From Fri Oct 15 12:25:53 2004 Date: Fri, 15 Oct 2004 12:25:53 -0700 (PDT) From: Postmaster Subject: Message from mail server Content-Length: 94 Mime-Version: 1.0 Status: RO X-IMAP: 1097868353 57 Delete. This is a system message. --END+PSEUDO-- From kelley@astro.berkeley.edu Fri Aug 8 10:18:07 2003 X-Unix-From: kelley@astro.berkeley.edu Fri Aug 8 10:18:07 2003 Received: from beast (beast [128.32.92.126]) by astron.Berkeley.EDU (8.11.4/8.11.4) with SMTP id h78HHVr18917 for ; Fri, 8 Aug 2003 10:17:31 -0700 (PDT) Message-Id: <200308081717.h78HHVr18917@astron.Berkeley.EDU> Date: Fri, 8 Aug 2003 10:17:30 -0700 (PDT) From: Kelley McDonald Reply-To: Kelley McDonald Subject: I am starting a "windowsusers" mailing list To: everyone@astron.Berkeley.EDU MIME-Version: 1.0 Content-Type: TEXT/plain; charset=us-ascii Content-MD5: lNgQ5mzz6D3yKurixqEdMA== X-Mailer: dtmail 1.3.0 @(#)CDE Version 1.5.3_06 SunOS 5.9 sun4u sparc Content-Length: 585 Status: RO X-Status: $$$$ X-UID: 0000000001 I would like everyone that has a windows based computer either connected to the network here (laptops, workstations, etc...) to be on this mailing list. This will be a forum to exchange info about how to use and configure a windows based computer and to keep users updated as to security issues. Please let me know if you would like to be on this list. Kelley ------------------------------------------------------ Kelley McDonald Sr. Systems Administrator Astronomy Department kelley@astro.berkeley.edu ------------------------------------------------------ From eliot@astro.berkeley.edu Fri Aug 8 10:18:56 2003 X-Unix-From: eliot@astro.berkeley.edu Fri Aug 8 10:18:56 2003 Received: from quasar.Berkeley.EDU (quasar [128.32.92.42]) by astron.Berkeley.EDU (8.11.4/8.11.4) with ESMTP id h78HIur19050 for ; Fri, 8 Aug 2003 10:18:56 -0700 (PDT) Received: from localhost (eliot@localhost) by quasar.Berkeley.EDU (8.11.7+Sun/8.11.4) with ESMTP id h78HIrF01788 for ; Fri, 8 Aug 2003 10:18:53 -0700 (PDT) Date: Fri, 8 Aug 2003 10:18:53 -0700 (PDT) From: Eliot Quataert To: Kelley McDonald Subject: Re: I am starting a "windowsusers" mailing list In-Reply-To: <200308081717.h78HHVr18917@astron.Berkeley.EDU> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 688 Status: RO X-Status: $$$$ X-UID: 0000000002 sure. for my laptop. Eliot On Fri, 8 Aug 2003, Kelley McDonald wrote: > I would like everyone that has a windows based computer > either connected to the network here (laptops, workstations, > etc...) to be on this mailing list. This will be a forum > to exchange info about how to use and configure a > windows based computer and to keep users updated as to > security issues. > > Please let me know if you would like to be on this list. > > Kelley > ------------------------------------------------------ > Kelley McDonald Sr. Systems Administrator > Astronomy Department kelley@astro.berkeley.edu > ------------------------------------------------------ > > From anatoly@astro.berkeley.edu Fri Aug 8 10:19:50 2003 X-Unix-From: anatoly@astro.berkeley.edu Fri Aug 8 10:19:50 2003 Received: from fire.Berkeley.EDU (fire [128.32.92.119]) by astron.Berkeley.EDU (8.11.4/8.11.4) with ESMTP id h78HJor19069 for ; Fri, 8 Aug 2003 10:19:50 -0700 (PDT) Received: from localhost (anatoly@localhost) by fire.Berkeley.EDU (8.11.4/8.11.4) with ESMTP id h78HJoJ12202 for ; Fri, 8 Aug 2003 10:19:50 -0700 (PDT) X-Authentication-Warning: fire.Berkeley.EDU: anatoly owned process doing -bs Date: Fri, 8 Aug 2003 10:19:50 -0700 (PDT) From: Anatoly Spitkovsky X-X-Sender: anatoly@fire To: Kelley McDonald Subject: Re: I am starting a "windowsusers" mailing list In-Reply-To: <200308081717.h78HHVr18917@astron.Berkeley.EDU> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 700 Status: RO X-Status: $$$$ X-UID: 0000000003 Hi, please put me on this list. Anatoly On Fri, 8 Aug 2003, Kelley McDonald wrote: > I would like everyone that has a windows based computer > either connected to the network here (laptops, workstations, > etc...) to be on this mailing list. This will be a forum > to exchange info about how to use and configure a > windows based computer and to keep users updated as to > security issues. > > Please let me know if you would like to be on this list. > > Kelley > ------------------------------------------------------ > Kelley McDonald Sr. Systems Administrator > Astronomy Department kelley@astro.berkeley.edu > ------------------------------------------------------ > > From mdexter@astro.berkeley.edu Fri Aug 8 10:20:00 2003 X-Unix-From: mdexter@astro.berkeley.edu Fri Aug 8 10:20:00 2003 Received: from ariel.Berkeley.EDU (ariel [128.32.92.31]) by astron.Berkeley.EDU (8.11.4/8.11.4) with ESMTP id h78HK0r19078 for ; Fri, 8 Aug 2003 10:20:00 -0700 (PDT) Received: from localhost (mdexter@localhost) by ariel.Berkeley.EDU (8.11.7+Sun/8.11.4) with ESMTP id h78HJxM00531 for ; Fri, 8 Aug 2003 10:19:59 -0700 (PDT) X-Authentication-Warning: ariel.Berkeley.EDU: mdexter owned process doing -bs Date: Fri, 8 Aug 2003 10:19:59 -0700 (PDT) From: Matt Dexter X-X-Sender: mdexter@ariel To: Kelley McDonald Subject: Re: I am starting a "windowsusers" mailing list In-Reply-To: <200308081717.h78HHVr18917@astron.Berkeley.EDU> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 733 Status: RO X-Status: $$$$ X-UID: 0000000004 Hi Kelley, Please add me to the windowsusers mailing list. Thanks, Matt On Fri, 8 Aug 2003, Kelley McDonald wrote: > I would like everyone that has a windows based computer > either connected to the network here (laptops, workstations, > etc...) to be on this mailing list. This will be a forum > to exchange info about how to use and configure a > windows based computer and to keep users updated as to > security issues. > > Please let me know if you would like to be on this list. > > Kelley > ------------------------------------------------------ > Kelley McDonald Sr. Systems Administrator > Astronomy Department kelley@astro.berkeley.edu > ------------------------------------------------------ > > From rmurray@astron.Berkeley.EDU Fri Aug 8 10:22:20 2003 Received: from galadriel.Berkeley.EDU (galadriel [128.32.92.15]) by astron.Berkeley.EDU (8.11.4/8.11.4) with ESMTP id h78HMKr19184 for ; Fri, 8 Aug 2003 10:22:20 -0700 (PDT) Received: from localhost (rmurray@localhost) by galadriel.Berkeley.EDU (8.11.4/8.11.4) with ESMTP id h78HMKl00868 for ; Fri, 8 Aug 2003 10:22:20 -0700 (PDT) X-Authentication-Warning: galadriel.Berkeley.EDU: rmurray owned process doing -bs Date: Fri, 8 Aug 2003 10:22:20 -0700 (PDT) From: Ruth Murray X-Sender: rmurray@galadriel To: Kelley McDonald Subject: Re: I am starting a "windowsusers" mailing list In-Reply-To: <200308081717.h78HHVr18917@astron.Berkeley.EDU> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 825 Status: RO X-Status: $$$$ X-UID: 0000000005 Kelley, I'd like to be on the list since I have a laptop that I'll be using for talks that might need to interact with the network at some point. Thanks, Ruth On Fri, 8 Aug 2003, Kelley McDonald wrote: > I would like everyone that has a windows based computer > either connected to the network here (laptops, workstations, > etc...) to be on this mailing list. This will be a forum > to exchange info about how to use and configure a > windows based computer and to keep users updated as to > security issues. > > Please let me know if you would like to be on this list. > > Kelley > ------------------------------------------------------ > Kelley McDonald Sr. Systems Administrator > Astronomy Department kelley@astro.berkeley.edu > ------------------------------------------------------ > > From sstanimi@astron.Berkeley.EDU Fri Aug 8 10:28:59 2003 Received: from creek.Berkeley.EDU (creek [128.32.92.3]) by astron.Berkeley.EDU (8.11.4/8.11.4) with ESMTP id h78HSxr19596 for ; Fri, 8 Aug 2003 10:28:59 -0700 (PDT) Received: from localhost (sstanimi@localhost) by creek.Berkeley.EDU (8.11.4/8.11.4) with ESMTP id h78HSxU08627 for ; Fri, 8 Aug 2003 10:28:59 -0700 (PDT) X-Authentication-Warning: creek.Berkeley.EDU: sstanimi owned process doing -bs Date: Fri, 8 Aug 2003 10:28:59 -0700 (PDT) From: Snezana Stanimirovic X-X-Sender: sstanimi@creek To: Kelley McDonald Subject: Re: I am starting a "windowsusers" mailing list In-Reply-To: <200308081717.h78HHVr18917@astron.Berkeley.EDU> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 714 Status: RO X-Status: $$$$ X-UID: 0000000006 Hi Kelley, I would like to be on that list! Snezana On Fri, 8 Aug 2003, Kelley McDonald wrote: > I would like everyone that has a windows based computer > either connected to the network here (laptops, workstations, > etc...) to be on this mailing list. This will be a forum > to exchange info about how to use and configure a > windows based computer and to keep users updated as to > security issues. > > Please let me know if you would like to be on this list. > > Kelley > ------------------------------------------------------ > Kelley McDonald Sr. Systems Administrator > Astronomy Department kelley@astro.berkeley.edu > ------------------------------------------------------ > > From cmckee@astron.Berkeley.EDU Fri Aug 8 10:29:37 2003 Received: from dharma.Berkeley.EDU (dharma [128.32.92.90]) by astron.Berkeley.EDU (8.11.4/8.11.4) with ESMTP id h78HTbr19698 for ; Fri, 8 Aug 2003 10:29:37 -0700 (PDT) From: "Christopher F. McKee" Received: (from cmckee@localhost) by dharma.Berkeley.EDU (8.11.4/8.11.4) id h78HTbH15425 for kelley@astro.berkeley.edu; Fri, 8 Aug 2003 10:29:37 -0700 (PDT) Date: Fri, 8 Aug 2003 10:29:37 -0700 (PDT) Message-Id: <200308081729.h78HTbH15425@dharma.Berkeley.EDU> To: kelley@astron.Berkeley.EDU Subject: Re: I am starting a "windowsusers" mailing list X-Sun-Charset: US-ASCII Content-Length: 1283 Status: RO X-Status: $$$$ X-UID: 0000000007 Kelley, I have a Mac at home that so far does not have Windows on it. I would like to buy Windows. Can I do that through the department, or do I have to go through the Scholars Workstation? Or is it covered by a department license? Once I get the windows system, please put me on the list if it is appropriate for Mac owners. Thanks, Chris > From kelley@astron.Berkeley.EDU Fri Aug 8 10:18:07 2003 > Date: Fri, 8 Aug 2003 10:17:30 -0700 (PDT) > From: Kelley McDonald > Subject: I am starting a "windowsusers" mailing list > To: everyone@astron.Berkeley.EDU > MIME-Version: 1.0 > Content-MD5: lNgQ5mzz6D3yKurixqEdMA== > > I would like everyone that has a windows based computer > either connected to the network here (laptops, workstations, > etc...) to be on this mailing list. This will be a forum > to exchange info about how to use and configure a > windows based computer and to keep users updated as to > security issues. > > Please let me know if you would like to be on this list. > > Kelley > ------------------------------------------------------ > Kelley McDonald Sr. Systems Administrator > Astronomy Department kelley@astro.berkeley.edu > ------------------------------------------------------ > > From navarrin@astron.Berkeley.EDU Fri Aug 8 10:31:25 2003 Received: from ral.Berkeley.EDU (ral [128.32.92.83]) by astron.Berkeley.EDU (8.11.4/8.11.4) with ESMTP id h78HVPr19871 for ; Fri, 8 Aug 2003 10:31:25 -0700 (PDT) Received: from localhost (navarrin@localhost) by ral.Berkeley.EDU (8.11.4/8.11.4) with ESMTP id h78HVOd22612 for ; Fri, 8 Aug 2003 10:31:24 -0700 (PDT) X-Authentication-Warning: ral.Berkeley.EDU: navarrin owned process doing -bs Date: Fri, 8 Aug 2003 10:31:23 -0700 (PDT) From: Alessandro Navarrini X-X-Sender: navarrin@ral To: Kelley McDonald Subject: Re: I am starting a "windowsusers" mailing list In-Reply-To: <200308081717.h78HHVr18917@astron.Berkeley.EDU> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 308 Status: RO X-Status: $$$$ X-UID: 0000000008 I would like to be on the list. Alessandro -------------------------------------------- Navarrini Alessandro RAL (Radio Astronomy Lab) 601 Campbell Hall Berkeley CA 94720-3411 USA Office: N. 415; Phone: (001) (510) 642 6839 email: navarrin@astro.berkeley.edu -------------------------------------------- From alex@astron.Berkeley.EDU Fri Aug 8 10:32:30 2003 Received: from wormhole.Berkeley.EDU (wormhole [128.32.92.127]) by astron.Berkeley.EDU (8.11.4/8.11.4) with ESMTP id h78HWUr19895 for ; Fri, 8 Aug 2003 10:32:30 -0700 (PDT) From: Alex Filippenko Received: (from alex@localhost) by wormhole.Berkeley.EDU (8.11.4/8.11.4) id h78HWUo11396 for kelley@astro.berkeley.edu; Fri, 8 Aug 2003 10:32:30 -0700 (PDT) Date: Fri, 8 Aug 2003 10:32:30 -0700 (PDT) Message-Id: <200308081732.h78HWUo11396@wormhole.Berkeley.EDU> To: kelley@astron.Berkeley.EDU Subject: Re: I am starting a "windowsusers" mailing list Content-Length: 41 Status: RO X-Status: $$$$ X-UID: 0000000009 put me on the list, please. thanks. alex From gmarcy@astron.Berkeley.EDU Fri Aug 8 10:32:47 2003 Received: from etoile.Berkeley.EDU (etoile [128.32.92.247]) by astron.Berkeley.EDU (8.11.4/8.11.4) with ESMTP id h78HWkr19899 for ; Fri, 8 Aug 2003 10:32:46 -0700 (PDT) From: geoff marcy 417 Received: (from gmarcy@localhost) by etoile.Berkeley.EDU (8.11.4/8.11.4) id h78HWRF29954 for kelley@astro.berkeley.edu; Fri, 8 Aug 2003 10:32:27 -0700 (PDT) Date: Fri, 8 Aug 2003 10:32:27 -0700 (PDT) Message-Id: <200308081732.h78HWRF29954@etoile.Berkeley.EDU> To: kelley@astron.Berkeley.EDU Subject: Re: I am starting a "windowsusers" mailing list X-Sun-Charset: US-ASCII Content-Length: 1003 Status: RO X-Status: $$$$ X-UID: 0000000010 HI Kelley, Please put me on the windows list. Geoff > From kelley@astron.Berkeley.EDU Fri Aug 8 10:18:25 2003 > Date: Fri, 8 Aug 2003 10:17:30 -0700 (PDT) > From: Kelley McDonald > Subject: I am starting a "windowsusers" mailing list > To: everyone@astron.Berkeley.EDU > MIME-Version: 1.0 > Content-MD5: lNgQ5mzz6D3yKurixqEdMA== > > I would like everyone that has a windows based computer > either connected to the network here (laptops, workstations, > etc...) to be on this mailing list. This will be a forum > to exchange info about how to use and configure a > windows based computer and to keep users updated as to > security issues. > > Please let me know if you would like to be on this list. > > Kelley > ------------------------------------------------------ > Kelley McDonald Sr. Systems Administrator > Astronomy Department kelley@astro.berkeley.edu > ------------------------------------------------------ > From ddeboer@smtp.seti.org Fri Aug 8 10:33:09 2003 Received: from smtp.seti.org (smtp.seti.org [208.253.214.143]) by astron.Berkeley.EDU (8.11.4/8.11.4) with ESMTP id h78HX8r19910 for ; Fri, 8 Aug 2003 10:33:08 -0700 (PDT) Received: from smtp.seti.org (smtp.seti.org [208.253.214.143]) by smtp.seti.org (8.12.9/8.12.8) with ESMTP id h78HXG3j017447 for ; Fri, 8 Aug 2003 10:33:16 -0700 (PDT) Date: Fri, 8 Aug 2003 10:33:16 -0700 (PDT) From: Dave DeBoer To: Kelley McDonald Subject: Re: I am starting a "windowsusers" mailing list In-Reply-To: <200308081717.h78HHVr18917@astron.Berkeley.EDU> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 896 Status: RO X-Status: $$$$ X-UID: 0000000011 Guilty ;-) _______________ David R. DeBoer Project Manager, Allen Telescope Array SETI Institute UC Berkeley Radio Astronomy Lab ddeboer@seti.org (510)643-2329 _______________ On Fri, 8 Aug 2003, Kelley McDonald wrote: > I would like everyone that has a windows based computer > either connected to the network here (laptops, workstations, > etc...) to be on this mailing list. This will be a forum > to exchange info about how to use and configure a > windows based computer and to keep users updated as to > security issues. > > Please let me know if you would like to be on this list. > > Kelley > ------------------------------------------------------ > Kelley McDonald Sr. Systems Administrator > Astronomy Department kelley@astro.berkeley.edu > ------------------------------------------------------ > From gbower@astron.Berkeley.EDU Fri Aug 8 10:36:13 2003 Received: from astron.berkeley.edu (palan [128.32.92.23]) by astron.Berkeley.EDU (8.11.4/8.11.4) with ESMTP id h78HaDr20026 for ; Fri, 8 Aug 2003 10:36:13 -0700 (PDT) Message-Id: <200308081736.h78HaDr20026@astron.Berkeley.EDU> X-Mailer: exmh version 2.2 06/23/2000 with nmh-1.0.4 To: Kelley McDonald Subject: Re: I am starting a "windowsusers" mailing list In-Reply-To: Your message of "Fri, 08 Aug 2003 10:17:30 PDT." <200308081717.h78HHVr18917@astron.Berkeley.EDU> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Date: Fri, 08 Aug 2003 10:36:12 -0700 From: Geoffrey Bower Content-Length: 405 Status: RO X-Status: $$$$ X-UID: 0000000012 add me to windowsusers ------------------------------------------------------------------------------- Geoffrey C. Bower gbower@astro.berkeley.edu 601 Campbell Hall Tel: +1 510 642 4075 Radio Astronomy Lab Fax: +1 510 642 3411 UC Berkeley Web: http://astro.berkeley.edu/~gbower Berkeley CA 94720 USA ------------------------------------------------------------------------------- From susie@hcro.berkeley.edu Fri Aug 8 10:44:48 2003 Received: from hcro.berkeley.edu (hcro.org [65.241.164.10]) by astron.Berkeley.EDU (8.11.4/8.11.4) with ESMTP id h78Hilr20306 for ; Fri, 8 Aug 2003 10:44:47 -0700 (PDT) Received: from SUSIE_RAL0SLJ.hcro.berkeley.edu (visitor5 [10.10.10.55]) by hcro.berkeley.edu (Postfix) with ESMTP id F032A1DD10 for ; Fri, 8 Aug 2003 17:44:47 +0000 (GMT) Message-Id: <5.2.1.1.2.20030808104116.00acbcc8@mail.hcro.org> X-Sender: susie@mail.hcro.org X-Mailer: QUALCOMM Windows Eudora Version 5.2.1 Date: Fri, 08 Aug 2003 10:42:18 -0700 To: Kelley McDonald From: Susie Jorgensen Subject: Re: I am starting a "windowsusers" mailing list In-Reply-To: <200308081717.h78HHVr18917@astron.Berkeley.EDU> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; format=flowed Content-Length: 710 Status: RO X-Status: $$$$ X-UID: 0000000013 Kelley, You can count me in: susie@hcro.berkeley.edu ~ Susie Jorgensen At 10:17 AM 8/8/2003 -0700, you wrote: >I would like everyone that has a windows based computer >either connected to the network here (laptops, workstations, >etc...) to be on this mailing list. This will be a forum >to exchange info about how to use and configure a >windows based computer and to keep users updated as to >security issues. > >Please let me know if you would like to be on this list. > >Kelley >------------------------------------------------------ >Kelley McDonald Sr. Systems Administrator >Astronomy Department kelley@astro.berkeley.edu >------------------------------------------------------ From danw@sunspot.ssl.berkeley.edu Fri Aug 8 10:52:26 2003 Received: from sunspot.ssl.berkeley.edu (sunspot.SSL.Berkeley.EDU [128.32.147.25]) by astron.Berkeley.EDU (8.11.4/8.11.4) with ESMTP id h78HqQr20500 for ; Fri, 8 Aug 2003 10:52:26 -0700 (PDT) Received: from dyson.ssl.berkeley.edu (dyson.ssl.berkeley.edu [128.32.18.168]) by sunspot.ssl.berkeley.edu (8.12.9+Sun/8.12.7) with SMTP id h78Hpr2K002284 for ; Fri, 8 Aug 2003 10:51:54 -0700 (PDT) Message-Id: <200308081751.h78Hpr2K002284@sunspot.ssl.berkeley.edu> Date: Fri, 8 Aug 2003 10:52:20 -0700 (PDT) From: Dan Werthimer Reply-To: Dan Werthimer Subject: Re: I am starting a "windowsusers" mailing list To: kelley@astron.Berkeley.EDU MIME-Version: 1.0 Content-Type: TEXT/plain; charset=us-ascii Content-MD5: TJy6+DdCltu6mcTmEl+a4w== X-Mailer: dtmail 1.3.0 @(#)CDE Version 1.3.5 SunOS 5.7 sun4u sparc Content-Length: 1562 Status: RO X-Status: $$$$ X-UID: 0000000014 hi kelley, can you put me on your windows list? thanks, danw@ssl > X-Authentication-Warning: loki.ssl.berkeley.edu: defang set sender to using -f > Date: Fri, 8 Aug 2003 10:17:30 -0700 (PDT) > From: Kelley McDonald > Subject: I am starting a "windowsusers" mailing list > To: everyone@astron.Berkeley.EDU > MIME-Version: 1.0 > Content-MD5: lNgQ5mzz6D3yKurixqEdMA== > X-CanItPRO-Stream: setimail > X-Scanned-By: CanIt (www . canit . ca) > > I would like everyone that has a windows based computer > either connected to the network here (laptops, workstations, > etc...) to be on this mailing list. This will be a forum > to exchange info about how to use and configure a > windows based computer and to keep users updated as to > security issues. > > Please let me know if you would like to be on this list. > > Kelley > ------------------------------------------------------ > Kelley McDonald Sr. Systems Administrator > Astronomy Department kelley@astro.berkeley.edu > ------------------------------------------------------ > ------------------------------------------------------- Dan Werthimer Space Sciences Laboratory SETI@home chief scientist Grizzly Peak Blvd. MS7450 SERENDIP project director University of Calfornia Berkeley, CA 94720-7450 danw@ssl.berkeley.edu phone: 510-642-6997 http://seti.berkeley.edu fax: 510-643-2624 ------------------------------------------------------- From jwaite@uclink.berkeley.edu Fri Aug 8 11:08:28 2003 Received: from lassen.berkeley.edu (lassen.Berkeley.EDU [128.32.25.102]) by astron.Berkeley.EDU (8.11.4/8.11.4) with ESMTP id h78I8Sr21046 for ; Fri, 8 Aug 2003 11:08:28 -0700 (PDT) Received: from uclink4.berkeley.edu (localhost [127.0.0.1]) by lassen.berkeley.edu (8.12.9/8.12.9) with ESMTP id h78I8SIm011834 for ; Fri, 8 Aug 2003 11:08:28 -0700 (PDT) Received: from camp465003 (camp-465-003.Berkeley.EDU [128.32.92.2]) by uclink4.berkeley.edu (8.12.9/8.12.3) with SMTP id h78I8Stk265366 for ; Fri, 8 Aug 2003 11:08:28 -0700 (PDT) Message-ID: <000701c35dd7$d417fec0$025c2080@berkeley.edu> From: "Jim Waite" To: "Kelley McDonald" References: <200308081717.h78HHVr18917@astron.Berkeley.EDU> Subject: Re: I am starting a "windowsusers" mailing list Date: Fri, 8 Aug 2003 11:06:45 -0700 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1158 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165 Content-Length: 860 Status: RO X-Status: $$$$ X-UID: 0000000015 please add me to the list Jim W ----- Original Message ----- From: "Kelley McDonald" To: Sent: Friday, August 08, 2003 10:17 AM Subject: I am starting a "windowsusers" mailing list > I would like everyone that has a windows based computer > either connected to the network here (laptops, workstations, > etc...) to be on this mailing list. This will be a forum > to exchange info about how to use and configure a > windows based computer and to keep users updated as to > security issues. > > Please let me know if you would like to be on this list. > > Kelley > ------------------------------------------------------ > Kelley McDonald Sr. Systems Administrator > Astronomy Department kelley@astro.berkeley.edu > ------------------------------------------------------ > From