially unsafe links to these sites:

<img border="0" width="18" height="18" src="x-msg://288/?ui=2&amp;ik=c71e37a661&amp;view=att&amp;th=12d4d403c274fa2c&amp;attid=0.0.1&amp;disp=emb&amp;zw">

friam.org

 
 

Looking at the long headers, I still see the hostgo tag warning:

                                                   X-Spam-Report:      Spam detection software, running on the system "milan.hostgo.com", has identified this incoming email as possible spam. The original message has been attached to this so you can view it (if it isn't spam) or label similar future email.  If you have any questions, see the administrator of that system for details. Content preview: Off topic: The warning only appears only on FRIAM messages and it appears on all of them. Is there anything about FRIAM that the list-owner should be attending to? [...]  Content analysis details:   (-2.2 points, 5.0 required) pts rule name              description ---- ---------------------- -------------------------------------------------- -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, low trust [209.86.89.62 listed in list.dnswl.org] -0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay domain -1.9 BAYES_00               BODY: Bayes spam probability is 0 to 1% [score: 0.0000] -0.3 AWL AWL: From: address is in the auto white-list

 

But I'm not sure that would rase the warning you see.

 

    -- Owen


On Jan 2, 2011, at 8:41 PM, Nicholas Thompson wrote:


Off topic:

The warning only appears only on FRIAM messages and it appears on all of
them.  

Is there anything about FRIAM that the list-owner should be attending to? 

N

-----Original Message-----
From: [hidden email] [mailto:[hidden email]] On Behalf
Of Owen Densmore
Sent: Sunday, January 02, 2011 6:54 PM
To: The Friday Morning Applied Complexity Coffee Group; SFx Discuss
Subject: Re: [FRIAM] dropbox?

            McAfee SiteAdvisor Warning

            This e-mail message contains potentially unsafe links to these
sites:
            friam.org

I've started to use dropbox and it seems a real winner!  I really like the
way it combines a remote disk along with local sync'ed folders.

Would anyone who doesn't have a dropbox account yet be willing to sign up as
a referral? 
            https://www.dropbox.com/referrals

If you want to start an account, let me refer you first, and we'll BOTH get
250MB more .. up to a limit of 8GB.  Just send me an email, I'll fill the
form above, and we'll both get a larger account.

   -- Owen



============================================================
FRIAM Applied Complexity Group listserv
Meets Fridays 9a-11:30 at cafe at St. John's College lectures, archives,
unsubscribe, maps at http://www.friam.org


============================================================
FRIAM Applied Complexity Group listserv
Meets Fridays 9a-11:30 at cafe at St. John's College
lectures, archives, unsubscribe, maps at http://www.friam.org

 

============================================================
FRIAM Applied Complexity Group listserv
Meets Fridays 9a-11:30 at cafe at St. John's College
lectures, archives, unsubscribe, maps at http://www.friam.org

============================================================
FRIAM Applied Complexity Group listserv
Meets Fridays 9a-11:30 at cafe at St. John's College
lectures, archives, unsubscribe, maps at http://www.friam.org


============================================================
FRIAM Applied Complexity Group listserv
Meets Fridays 9a-11:30 at cafe at St. John's College
lectures, archives, unsubscribe, maps at http://www.friam.org
Reply | Threaded
Open this post in threaded view
|

Re: dropbox?

Roger Critchlow-2
The problem with friam.org is probably that it uses a cross-site frame to load its content from redfish.com, SiteAdvisor approves of redfish.com and a handful of other hand built sites that I know.

-- rec --

On Mon, Jan 3, 2011 at 4:53 PM, Owen Densmore <[hidden email]> wrote:
Great work, Roger!

[hidden email] is hosted at joyent.com, not hostgo.

My DNS is managed by DNSMadeEasy, I use it to forward all my incoming email (MX records) to Postini for spam management which then forwards to my joyent email .. but I doubt this has anything to do with the problem.  You can see the filtering in the long headers as psmtp.com entries.

    -- Owen


On Jan 3, 2011, at 2:20 PM, Roger Critchlow wrote:

The IP address that the x-spam-report lists as blacklisted [209.86.89.62 listed in list.dnswl.org] maps to elasmtp-dupuy.atl.sa.earthlink.net which doesn't have any relationship to anything that Owen sent.  Ah, but it is one of smtp servers that Nick's email client uses, it shows up in the headers as the recipient of email from NicksPC.  So Nick's earthlink mail sender is/was blacklisted at dnswl.org, but earthlink probably fixed that as fast as they could.

