Path: utzoo!attcan!uunet!samsung!usc!ucsd!ucbvax!VAX.FTP.COM!stev
From: stev@VAX.FTP.COM (Stev Knowles)
Newsgroups: comp.protocols.tcp-ip
Subject: just when you thought it was safe . . . . .
Message-ID: <9004051831.AA00781@vax.ftp.com>
Date: 5 Apr 90 18:31:30 GMT
Sender: daemon@ucbvax.BERKELEY.EDU
Organization: The Internet
Lines: 51



would the appropiate people please fix this as soon as possible?

we have been getting SMTP connections from an increasing number of Internet 
hosts to the address 128.127.64.2 (128.127.0.0 is ftp's class B network.)

after much looking around in the DNS universe, and getting nowhere, we decided,
at some effort, to create the subnet and machine to find out what is going on.
from the mail that we recieved, we found who the addresse was, anf
from that we have found the following:


Query id 1281: 1 Questions, 1 Answers, 2 Name Servers, 3 Additional
 flags: <RESPONSE><CAN_RECURSE><DO_RECURSE>
MX (15) type Resource Record: sinet.ad.jp, class: Internet (1)
 Valid 0.91 hr (3264 sec):  MX Pref = 100, NAME: mtfuji.gw.u-tokyo.ac.jp
NS (2) type Resource Record: JP, class: Internet (1)
 Valid 143.91 hr (518063 sec):  DOMAIN NM: JP-GATE.WIDE.AD.JP
NS (2) type Resource Record: JP, class: Internet (1)
 Valid 143.91 hr (518063 sec):  DOMAIN NM: ACRUX.IS.S.U-TOKYO.AC.JP
Address (1) type Resource Record: mtfuji.gw.u-tokyo.ac.jp, class: Internet (1)
 Valid 0.91 hr (3264 sec):  Addr: 128.127.64.2
Address (1) type Resource Record: JP-GATE.WIDE.AD.JP, class: Internet (1)
 Valid 143.91 hr (518063 sec):  Addr: 133.4.1.1
Address (1) type Resource Record: ACRUX.IS.S.U-TOKYO.AC.JP, class: Internet (1)
 Valid 143.91 hr (518063 sec):  Addr: 133.11.7.185

from the above i have extracted the following useful information:

MX (15) type Resource Record: sinet.ad.jp, class: Internet (1)
 Valid 0.91 hr (3264 sec):  MX Pref = 100, NAME: mtfuji.gw.u-tokyo.ac.jp
Address (1) type Resource Record: mtfuji.gw.u-tokyo.ac.jp, class: Internet (1)
 Valid 0.91 hr (3264 sec):  Addr: 128.127.64.2




mail to the postmasters for the sites sending us mail has gone
unanswered for 2 days. now, to be honest, this isnt *really* screwing
me too much, it isnt my mail that is ending up on the wrong side of
the world. 

i am trying to get into contact with the people in japan. until then,
connectivity to sinet.ac.jp will be sent to a PC running our SMTP
package. we will be forwarding the mail messages on when it is
straightened out, but i dont have any idea how long this will take.


stev knowles
"suffering the slings and arrows of outragous fortune"