glassgol@astron.Berkeley.EDU Fri Aug 8 11:24:14 2003 Received: from magicbean.Berkeley.EDU (magicbean [128.32.92.103]) by astron.Berkeley.EDU (8.11.4/8.11.4) with ESMTP id h78IOEr21464 for ; Fri, 8 Aug 2003 11:24:14 -0700 (PDT) Received: from localhost (glassgol@localhost) by magicbean.Berkeley.EDU (8.11.4/8.11.4) with ESMTP id h78IOAY06405 for ; Fri, 8 Aug 2003 11:24:10 -0700 (PDT) X-Authentication-Warning: magicbean.Berkeley.EDU: glassgol owned process doing -bs Date: Fri, 8 Aug 2003 11:24:10 -0700 (PDT) From: Al Glassgold X-X-Sender: glassgol@magicbean To: Kelley McDonald Subject: Re: I am starting a "windowsusers" mailing list In-Reply-To: <200308081717.h78HHVr18917@astron.Berkeley.EDU> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 45 Status: RO X-Status: $$$$ X-UID: 0000000016 Please put me on your windowusers list. Al From Frank@Serduke.Com Fri Aug 8 11:35:18 2003 Received: from ralph.knowware.net (adsl-63-192-14-222.dsl.snfc21.pacbell.net [63.192.14.222]) by astron.Berkeley.EDU (8.11.4/8.11.4) with ESMTP id h78IZIr21750 for ; Fri, 8 Aug 2003 11:35:18 -0700 (PDT) Received: from [63.192.14.220] (adsl-63-192-14-220.dsl.snfc21.pacbell.net [63.192.14.220]) by ralph.knowware.net (8.11.6/8.11.6) with ESMTP id h78GpeI22181 for ; Fri, 8 Aug 2003 09:51:40 -0700 Mime-Version: 1.0 X-Sender: Frank@63.192.14.222 Message-Id: In-Reply-To: <200308081717.h78HHVr18917@astron.Berkeley.EDU> References: <200308081717.h78HHVr18917@astron.Berkeley.EDU> Date: Fri, 8 Aug 2003 11:35:48 -0700 To: Kelley McDonald From: Frank Serduke Subject: Re: I am starting a "windowsusers" mailing list Content-Type: text/plain; charset="us-ascii" ; format="flowed" Content-Length: 674 Status: RO X-Status: $$$$ X-UID: 0000000017 Kelly: I'd be very interested. Please sign me up. Thanks, Frank Serduke >I would like everyone that has a windows based computer >either connected to the network here (laptops, workstations, >etc...) to be on this mailing list. This will be a forum >to exchange info about how to use and configure a >windows based computer and to keep users updated as to >security issues. > >Please let me know if you would like to be on this list. > >Kelley >------------------------------------------------------ >Kelley McDonald Sr. Systems Administrator >Astronomy Department kelley@astro.berkeley.edu >------------------------------------------------------ From colby@celestial.Berkeley.EDU Fri Aug 8 12:10:39 2003 Received: from celestial.berkeley.edu (celestial [128.32.92.243]) by astron.Berkeley.EDU (8.11.4/8.11.4) with ESMTP id h78JAdr22656 for ; Fri, 8 Aug 2003 12:10:39 -0700 (PDT) Received: from localhost (colby@localhost) by celestial.berkeley.edu (8.11.4/8.11.4) with ESMTP id h78JAeL06914 for ; Fri, 8 Aug 2003 12:10:40 -0700 X-Authentication-Warning: celestial.berkeley.edu: colby owned process doing -bs Date: Fri, 8 Aug 2003 12:10:40 -0700 (PDT) From: James Colby Kraybill To: Kelley McDonald Subject: Re: I am starting a "windowsusers" mailing list In-Reply-To: <200308081717.h78HHVr18917@astron.Berkeley.EDU> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 878 Status: RO X-Status: $$$$ X-UID: 0000000018 Moi --------------------------------------------------------------------- James Colby Kraybill Radio Astronomy Laboratory colby@astro.berkeley.edu University of California, Berkeley On Fri, 8 Aug 2003, Kelley McDonald wrote: > I would like everyone that has a windows based computer > either connected to the network here (laptops, workstations, > etc...) to be on this mailing list. This will be a forum > to exchange info about how to use and configure a > windows based computer and to keep users updated as to > security issues. > > Please let me know if you would like to be on this list. > > Kelley > ------------------------------------------------------ > Kelley McDonald Sr. Systems Administrator > Astronomy Department kelley@astro.berkeley.edu > ------------------------------------------------------ > From efields@uclink.berkeley.edu Fri Aug 8 12:23:00 2003 Received: from lassen.berkeley.edu (lassen.Berkeley.EDU [128.32.25.102]) by astron.Berkeley.EDU (8.11.4/8.11.4) with ESMTP id h78JN0r22862 for ; Fri, 8 Aug 2003 12:23:00 -0700 (PDT) Received: from uclink4.berkeley.edu (localhost [127.0.0.1]) by lassen.berkeley.edu (8.12.9/8.12.9) with ESMTP id h78JMxIm012462 for ; Fri, 8 Aug 2003 12:22:59 -0700 (PDT) Received: from edfields.uclink.berkeley.edu (mercury.Berkeley.EDU [128.32.92.133]) by uclink4.berkeley.edu (8.12.9/8.12.3) with ESMTP id h78JMxtl046916 for ; Fri, 8 Aug 2003 12:22:59 -0700 (PDT) Message-Id: <5.1.0.14.2.20030808122240.02279fa0@uclink.berkeley.edu> X-Sender: efields@uclink.berkeley.edu X-Mailer: QUALCOMM Windows Eudora Version 5.1 Date: Fri, 08 Aug 2003 12:23:07 -0700 To: Kelley McDonald From: Edward Fields Subject: Re: I am starting a "windowsusers" mailing list In-Reply-To: <200308081717.h78HHVr18917@astron.Berkeley.EDU> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; format=flowed Content-Length: 647 Status: RO X-Status: $$$$ X-UID: 0000000019 Yes! Ed At 10:17 AM 8/8/2003 -0700, you wrote: >I would like everyone that has a windows based computer >either connected to the network here (laptops, workstations, >etc...) to be on this mailing list. This will be a forum >to exchange info about how to use and configure a >windows based computer and to keep users updated as to >security issues. > >Please let me know if you would like to be on this list. > >Kelley >------------------------------------------------------ >Kelley McDonald Sr. Systems Administrator >Astronomy Department kelley@astro.berkeley.edu >------------------------------------------------------ From basri@astron.Berkeley.EDU Fri Aug 8 15:59:32 2003 Received: from soleil.Berkeley.EDU (soleil [128.32.92.195]) by astron.Berkeley.EDU (8.11.4/8.11.4) with ESMTP id h78MxVr29874 for ; Fri, 8 Aug 2003 15:59:31 -0700 (PDT) From: "Gibor Basri * Astronomy Dept. * 510-642-8198" Received: (from basri@localhost) by soleil.Berkeley.EDU (8.11.7+Sun/8.11.4) id h78MxR200511 for kelley@astro.berkeley.edu; Fri, 8 Aug 2003 15:59:27 -0700 (PDT) Date: Fri, 8 Aug 2003 15:59:27 -0700 (PDT) Message-Id: <200308082259.h78MxR200511@soleil.Berkeley.EDU> To: kelley@astron.Berkeley.EDU Subject: Re: I am starting a "windowsusers" mailing list X-Sun-Charset: US-ASCII Content-Length: 117 Status: RO X-Status: $$$$ X-UID: 0000000020 I log onto our system from a PC at home (through cable modem), so if that is what you had in mind, sign me up. Gibor From welch@astron.Berkeley.EDU Fri Aug 8 16:12:55 2003 Received: from jack.Berkeley.EDU (jack [128.32.92.26]) by astron.Berkeley.EDU (8.11.4/8.11.4) with ESMTP id h78NCtr00260 for ; Fri, 8 Aug 2003 16:12:55 -0700 (PDT) From: jack welch Received: (from welch@localhost) by jack.Berkeley.EDU (8.11.7+Sun/8.11.4) id h78NCo601101 for kelley@astro.berkeley.edu; Fri, 8 Aug 2003 16:12:50 -0700 (PDT) Date: Fri, 8 Aug 2003 16:12:50 -0700 (PDT) Message-Id: <200308082312.h78NCo601101@jack.Berkeley.EDU> To: kelley@astron.Berkeley.EDU Subject: Re: I am starting a "windowsusers" mailing list X-Sun-Charset: US-ASCII Content-Length: 64 Status: RO X-Status: $$$$ X-UID: 0000000021 Please include me. I have a laptop running Windows. Jack From lugten@astron.Berkeley.EDU Fri Aug 8 17:35:21 2003 Received: from mjolnor.Berkeley.EDU (mjolnor [128.32.92.88]) by astron.Berkeley.EDU (8.11.4/8.11.4) with ESMTP id h790ZLr02555 for ; Fri, 8 Aug 2003 17:35:21 -0700 (PDT) Received: from localhost (lugten@localhost) by mjolnor.Berkeley.EDU (8.11.4/8.11.4) with ESMTP id