I've looked at headers for several messages, I don't see the x-spam-report in any, where were they?  Only in messages from Nick delivered to Owen?  Owen, does hostgo.com host the mailbox for backspaces.net?  They might only insert the x-spam-report into mail being delivered to locally hosted mailboxes.  The headers appear in most recently inserted first order, so if the x-spam-report appears close to the final delivery, it's probably only in your copies. 

The SiteAdvisor warning is probably unrelated to the x-spam-report that Owen is seeing.  SiteAdvisor is saying that McAffee has friam.org (or the IP address that DNS lookup returned for friam.org) in a list of hazardous sites, not to be confused with a list of sites that are spam generators.  

Seeing nothing strange at friam.org according to my DNS lookup, I would wonder if Nick's DNS has been pwned.  That is, despite the paranoia which we've instilled in Nick, he still managed to install a trojan that has hijacked the DNS services on his machine to redirect him to more bad sites.

-- rec --

On Mon, Jan 3, 2011 at 11:59 AM, Nicholas Thompson <[hidden email]> wrote:

Isn’t it the sort of header that would trigger such a response in mcafee?

 
 
 

From: [hidden email] [mailto:[hidden email]] On Behalf Of Owen Densmore
Sent: Monday, January 03, 2011 10:56 AM


To: The Friday Morning Applied Complexity Coffee Group
Subject: Re: [FRIAM] dropbox?

 



McAfee SiteAdvisor Warning

 

This e-mail message contains potentially unsafe links to these sites:

friam.org

 
 

Looking at the long headers, I still see the hostgo tag warning:

                                                   X-Spam-Report:      Spam detection software, running on the system "milan.hostgo.com", has identified this incoming email as possible spam. The original message has been attached to this so you can view it (if it isn't spam) or label similar future email.  If you have any questions, see the administrator of that system for details. Content preview: Off topic: The warning only appears only on FRIAM messages and it appears on all of them. Is there anything about FRIAM that the list-owner should be attending to? [...]  Content analysis details:   (-2.2 points, 5.0 required) pts rule name              description ---- ---------------------- -------------------------------------------------- -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, low trust [209.86.89.62 listed in list.dnswl.org] -0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay domain -1.9 BAYES_00               BODY: Bayes spam probability is 0 to 1% [score: 0.0000] -0.3 AWL AWL: From: address is in the auto white-list

 

But I'm not sure that would rase the warning you see.

 

    -- Owen


On Jan 2, 2011, at 8:41 PM, Nicholas Thompson wrote:


Off topic:

The warning only appears only on FRIAM messages and it appears on all of
them.  

Is there anything about FRIAM that the list-owner should be attending to? 

N

-----Original Message-----
From: [hidden email] [mailto:[hidden email]] On Behalf
Of Owen Densmore
Sent: Sunday, January 02, 2011 6:54 PM
To: The Friday Morning Applied Complexity Coffee Group; SFx Discuss
Subject: Re: [FRIAM] dropbox?

            McAfee SiteAdvisor Warning

            This e-mail message contains potentially unsafe links to these
sites:
            friam.org

I've started to use dropbox and it seems a real winner!  I really like the
way it combines a remote disk along with local sync'ed folders.

Would anyone who doesn't have a dropbox account yet be willing to sign up as
a referral? 
            https://www.dropbox.com/referrals

If you want to start an account, let me refer you first, and we'll BOTH get
250MB more .. up to a limit of 8GB.  Just send me an email, I'll fill the
form above, and we'll both get a larger account.

   -- Owen



============================================================
FRIAM Applied Complexity Group listserv
Meets Fridays 9a-11:30 at cafe at St. John's College lectures, archives,
unsubscribe, maps at http://www.friam.org


============================================================
FRIAM Applied Complexity Group listserv
Meets Fridays 9a-11:30 at cafe at St. John's College
lectures, archives, unsubscribe, maps at http://www.friam.org

 

============================================================
FRIAM Applied Complexity Group listserv
Meets Fridays 9a-11:30 at cafe at St. John's College
lectures, archives, unsubscribe, maps at http://www.friam.org

============================================================
FRIAM Applied Complexity Group listserv
Meets Fridays 9a-11:30 at cafe at St. John's College
lectures, archives, unsubscribe, maps at http://www.friam.org


============================================================
FRIAM Applied Complexity Group listserv
Meets Fridays 9a-11:30 at cafe at St. John's College
lectures, archives, unsubscribe, maps at http://www.friam.org


============================================================
FRIAM Applied Complexity Group listserv
Meets Fridays 9a-11:30 at cafe at St. John's College
lectures, archives, unsubscribe, maps at http://www.friam.org
Reply | Threaded
Open this post in threaded view
|

Re: dropbox?

