I suggest we start using [RCM] in this group in the subject
so we might the better spot ourselves.

Martin
Martin H. Eastburn
@ home at Lions' Lair with our computer lionslair at consolidated dot net
TSRA, Life; NRA LOH & Endowment Member, Golden Eagle, Patriot's Medal.
NRA Second Amendment Task Force Charter Founder
IHMSA and NRA Metallic Silhouette maker & member.
http://lufkinced.com/


Nick Mueller wrote:
Dave Hinz wrote:

Might want to limit that to the Newsgroups: line.

I had a look at some of the headers of the floodings. I get them in SEJW,
not here.
They are making batches of postings and then change the headers. There is no
common pattern I can see.
The only thing that looks suspicious to me is this (in the path):
"post01.iad01". Not a valid TLD and that iad01-pattern only occurs in
nx01.iad01.newshosting.com but that is more on the *left* side of the path
and a valid URL. To me, it looks like the faked path starts left of the
post01.iad01.
The feeding part "news.suddenlink.net" on the very right and
the "X-Complaints-To: " is only a joe-job.


Nick

----== Posted via Newsfeeds.Com - Unlimited-Unrestricted-Secure Usenet News==----
http://www.newsfeeds.com The #1 Newsgroup Service in the World! 120,000+ Newsgroups
----= East and West-Coast Server Farms - Total Privacy via Encryption =----