h790ZKZ03077 for ; Fri, 8 Aug 2003 17:35:20 -0700 (PDT) X-Authentication-Warning: mjolnor.Berkeley.EDU: lugten owned process doing -bs Date: Fri, 8 Aug 2003 17:35:19 -0700 (PDT) From: john lugten 441 X-X-Sender: lugten@mjolnor To: Kelley McDonald Subject: Re: I am starting a "windowsusers" mailing list In-Reply-To: <200308081717.h78HHVr18917@astron.Berkeley.EDU> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 165 Status: RO X-Status: $$$$ X-UID: 0000000022 Kelley, My machine "song" is windows based. It is always connected the local net, but is left powered off 95% of the time. Please put me on your list. John From agilbert@astron.Berkeley.EDU Sat Aug 9 00:17:17 2003 Received: from tzab.Berkeley.EDU (tzab [128.32.92.39]) by astron.Berkeley.EDU (8.11.4/8.11.4) with ESMTP id h797HHr08893 for ; Sat, 9 Aug 2003 00:17:17 -0700 (PDT) Received: from localhost (agilbert@localhost) by tzab.Berkeley.EDU (8.11.4/8.11.4) with ESMTP id h797HIc00956 for ; Sat, 9 Aug 2003 00:17:18 -0700 (PDT) X-Authentication-Warning: tzab.Berkeley.EDU: agilbert owned process doing -bs Date: Sat, 9 Aug 2003 00:17:17 -0700 (PDT) From: Andrea Gilbert X-X-Sender: agilbert@tzab To: Kelley McDonald Subject: Re: I am starting a "windowsusers" mailing list In-Reply-To: <200308081717.h78HHVr18917@astron.Berkeley.EDU> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 320 Status: RO X-Status: $$$$ X-UID: 0000000023 Hi Kelley, I wouldn't mind being on that list, as I still have a windows/linux laptop over here, and any extra hints might help as the support folks are very busy. Similar network concerns probably apply. agilbert@mpe.mpg.de might be the better address. Thanks! How's life in Berkeley? I am melting here. Andrea From girmay@astron.berkeley.edu Sat Aug 9 00:47:45 2003 Received: from diglab1 (lsanca2-ar30-4-3-124-095.lsanca2.dsl-verizon.net [4.3.124.95]) by astron.Berkeley.EDU (8.11.4/8.11.4) with SMTP id h797lir09143 for ; Sat, 9 Aug 2003 00:47:44 -0700 (PDT) Message-ID: <003001c35e4c$d9c46c80$5f7c0304@diglab1> From: "girmay-keleta" To: "Kelley McDonald" References: <200308081717.h78HHVr18917@astron.Berkeley.EDU> Subject: Re: I am starting a "windowsusers" mailing list Date: Sat, 9 Aug 2003 01:04:25 -0700 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1106 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 Content-Length: 845 Status: RO X-Status: $$$$ X-UID: 0000000024 yes. thanks, gk ----- Original Message ----- From: "Kelley McDonald" To: Sent: Friday, August 08, 2003 10:17 AM Subject: I am starting a "windowsusers" mailing list > I would like everyone that has a windows based computer > either connected to the network here (laptops, workstations, > etc...) to be on this mailing list. This will be a forum > to exchange info about how to use and configure a > windows based computer and to keep users updated as to > security issues. > > Please let me know if you would like to be on this list. > > Kelley > ------------------------------------------------------ > Kelley McDonald Sr. Systems Administrator > Astronomy Department kelley@astro.berkeley.edu > ------------------------------------------------------ > > From imke@astron.Berkeley.EDU Sat Aug 9 08:34:43 2003 Received: from floris.Berkeley.EDU (floris [128.32.92.25]) by astron.Berkeley.EDU (8.11.4/8.11.4) with ESMTP id h79FYgr12867 for ; Sat, 9 Aug 2003 08:34:42 -0700 (PDT) From: Imke de Pater Received: (from imke@localhost) by floris.Berkeley.EDU (8.11.4/8.11.4) id h79FYe206664 for kelley@astro.berkeley.edu; Sat, 9 Aug 2003 08:34:40 -0700 (PDT) Date: Sat, 9 Aug 2003 08:34:40 -0700 (PDT) Message-Id: <200308091534.h79FYe206664@floris.Berkeley.EDU> To: kelley@astron.Berkeley.EDU Subject: Re: I am starting a "windowsusers" mailing list X-Sun-Charset: US-ASCII Content-Length: 975 Status: RO X-Status: $$$$ X-UID: 0000000025 Yes, sure, add me to the mailing list. Imke > From kelley@astron.Berkeley.EDU Fri Aug 8 10:18:07 2003 > Date: Fri, 8 Aug 2003 10:17:30 -0700 (PDT) > From: Kelley McDonald > Subject: I am starting a "windowsusers" mailing list > To: everyone@astron.Berkeley.EDU > MIME-Version: 1.0 > Content-MD5: lNgQ5mzz6D3yKurixqEdMA== > > I would like everyone that has a windows based computer > either connected to the network here (laptops, workstations, > etc...) to be on this mailing list. This will be a forum > to exchange info about how to use and configure a > windows based computer and to keep users updated as to > security issues. > > Please let me know if you would like to be on this list. > > Kelley > ------------------------------------------------------ > Kelley McDonald Sr. Systems Administrator > Astronomy Department kelley@astro.berkeley.edu > ------------------------------------------------------ > > From jamieson@astron.Berkeley.EDU Sat Aug 9 17:00:38 2003 Received: from quest.Berkeley.EDU (quest [128.32.92.140]) by astron.Berkeley.EDU (8.11.4/8.11.4) with ESMTP id h7A00cu00630 for ; Sat, 9 Aug 2003 17:00:38 -0700 (PDT) Received: from localhost (jamieson@localhost) by quest.Berkeley.EDU (8.11.4/8.11.4) with ESMTP id h7A00d615131 for ; Sat, 9 Aug 2003 17:00:39 -0700 (PDT) Date: Sat, 9 Aug 2003 17:00:38 -0700 (PDT) From: martin cohen 423 X-X-Sender: jamieson@quest To: Kelley McDonald Subject: Re: I am starting a "windowsusers" mailing list In-Reply-To: <200308081717.h78HHVr18917@astron.Berkeley.EDU> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 386 Status: RO X-Status: $$$$ X-UID: 0000000026 Hi Kelley, please include me in your windowsusers mail list. Thanks, Martin ========================================================================= Martin Cohen Office phone: 510-642-2833 Radio Astronomy Laboratory Office FAX: 510-642-3411 601 Campbell Hall University of California e-mail: mcohen@astro.berkeley.edu Berkeley, CA 94720 U.S.A. From cmckee@astron.Berkeley.EDU Sat Aug 9 10:23:35 2003 Received: from dharma.Berkeley.EDU (dharma [128.32.92.90]) by astron.Berkeley.EDU (8.11.4/8.11.4) with ESMTP id h79HNZr13625 for ; Sat, 9 Aug 2003 10:23:35 -0700 (PDT) From: "Christopher F. McKee" Received: (from cmckee@localhost) by dharma.Berkeley.EDU (8.11.4/8.11.4) id h79HNaN16536 for kelley@astro.berkeley.edu; Sat, 9 Aug 2003 10:23:36 -0700 (PDT) Date: Sat, 9 Aug 2003 10:23:36 -0700 (PDT) Message-Id: <200308091723.h79HNaN16536@dharma.Berkeley.EDU> To: kelley@astron.Berkeley.EDU Subject: Re: I am starting a "windowsusers" mailing list X-Sun-Charset: US-ASCII Content-Length: 2702 Status: RO X-Status: $$$$ X-UID: 0000000027 Kelley, I think I misspoke. What I want is Microsoft Office, with Word, Excel, etc. Please re-address that question. Thanks, Chris > From kelley@astron.Berkeley.EDU Fri Aug 8 10:32:50 2003 > Date: Fri, 8 Aug 2003 10:32:48 -0700 (PDT) > From: Kelley McDonald > Subject: Re: I am starting a "windowsusers" mailing list > To: cmckee@astron.berkeley.edu > MIME-Version: 1.0 > Content-MD5: o1YgmReOYYLPoqVPxUA/xQ== > X-Status: > X-Keywords: > X-UID: 11 > > Were you planning on getting "Virtual PC" on your mac? > I think you can get this through scholars workstation, > as for a windows license, that is separate...and we may > have a few extra windows XP licenses (one of which you > could borrow). > > And yes, you probably should be on the list, even if you > are running it under Mac OS X. > > Kelley > > >From: "Christopher F. McKee" > >Date: Fri, 8 Aug 2003 10:29:37 -0700 (PDT) > >To: kelley@astron.Berkeley.EDU > >Subject: Re: I am starting a "windowsusers" mailing list > > > >Kelley, > > > > I have a Mac at home that so far does not have > >Windows