Owen Densmore
Administrator
Bingo!  You nailed it.  It appears that hostgo makes secondary domains be implemented as frames:

friam.org looks like:
<frame src="http://www.redfish.com/friam" scrolling="auto" frameborder="no" border="0" noresize="">

I've seen DNS services make this a choice for subdomains.  The usual choice is to use subdirs == subdomains .. i.e. ~/www/ == the main domain, foo.com.  Then ~/www/bar/ == bar.foo.com.  What's odd is that hostgo implements it in the html, rather than in apache mapping.

    -- Owen


On Jan 3, 2011, at 5:28 PM, Roger Critchlow wrote:

The problem with friam.org is probably that it uses a cross-site frame to load its content from redfish.com, SiteAdvisor approves of redfish.com and a handful of other hand built sites that I know.

-- rec --

On Mon, Jan 3, 2011 at 4:53 PM, Owen Densmore <[hidden email]> wrote:
Great work, Roger!

[hidden email] is hosted at joyent.com, not hostgo.

My DNS is managed by DNSMadeEasy, I use it to forward all my incoming email (MX records) to Postini for spam management which then forwards to my joyent email .. but I doubt this has anything to do with the problem.  You can see the filtering in the long headers as psmtp.com entries.

    -- Owen


On Jan 3, 2011, at 2:20 PM, Roger Critchlow wrote:

The IP address that the x-spam-report lists as blacklisted [209.86.89.62 listed in list.dnswl.org] maps to elasmtp-dupuy.atl.sa.earthlink.net which doesn't have any relationship to anything that Owen sent.  Ah, but it is one of smtp servers that Nick's email client uses, it shows up in the headers as the recipient of email from NicksPC.  So Nick's earthlink mail sender is/was blacklisted at dnswl.org, but earthlink probably fixed that as fast as they could.

I've looked at headers for several messages, I don't see the x-spam-report in any, where were they?  Only in messages from Nick delivered to Owen?  Owen, does hostgo.com host the mailbox for backspaces.net?  They might only insert the x-spam-report into mail being delivered to locally hosted mailboxes.  The headers appear in most recently inserted first order, so if the x-spam-report appears close to the final delivery, it's probably only in your copies. 

The SiteAdvisor warning is probably unrelated to the x-spam-report that Owen is seeing.  SiteAdvisor is saying that McAffee has friam.org (or the IP address that DNS lookup returned for friam.org) in a list of hazardous sites, not to be confused with a list of sites that are spam generators.  

Seeing nothing strange at friam.org according to my DNS lookup, I would wonder if Nick's DNS has been pwned.  That is, despite the paranoia which we've instilled in Nick, he still managed to install a trojan that has hijacked the DNS services on his machine to redirect him to more bad sites.

-- rec --

On Mon, Jan 3, 2011 at 11:59 AM, Nicholas Thompson <[hidden email]> wrote:

Isn’t it the sort of header that would trigger such a response in mcafee?

 
 
 

From: [hidden email] [mailto:[hidden email]] On Behalf Of Owen Densmore
Sent: Monday, January 03, 2011 10:56 AM


To: The Friday Morning Applied Complexity Coffee Group
Subject: Re: [FRIAM] dropbox?

 



McAfee SiteAdvisor Warning

 

This e-mail message contains potentially unsafe links to these sites:

friam.org

 
 

Looking at the long headers, I still see the hostgo tag warning:

                                                   X-Spam-Report:      Spam detection software, running on the system "milan.hostgo.com", has identified this incoming email as possible spam. The original message has been attached to this so you can view it (if it isn't spam) or label similar future email.  If you have any questions, see the administrator of that system for details. Content preview: Off topic: The warning only appears only on FRIAM messages and it appears on all of them. Is there anything about FRIAM that the list-owner should be attending to? [...]  Content analysis details:   (-2.2 points, 5.0 required) pts rule name              description ---- ---------------------- -------------------------------------------------- -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, low trust [209.86.89.62 listed in list.dnswl.org] -0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay domain -1.9 BAYES_00               BODY: Bayes spam probability is 0 to 1% [score: 0.0000] -0.3 AWL AWL: From: address is in the auto white-list

 

But I'm not sure that would rase the warning you see.