on it. I would like to buy Windows. Can I do that > >through the department, or do I have to go through > >the Scholars Workstation? Or is it covered by a department > >license? > > > > Once I get the windows system, please put me on > >the list if it is appropriate for Mac owners. > > > > Thanks, Chris > > > > > >> From kelley@astron.Berkeley.EDU Fri Aug 8 10:18:07 2003 > >> Date: Fri, 8 Aug 2003 10:17:30 -0700 (PDT) > >> From: Kelley McDonald > >> Subject: I am starting a "windowsusers" mailing list > >> To: everyone@astron.Berkeley.EDU > >> MIME-Version: 1.0 > >> Content-MD5: lNgQ5mzz6D3yKurixqEdMA== > >> > >> I would like everyone that has a windows based computer > >> either connected to the network here (laptops, workstations, > >> etc...) to be on this mailing list. This will be a forum > >> to exchange info about how to use and configure a > >> windows based computer and to keep users updated as to > >> security issues. > >> > >> Please let me know if you would like to be on this list. > >> > >> Kelley > >> ------------------------------------------------------ > >> Kelley McDonald Sr. Systems Administrator > >> Astronomy Department kelley@astro.berkeley.edu > >> ------------------------------------------------------ > >> > >> > > ------------------------------------------------------ > Kelley McDonald Sr. Systems Administrator > Astronomy Department kelley@astro.berkeley.edu > ------------------------------------------------------ > > From gorti@ism.arc.nasa.gov Mon Aug 11 10:21:34 2003 Received: from arc-relay1.arc.nasa.gov (IDENT:mirapoint@arc-relay1.arc.nasa.gov [128.102.31.194]) by astron.Berkeley.EDU (8.11.4/8.11.4) with ESMTP id h7BHLYo17058 for ; Mon, 11 Aug 2003 10:21:34 -0700 (PDT) Received: from ism.arc.nasa.gov (ism.arc.nasa.gov [143.232.123.111]) by arc-relay1.arc.nasa.gov (Mirapoint Messaging Server MOS 3.3.6-GR) with ESMTP id AAI80590; Mon, 11 Aug 2003 10:21:34 -0700 (PDT) Received: from ism (ism [143.232.123.111]) by ism.arc.nasa.gov (8.11.7+Sun/8.11.6) with SMTP id h7BHQxM25162 for ; Mon, 11 Aug 2003 10:26:59 -0700 (PDT) Message-Id: <200308111726.h7BHQxM25162@ism.arc.nasa.gov> Date: Mon, 11 Aug 2003 10:26:59 -0700 (PDT) From: Uma Gorti Reply-To: Uma Gorti Subject: Re: I am starting a "windowsusers" mailing list To: kelley@astron.Berkeley.EDU MIME-Version: 1.0 Content-Type: TEXT/plain; charset=us-ascii Content-MD5: 8VBtEGuqyHBVrC2MCR5CYQ== X-Mailer: dtmail 1.3.0 @(#)CDE Version 1.4.2 SunOS 5.8 sun4u sparc Content-Length: 1090 Status: RO X-Status: $$$$ X-UID: 0000000028 Hi Kelley, I use a windows PC to connect to shocks from home, so would need to be on your mailing list. I am also getting a "host key changed" message when I ssh to shocks from NASA Ames. Is it ok for me to connect ? -Uma Gorti >Date: Fri, 8 Aug 2003 10:17:30 -0700 (PDT) >From: Kelley McDonald >Subject: I am starting a "windowsusers" mailing list >To: everyone@astron.Berkeley.EDU >MIME-Version: 1.0 >Content-MD5: lNgQ5mzz6D3yKurixqEdMA== > >I would like everyone that has a windows based computer >either connected to the network here (laptops, workstations, >etc...) to be on this mailing list. This will be a forum >to exchange info about how to use and configure a >windows based computer and to keep users updated as to >security issues. > >Please let me know if you would like to be on this list. > >Kelley >------------------------------------------------------ >Kelley McDonald Sr. Systems Administrator >Astronomy Department kelley@astro.berkeley.edu >------------------------------------------------------ > From cudaback@astron.Berkeley.EDU Mon Aug 11 11:49:23 2003 Received: from localhost (cudaback@localhost) by astron.Berkeley.EDU (8.11.4/8.11.4) with ESMTP id h7BInNY20356 for ; Mon, 11 Aug 2003 11:49:23 -0700 (PDT) Date: Mon, 11 Aug 2003 11:49:23 -0700 (PDT) From: David Cudaback X-X-Sender: cudaback@astron To: Kelley McDonald Subject: Re: I am starting a "windowsusers" mailing list In-Reply-To: <200308081717.h78HHVr18917@astron.Berkeley.EDU> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 896 Status: RO X-Status: $$$$ X-UID: 0000000029 YES, keep me on the mailing list! Thanks much, DDC. +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ David D. Cudaback dcudaback@astron.berkeley.edu Voice: 510-531-0757 FAX: 510-482-0353 **To the Stars** On Fri, 8 Aug 2003, Kelley McDonald wrote: > I would like everyone that has a windows based computer > either connected to the network here (laptops, workstations, > etc...) to be on this mailing list. This will be a forum > to exchange info about how to use and configure a > windows based computer and to keep users updated as to > security issues. > > Please let me know if you would like to be on this list. > > Kelley > ------------------------------------------------------ > Kelley McDonald Sr. Systems Administrator > Astronomy Department kelley@astro.berkeley.edu > ------------------------------------------------------ > > From renbin@astron.Berkeley.EDU Mon Aug 11 15:10:01 2003 Received: from orion.Berkeley.EDU (orion [128.32.92.157]) by astron.Berkeley.EDU (8.11.4/8.11.4) with ESMTP id h7BMA1o28770 for ; Mon, 11 Aug 2003 15:10:01 -0700 (PDT) Received: from localhost (renbin@localhost) by orion.Berkeley.EDU (8.11.4/8.11.4) with ESMTP id h7BMA1A05885 for ; Mon, 11 Aug 2003 15:10:01 -0700 (PDT) Date: Mon, 11 Aug 2003 15:10:00 -0700 (PDT) From: Renbin Yan To: Kelley McDonald Subject: Re: I am starting a "windowsusers" mailing list In-Reply-To: <200308081717.h78HHVr18917@astron.Berkeley.EDU> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 693 Status: RO X-Status: $$$$ X-UID: 0000000030 Please add me in. Thanks. renbin On Fri, 8 Aug 2003, Kelley McDonald wrote: > I would like everyone that has a windows based computer > either connected to the network here (laptops, workstations, > etc...) to be on this mailing list. This will be a forum > to exchange info about how to use and configure a > windows based computer and to keep users updated as to > security issues. > > Please let me know if you would like to be on this list. > > Kelley > ------------------------------------------------------ > Kelley McDonald Sr. Systems Administrator > Astronomy Department kelley@astro.berkeley.edu > ------------------------------------------------------ > > From blitz@astron.Berkeley.EDU Tue Aug 12 11:13:09 2003 Received: from hvc (hvc [128.32.92.213]) by astron.Berkeley.EDU (8.11.4/8.11.4) with ESMTP id h7CID9o22756; Tue, 12 Aug 2003 11:13:09 -0700 (PDT) Content-Type: text/plain; charset="iso-8859-1" From: leo blitz To: Kelley McDonald Subject: Re: I am starting a "windowsusers" mailing list Date: Tue, 12 Aug 2003 11:13:05 -0700 User-Agent: KMail/1.4.3 References: <200308081717.h78HHVr18917@astron.Berkeley.EDU> In-Reply-To: <200308081717.h78HHVr18917@astron.Berkeley.EDU> MIME-Version: 1.0 Message-Id: <200308121113.09007.blitz@astron.berkeley.edu> Content-Transfer-Encoding: 8bit X-MIME-Autoconverted: from quoted-printable to 8bit by astron.Berkeley.EDU id h7CID9o22756 Content-Length: 690 Status: RO X-Status: $$$$ X-UID: 0000000031 Kelley, I'll be on the list. Leo On Friday 08 August 2003 10:17, you wrote: > I would like everyone that has a windows based computer > either connected to the network here (laptops, workstations, > etc...) to be on this mailing list. This will be a forum > to exchange info about how to use and configure a > windows based computer and to keep users updated as to > security issues. > > Please let me know if you would like to be on this list. > > Kelley > ------------------------------------------------------ > Kelley McDonald Sr. Systems Administrator > Astronomy Department kelley@astro.berkeley.edu > ------------------------------------------------------ From dbacker@astron.Berkeley.EDU Tue Aug 12 13:07:55 2003 Received: from astchair.Berkeley.EDU (astchair [128.32.92.104]) by astron.Berkeley.EDU (8.11.4/8.11.4) with ESMTP id h7CK7to26288 for ; Tue, 12 Aug 2003 13:07:55 -0700 (PDT) From: don backer 415 campbell 510-642-5128 Received: (from dbacker@localhost) by astchair.Berkeley.EDU (8.11.7+Sun/8.11.4) id h7CK7pg00619 for kelley@astro.berkeley.edu; Tue, 12 Aug 2003 13:07:51 -0700 (PDT) Date: Tue, 12 Aug 2003 13:07:51 -0700 (PDT) Message-Id: <200308122007.h7CK7pg00619@astchair.Berkeley.EDU> To: kelley@astron.Berkeley.EDU Subject: Re: I am starting a "windowsusers" mailing list X-Sun-Charset: US-ASCII Content-Length: 89 Status: RO X-Status: $$$$ X-UID: 0000000032 Yes, I would like to be on the list as I occasionally log in with windows machine. Don From thelfer@astron.Berkeley.EDU Fri Aug 15 22:02:11 2003 Received: from mjolnor.Berkeley.EDU (mjolnor [128.32.92.88]) by astron.Berkeley.EDU (8.11.4/8.11.4) with ESMTP id h7G52Ao15825 for ; Fri, 15 Aug 2003 22:02:10 -0700 (PDT) Received: from localhost (thelfer@localhost) by mjolnor.Berkeley.EDU (8.11.4/8.11.4) with ESMTP id h7G529G02085 for ; Fri, 15 Aug 2003 22:02:09 -0700 (PDT) X-Authentication-Warning: mjolnor.Berkeley.EDU: thelfer owned process doing -bs Date: Fri, 15 Aug 2003 22:02:09 -0700 (PDT) From: "Tamara T. Helfer" X-X-Sender: thelfer@mjolnor To: Kelley McDonald Subject: Re: I am starting a "windowsusers" mailing list In-Reply-To: <200308081717.h78HHVr18917@astron.Berkeley.EDU> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 71 Status: RO X-Status: $$$$ X-UID: 0000000033 Hi Kelley, Please add me to the windowsusers list. Thanks, Tam From urry@astron.Berkeley.EDU Mon Aug 25 09:58:47 2003 Received: from amoeba (amoeba [128.32.92.85]) by astron.Berkeley.EDU (8.11.4/8.11.4) with SMTP id h7PGwlo02673 for ; Mon, 25 Aug 2003 09:58:47 -0700 (PDT) Message-Id: <200308251658.h7PGwlo02673@astron.Berkeley.EDU> Date: Mon, 25 Aug 2003 09:58:47 -0700 (PDT) From: lynn urry 445 Reply-To: lynn urry 445 Subject: Re: I am starting a "windowsusers" mailing list To: kelley@astron.berkeley.edu MIME-Version: 1.0 Content-Type: TEXT/plain; charset=us-ascii Content-MD5: gz7SHbm6tFn2s2gd3CPcnw== X-Mailer: dtmail 1.3.0 @(#)CDE Version 1.3.4p_5 SunOS 5.7 sun4u sparc Content-Length: 1332 Status: RO X-Status: $$$$ X-UID: 0000000034 Hi Kelley I just got back from vacation and am going over my e-mail. Put me on this Windows list. I have both a work station running Windows 2000 and a laptop running Windows XP. Lynn Urry lurry@astron.berkeley.edu > Date: Fri, 8 Aug 2003 10:17:30 -0700 (PDT) > From: Kelley McDonald > Subject: I am starting a "windowsusers" mailing list > To: everyone@astron.Berkeley.EDU > MIME-Version: 1.0 > Content-MD5: lNgQ5mzz6D3yKurixqEdMA== > > I would like everyone that has a windows based computer > either connected to the network here (laptops, workstations, > etc...) to be on this mailing list. This will be a forum > to exchange info about how to use and configure a > windows based computer and to keep users updated as to > security issues. > > Please let me know if you would like to be on this list. > > Kelley > ------------------------------------------------------ > Kelley McDonald Sr. Systems Administrator > Astronomy Department kelley@astro.berkeley.edu > ------------------------------------------------------ > *********************************************************************** "If all economists were laid end-to-end -- it would be a good thing." John Kenneth Galbraith *********************************************************************** From dbock@astron.berkeley.edu Wed Aug 27 18:42:45 2003 Received: from campbell.astro.berkeley.edu (campbell.Berkeley.EDU [128.32.92.196]) by astron.Berkeley.EDU (8.11.4/8.11.4) with ESMTP id h7S1gjo11745 for ; Wed, 27 Aug 2003 18:42:45 -0700 (PDT) Message-Id: <5.1.0.14.2.20030827192442.02d4a008@astro.berkeley.edu> X-Sender: dbock@astro.berkeley.edu X-Mailer: QUALCOMM Windows Eudora Version 5.1 Date: Wed, 27 Aug 2003 04:24:50 -0700 To: Kelley McDonald From: Douglas Bock Subject: Re: I am starting a "windowsusers" mailing list In-Reply-To: <200308081717.h78HHVr18917@astron.Berkeley.EDU> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; format=flowed Content-Length: 659 Status: RO X-Status: $$$$ X-UID: 0000000035 please put me on. Douglas At 10:17 AM 8/8/2003, you wrote: >I would like everyone that has a windows based computer >either connected to the network here (laptops, workstations, >etc...) to be on this mailing list. This will be a forum >to exchange info about how to use and configure a >windows based computer and to keep users updated as to >security issues. > >Please let me know if you would like to be on this list. > >Kelley >------------------------------------------------------ >Kelley McDonald Sr. Systems Administrator >Astronomy Department kelley@astro.berkeley.edu >------------------------------------------------------ From kelley@astron.Berkeley.EDU Thu Sep 4 15:14:44 2003 Received: from beast (beast [128.32.92.126]) by astron.Berkeley.EDU (8.11.4/8.11.4) with SMTP id h84MEho14535 for ; Thu, 4 Sep 2003 15:14:43 -0700 (PDT) Message-Id: <200309042214.h84MEho14535@astron.Berkeley.EDU> Date: Thu, 4 Sep 2003 15:14:32 -0700 (PDT) From: Kelley McDonald Reply-To: Kelley McDonald Subject: first email for group To: windowsusers@astron.berkeley.edu MIME-Version: 1.0 Content-Type: TEXT/plain; charset=us-ascii Content-MD5: lQNh+jlACwaDtxaL4vlJSw== X-Mailer: dtmail 1.3.0 @(#)CDE Version 1.5.3_06 SunOS 5.9 sun4u sparc Content-Length: 1258 Status: RO X-Status: $$$$ X-UID: 0000000036 Hi all, I thought the best place to begin would be to provide a URL that contains resources that you can use as a windows users to keep your system up to date and secure from most viruses/worms/trojan horses. A good place to use as a resource for this is http://www.sans.org/top20/ It provides the top 10 windows and top 10 unix security holes and info about how to find out if you have and what to do to fix it. Hopefully it will prove valuable for you to browse this and other websites it may refer to and keep checking it periodically. Also, if your version of Windows has an auto-update feature, I would turn it on and always install any critical updates it downloads whenever possible, as soon as possible. Everyone should note that this email list is a forum for helping you solve whatever problems you encounter using Windows, not everyone will have an answer, but please feel free to email the list questions, someone on it may be able to provide useful information regarding your issue. Thanks for subscribing, Kelley ------------------------------------------------------ Kelley McDonald Sr. Systems Administrator Astronomy Department kelley@astro.berkeley.edu ------------------------------------------------------ From urry@astron.Berkeley.EDU Thu Sep 11 12:49:02 2003 Received: from amoeba (amoeba [128.32.92.85]) by astron.Berkeley.EDU (8.11.4/8.11.4) with SMTP id h8BJn2g13658 for ; Thu, 11 Sep 2003 12:49:02 -0700 (PDT) Message-Id: <200309111949.h8BJn2g13658@astron.Berkeley.EDU> Date: Thu, 11 Sep 2003 12:49:02 -0700 (PDT) From: lynn urry 445 Reply-To: lynn urry 445 Subject: Important: Critical Microsoft Security Bulletin MS03-039 To: kelley@astron.berkeley.edu MIME-Version: 1.0 