 

    -- Owen


On Jan 2, 2011, at 8:41 PM, Nicholas Thompson wrote:


Off topic:

The warning only appears only on FRIAM messages and it appears on all of
them.  

Is there anything about FRIAM that the list-owner should be attending to? 

N

-----Original Message-----
From: [hidden email] [mailto:[hidden email]] On Behalf
Of Owen Densmore
Sent: Sunday, January 02, 2011 6:54 PM
To: The Friday Morning Applied Complexity Coffee Group; SFx Discuss
Subject: Re: [FRIAM] dropbox?

            McAfee SiteAdvisor Warning

            This e-mail message contains potentially unsafe links to these
sites:
            friam.org

I've started to use dropbox and it seems a real winner!  I really like the
way it combines a remote disk along with local sync'ed folders.

Would anyone who doesn't have a dropbox account yet be willing to sign up as
a referral? 
            https://www.dropbox.com/referrals

If you want to start an account, let me refer you first, and we'll BOTH get
250MB more .. up to a limit of 8GB.  Just send me an email, I'll fill the
form above, and we'll both get a larger account.

   -- Owen



============================================================
FRIAM Applied Complexity Group listserv
Meets Fridays 9a-11:30 at cafe at St. John's College lectures, archives,
unsubscribe, maps at http://www.friam.org


============================================================
FRIAM Applied Complexity Group listserv
Meets Fridays 9a-11:30 at cafe at St. John's College
lectures, archives, unsubscribe, maps at http://www.friam.org

 

============================================================
FRIAM Applied Complexity Group listserv
Meets Fridays 9a-11:30 at cafe at St. John's College
lectures, archives, unsubscribe, maps at http://www.friam.org

============================================================
FRIAM Applied Complexity Group listserv
Meets Fridays 9a-11:30 at cafe at St. John's College
lectures, archives, unsubscribe, maps at http://www.friam.org


============================================================
FRIAM Applied Complexity Group listserv
Meets Fridays 9a-11:30 at cafe at St. John's College
lectures, archives, unsubscribe, maps at http://www.friam.org

============================================================
FRIAM Applied Complexity Group listserv
Meets Fridays 9a-11:30 at cafe at St. John's College
lectures, archives, unsubscribe, maps at http://www.friam.org


============================================================
FRIAM Applied Complexity Group listserv
Meets Fridays 9a-11:30 at cafe at St. John's College
lectures, archives, unsubscribe, maps at http://www.friam.org
Reply | Threaded
Open this post in threaded view
|

Re: dropbox?

Nick Thompson
In reply to this post by Roger Critchlow-2

Roger,

 

Can you tell me, in non technical language, why site-advisor would have a problem with such a situation. 

 

I have to confess it’s just idle curiosity, so if too much work, don’t bother.

 

Nick

 

From: [hidden email] [mailto:[hidden email]] On Behalf Of Roger Critchlow
Sent: Monday, January 03, 2011 5:28 PM
To: The Friday Morning Applied Complexity Coffee Group
Subject: Re: [FRIAM] dropbox?

 



McAfee SiteAdvisor Warning

 

This e-mail message contains potentially unsafe links to these sites:

friam.org

 

 

The problem with friam.org is probably that it uses a cross-site frame to load its content from redfish.com, SiteAdvisor approves of redfish.com and a handful of other hand built sites that I know.

 

-- rec --

On Mon, Jan 3, 2011 at 4:53 PM, Owen Densmore <[hidden email]> wrote:

Great work, Roger!

 

[hidden email] is hosted at joyent.com, not hostgo.

 

My DNS is managed by DNSMadeEasy, I use it to forward all my incoming email (MX records) to Postini for spam management which then forwards to my joyent email .. but I doubt this has anything to do with the problem.  You can see the filtering in the long headers as psmtp.com entries.

 

    -- Owen

 

 

On Jan 3, 2011, at 2:20 PM, Roger Critchlow wrote:



The IP address that the x-spam-report lists as blacklisted [209.86.89.62 listed in list.dnswl.org] maps to elasmtp-dupuy.atl.sa.earthlink.net which doesn't have any relationship to anything that Owen sent.  Ah, but it is one of smtp servers that Nick's email client uses, it shows up in the headers as the recipient of email from NicksPC.  So Nick's earthlink mail sender is/was blacklisted at dnswl.org, but earthlink probably fixed that as fast as they could.

 

I've looked at headers for several messages, I don't see the x-spam-report in any, where were they?  Only in messages from Nick delivered to Owen?  Owen, does hostgo.com host the mailbox for backspaces.net?  They might only insert the x-spam-report into mail being delivered to locally hosted mailboxes.  The headers appear in most recently inserted first order, so if the x-spam-report appears close to the final delivery, it's probably only in your copies. 

 

The SiteAdvisor warning is probably unrelated to the x-spam-report that Owen is seeing.  SiteAdvisor is saying that McAffee has friam.org (or the IP address that DNS lookup returned for friam.org) in a list of hazardous sites, not to be confused with a list of sites that are spam generators.  

 

Seeing nothing strange at friam.org according to my DNS lookup, I would wonder if Nick's DNS has been pwned.  That is, despite the paranoia which we've instilled in Nick, he still managed to install a trojan that has hijacked the DNS services on his machine to redirect him to more bad sites.

 

-- rec --

 

On Mon, Jan 3, 2011 at 11:59 AM, Nicholas Thompson <[hidden email]> wrote:

Isn’t it the sort of header that would trigger such a response in mcafee?

 

 

 

From: [hidden email] [mailto:[hidden email]] On Behalf Of Owen Densmore
Sent: Monday, January 03, 2011 10:56 AM


To: The Friday Morning Applied Complexity Coffee Group

Subject: Re: [FRIAM] dropbox?

 

 

McAfee SiteAdvisor Warning

 

This e-mail message contains potentially unsafe links to these sites:

friam.org

Looking at the long headers, I still see the hostgo tag warning:

                                                   X-Spam-Report:      Spam detection software, running on the system "milan.hostgo.com", has identified this incoming email as possible spam. The original message has been attached to this so you can view it (if it isn't spam) or label similar future email.  If you have any questions, see the administrator of that system for details. Content preview: Off topic: The warning only appears only on FRIAM messages and it appears on all of them. Is there anything about FRIAM that the list-owner should be attending to? [...]  Content analysis details:   (-2.2 points, 5.0 required) pts rule name              description ---- ---------------------- -------------------------------------------------- -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, low trust [209.86.89.62 listed in list.dnswl.org] -0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay domain -1.9 BAYES_00               BODY: Bayes spam probability is 0 to 1% [score: 0.0000] -0.3 AWL AWL: From: address is in the auto white-list


On Jan 2, 2011, at 8:41 PM, Nicholas Thompson wrote:

Off topic:

The warning only appears only on FRIAM messages and it appears on all of
them.  

Is there anything about FRIAM that the list-owner should be attending to? 

N

-----Original Message-----
From: friam-bounces@... [mailto:friam-bounces@...] On Behalf
Of Owen Densmore
Sent: Sunday, January 02, 2011 6:54 PM
To: The Friday Morning Applied Complexity Coffee Group; SFx Discuss
Subject: Re: [FRIAM] dropbox?

            McAfee SiteAdvisor Warning

            This e-mail message contains potentially unsafe links to these
sites:
            friam.org

I've started to use dropbox and it seems a real winner!  I really like the
way it combines a remote disk along with local sync'ed folders.

Would anyone who doesn't have a dropbox account yet be willing to sign up as
a referral? 
            https://www.dropbox.com/referrals

If you want to start an account, let me refer you first, and we'll BOTH get
250MB more .. up to a limit of 8GB.  Just send me an email, I'll fill the
form above, and we'll both get a larger account.

   -- Owen



============================================================
FRIAM Applied Complexity Group listserv
Meets Fridays 9a-11:30 at cafe at St. John's College lectures, archives,
unsubscribe, maps at http://www.friam.org


============================================================
FRIAM Applied Complexity Group listserv
Meets Fridays 9a-11:30 at cafe at St. John's College
lectures, archives, unsubscribe, maps at http://www.friam.org


============================================================
FRIAM Applied Complexity Group listserv
Meets Fridays 9a-11:30 at cafe at St. John's College
lectures, archives, unsubscribe, maps at http://www.friam.org

 

============================================================
FRIAM Applied Complexity Group listserv
Meets Fridays 9a-11:30 at cafe at St. John's College
lectures, archives, unsubscribe, maps at http://www.friam.org

 


============================================================
FRIAM Applied Complexity Group listserv
Meets Fridays 9a-11:30 at cafe at St. John's College
lectures, archives, unsubscribe, maps at http://www.friam.org

 


============================================================
FRIAM Applied Complexity Group listserv
Meets Fridays 9a-11:30 at cafe at St. John's College
lectures, archives, unsubscribe, maps at http://www.friam.org
Reply | Threaded
Open this post in threaded view
|

Re: dropbox?

Roger Critchlow-2
I'm only guessing, but a website that hosts only 9 lines of html and gets all its content by embedding a page from another website is probably a common spam pattern.  Buy a hundred domains that misspell a high volume web destination, pack the embedded frame with juicy ads, maybe get enough click through to make a living.

-- rec --

On Mon, Jan 3, 2011 at 9:27 PM, Nicholas Thompson <[hidden email]> wrote:

Roger,

 

Can you tell me, in non technical language, why site-advisor would have a problem with such a situation. 

 

I have to confess it’s just idle curiosity, so if too much work, don’t bother.

 

Nick

 

From: [hidden email] [mailto:[hidden email]] On Behalf Of Roger Critchlow
Sent: Monday, January 03, 2011 5:28 PM


To: The Friday Morning Applied Complexity Coffee Group
Subject: Re: [FRIAM] dropbox?

 



McAfee SiteAdvisor Warning

 

This e-mail message contains potentially unsafe links to these sites:

friam.org

 

 

The problem with friam.org is probably that it uses a cross-site frame to load its content from redfish.com, SiteAdvisor approves of redfish.com and a handful of other hand built sites that I know.

 

-- rec --

On Mon, Jan 3, 2011 at 4:53 PM, Owen Densmore <[hidden email]> wrote:

Great work, Roger!

 

[hidden email] is hosted at joyent.com, not hostgo.

 

My DNS is managed by DNSMadeEasy, I use it to forward all my incoming email (MX records) to Postini for spam management which then forwards to my joyent email .. but I doubt this has anything to do with the problem.  You can see the filtering in the long headers as psmtp.com entries.

 

    -- Owen

 

 

On Jan 3, 2011, at 2:20 PM, Roger Critchlow wrote:



The IP address that the x-spam-report lists as blacklisted [209.86.89.62 listed in list.dnswl.org] maps to elasmtp-dupuy.atl.sa.earthlink.net which doesn't have any relationship to anything that Owen sent.  Ah, but it is one of smtp servers that Nick's email client uses, it shows up in the headers as the recipient of email from NicksPC.  So Nick's earthlink mail sender is/was blacklisted at dnswl.org, but earthlink probably fixed that as fast as they could.

 

I've looked at headers for several messages, I don't see the x-spam-report in any, where were they?  Only in messages from Nick delivered to Owen?  Owen, does hostgo.com host the mailbox for backspaces.net?  They might only insert the x-spam-report into mail being delivered to locally hosted mailboxes.  The headers appear in most recently inserted first order, so if the x-spam-report appears close to the final delivery, it's probably only in your copies. 

 

The SiteAdvisor warning is probably unrelated to the x-spam-report that Owen is seeing.  SiteAdvisor is saying that McAffee has friam.org (or the IP address that DNS lookup returned for friam.org) in a list of hazardous sites, not to be confused with a list of sites that are spam generators.  

 

Seeing nothing strange at friam.org according to my DNS lookup, I would wonder if Nick's DNS has been pwned.  That is, despite the paranoia which we've instilled in Nick, he still managed to install a trojan that has hijacked the DNS services on his machine to redirect him to more bad sites.

 

-- rec --

 

On Mon, Jan 3, 2011 at 11:59 AM, Nicholas Thompson <[hidden email]> wrote:

Isn’t it the sort of header that would trigger such a response in mcafee?

 

 

 

From: [hidden email] [mailto:[hidden email]] On Behalf Of Owen Densmore
Sent: Monday, January 03, 2011 10:56 AM


To: The Friday Morning Applied Complexity Coffee Group

Subject: Re: [FRIAM] dropbox?

 

 

McAfee SiteAdvisor Warning

 

This e-mail message contains potentially unsafe links to these sites:

friam.org

Looking at the long headers, I still see the hostgo tag warning:

                                                   X-Spam-Report:      Spam detection software, running on the system "milan.hostgo.com", has identified this incoming email as possible spam. The original message has been attached to this so you can view it (if it isn't spam) or label similar future email.  If you have any questions, see the administrator of that system for details. Content preview: Off topic: The warning only appears only on FRIAM messages and it appears on all of them. Is there anything about FRIAM that the list-owner should be attending to? [...]  Content analysis details:   (-2.2 points, 5.0 required) pts rule name              description ---- ---------------------- -------------------------------------------------- -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, low trust [209.86.89.62 listed in list.dnswl.org] -0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay domain -1.9 BAYES_00               BODY: Bayes spam probability is 0 to 1% [score: 0.0000] -0.3 AWL AWL: From: address is in the auto white-list


On Jan 2, 2011, at 8:41 PM, Nicholas Thompson wrote:

Off topic:

The warning only appears only on FRIAM messages and it appears on all of
them.  

Is there anything about FRIAM that the list-owner should be attending to? 

N

-----Original Message-----
From: friam-bounces@... [mailto:friam-bounces@...] On Behalf
Of Owen Densmore
Sent: Sunday, January 02, 2011 6:54 PM
To: The Friday Morning Applied Complexity Coffee Group; SFx Discuss
Subject: Re: [FRIAM] dropbox?

            McAfee SiteAdvisor Warning

            This e-mail message contains potentially unsafe links to these
sites:
            friam.org

I've started to use dropbox and it seems a real winner!  I really like the
way it combines a remote disk along with local sync'ed folders.

Would anyone who doesn't have a dropbox account yet be willing to sign up as
a referral? 
            https://www.dropbox.com/referrals

If you want to start an account, let me refer you first, and we'll BOTH get
250MB more .. up to a limit of 8GB.  Just send me an email, I'll fill the
form above, and we'll both get a larger account.

   -- Owen



============================================================
FRIAM Applied Complexity Group listserv
Meets Fridays 9a-11:30 at cafe at St. John's College lectures, archives,
unsubscribe, maps at http://www.friam.org


============================================================
FRIAM Applied Complexity Group listserv
Meets Fridays 9a-11:30 at cafe at St. John's College
lectures, archives, unsubscribe, maps at http://www.friam.org

 


============================================================
FRIAM Applied Complexity Group listserv
Meets Fridays 9a-11:30 at cafe at St. John's College
lectures, archives, unsubscribe, maps at http://www.friam.org

 

============================================================
FRIAM Applied Complexity Group listserv
Meets Fridays 9a-11:30 at cafe at St. John's College
lectures, archives, unsubscribe, maps at http://www.friam.org

 


============================================================
FRIAM Applied Complexity Group listserv
Meets Fridays 9a-11:30 at cafe at St. John's College
lectures, archives, unsubscribe, maps at http://www.friam.org

 


============================================================
FRIAM Applied Complexity Group listserv
Meets Fridays 9a-11:30 at cafe at St. John's College
lectures, archives, unsubscribe, maps at http://www.friam.org


============================================================
FRIAM Applied Complexity Group listserv
Meets Fridays 9a-11:30 at cafe at St. John's College
lectures, archives, unsubscribe, maps at http://www.friam.org
Reply | Threaded
Open this post in threaded view
|

Re: [sfx: Discuss] dropbox?

Owen Densmore
Administrator
In reply to this post by Owen Densmore
Bump!  But I thought you'd like this:  David Pogue wrote a new post, this time on Dropbox:

He raves about how well it worked with a group working on a book together.

For folks mystified about Dropbox, just read the earlier posts in this older thread.  Basically you sign up for a fee 2G account, download some software, and specify a folder on your system you want to use for Dropbox.  That's it.

The folder is exactly like any other folder on your computer (Mac,Win,Linux).  You can make new folders, add/remove/rename files or folders, and they automatically sync to your phone, your laptop, your pad/pod, desktop or server or any digital critter you may have.

When we first discussed it, I thought it was simply hype the reports were so glowing.  But nope, its true.

Now for a prod: if you send mail to either me or any friend who has dropbox,, then we can "refer" you to Dropbox, thereby giving *us both* an extra .25GB of free storage.  Yup, you will start out with an extra 250MB just for going through a friend, and your friend too will benefit.

   -- Owen

============================================================
FRIAM Applied Complexity Group listserv
Meets Fridays 9a-11:30 at cafe at St. John's College
lectures, archives, unsubscribe, maps at http://www.friam.org
12