Content-Type: TEXT/plain; charset=us-ascii Content-MD5: cEOi2HKbTI3uX8RWA2zTWw== X-Mailer: dtmail 1.3.0 @(#)CDE Version 1.3.4p_5 SunOS 5.7 sun4u sparc Content-Length: 5322 Status: RO X-Status: $$$$ X-UID: 0000000037 Kelly Did you get this one? You might want to send it out on your windows email list. Lynn ------------- Begin Forwarded Message ------------- From: "Microsoft" <0_52297_A0908A04-DE70-4647-AE35-BBE39086CDD5_US@Newsletters.Microsoft.com> To: Subject: Important: Critical Microsoft Security Bulletin MS03-039 Date: Thu, 11 Sep 2003 10:10:09 -0700 MIME-Version: 1.0 Thread-Index: AcN4h4yA+3x9dI8MTWOUKYH4kbRNgg== Content-Class: urn:content-classes:message X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4910.0300 X-OriginalArrivalTime: 11 Sep 2003 17:10:09.0174 (UTC) FILETIME=[8DD17B60:01C37887] Content-Transfer-Encoding: 8bit X-MIME-Autoconverted: from quoted-printable to 8bit by astron.Berkeley.EDU id h8BHADg06082 Dear IT Professional, We are contacting you today to make you aware that we have released Microsoft Security Bulletin MS03-039 today, September 10, 2003. This bulletin details three critical vulnerabilities in the Windows operating system and provides instructions for applying the corresponding patch. While there is currently no active exploit of this vulnerability, if successfully exploited, these vulnerabilities would allow an attacker to gain control of the target system. We strongly encourage you to obtain and deploy this patch to any affected system that connects to your infrastructure; this includes systems on your local area network and remote or mobile systems. For the most current information on affected systems and recommended remediation steps, please read the bulletin posted at: http://www.microsoft.com/technet/security/bulletin/ms03-039.asp We understand the potential effect this situation and the recommended remediation steps may have on you. Microsoft is committed to providing you with information and tools to help run your enterprise safely and reliably on an on-going basis. When we become aware of vulnerabilities, it is our goal to quickly share protection and remediation information and work in partnership with you to eliminate these kinds of threats to your business. In order to help protect your computing environment from security vulnerabilities, we strongly encourage you to visit http://www.microsoft.com/technet/security/protect and implement the following three steps in your enterprise: 1. Verify firewall configuration. Audit Internet and intranet firewalls to ensure they comply with your security policy; these are your first line of defense. In addition, evaluate using host-level firewalls such as the Internet Connection Firewall in Windows XP. This is especially important for systems such as laptops and home PCs that connect to your network remotely. 2. Stay up to date. Use update services from Microsoft to keep your systems up to date. These services include three main components. . Automatic Updates, available on Windows XP, Windows 2000 SP3 and SP4, and Windows Server 2003. Automatic Updates works with the Windows Update Web site to automate the process of updating Windows systems. . Software Update Services (SUS), a patch-distribution server available for download from our Web site. SUS enables you deploy a server in your enterprise that Automatic Updates clients will use to get only approved and tested patches. . Systems Management Server (SMS) is a flexible, enterprise-wide software update and systems management product. In addition to using these update services, we strongly recommend that you subscribe to Microsoft's free security notification service at http://www.microsoft.com/securitynotification, so that you are proactively kept aware of new security issues. 3. Use and keep antivirus software up-to-date. Antivirus software programs will help protect your systems against viruses and other malicious code. To protect your systems from new viruses, it's also important to obtain up-to-date antivirus signatures through a subscription service from the antivirus software vendor. You should not let remote users or laptops connect to your network unless they have up-to-date antivirus software installed. In addition, consider using antivirus software in multiple points of your computer infrastructure, such as on edge Web proxy systems, as well as on email servers and gateways. You should also protect your network by requiring employees to take the same three steps with home and laptop PCs they use to remotely connect to your enterprise, and by encouraging them to talk with friends and family to do the same with their PCs. To make this easier, we have set up a new Web site to assist PC users at http://www.microsoft.com/protect. Again, we want to encourage you to read this security bulletin and deploy the patch to your systems. We want to thank you for your patience and work with you to protect your business from these kinds of security threats. Thank you, Microsoft Corporation For information about Microsoft's privacy policies, please go to http://www.microsoft.com/info/privacy.htm ------------- End Forwarded Message ------------- *********************************************************************** "If all economists were laid end-to-end -- it would be a good thing." John Kenneth Galbraith *********************************************************************** From urry@astron.Berkeley.EDU Thu Sep 11 15:41:08 2003 Received: from amoeba (amoeba [128.32.92.85]) by astron.Berkeley.EDU (8.11.4/8.11.4) with SMTP id h8BMf8g20949 for ; Thu, 11 Sep 2003 15:41:08 -0700 (PDT) Message-Id: <200309112241.h8BMf8g20949@astron.Berkeley.EDU> Date: Thu, 11 Sep 2003 15:41:08 -0700 (PDT) From: lynn urry 445 Reply-To: lynn urry 445 Subject: Re: Important: Critical Microsoft Security Bulletin MS03-039 To: windowsusers@astron.Berkeley.EDU MIME-Version: 1.0 Content-Type: TEXT/plain; charset=us-ascii Content-MD5: mhpZKR+gSHc6dCoY+Axqpg== X-Mailer: dtmail 1.3.0 @(#)CDE Version 1.3.4p_5 SunOS 5.7 sun4u sparc Content-Length: 6598 Status: RO X-Status: $$$$ X-UID: 0000000038 ------------- Begin Forwarded Message ------------- Date: Thu, 11 Sep 2003 14:05:50 -0700 (PDT) From: Kelley McDonald Subject: Re: Important: Critical Microsoft Security Bulletin MS03-039 To: urry@astron.berkeley.edu MIME-Version: 1.0 Content-MD5: Jb5QcNHOWRr5uL8+IaCjOg== Microsoft had a critical update available yesterday, you should install it. Kelley >Date: Thu, 11 Sep 2003 12:49:02 -0700 (PDT) >From: lynn urry 445 >Subject: Important: Critical Microsoft Security Bulletin MS03-039 >To: kelley@astron.berkeley.edu >MIME-Version: 1.0 >Content-MD5: cEOi2HKbTI3uX8RWA2zTWw== > >Kelly > >Did you get this one? You might want to send it out on your windows email list. > >Lynn > >------------- Begin Forwarded Message ------------- > >From: "Microsoft" ><0_52297_A0908A04-DE70-4647-AE35-BBE39086CDD5_US@Newsletters.Microsoft.com> >To: >Subject: Important: Critical Microsoft Security Bulletin MS03-039 >Date: Thu, 11 Sep 2003 10:10:09 -0700 >MIME-Version: 1.0 >Thread-Index: AcN4h4yA+3x9dI8MTWOUKYH4kbRNgg== >Content-Class: urn:content-classes:message >X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4910.0300 >X-OriginalArrivalTime: 11 Sep 2003 17:10:09.0174 (UTC) >FILETIME=[8DD17B60:01C37887] >Content-Transfer-Encoding: 8bit >X-MIME-Autoconverted: from quoted-printable to 8bit by astron.Berkeley.EDU id >h8BHADg06082 > >Dear IT Professional, > >We are contacting you today to make you aware that we have released Microsoft >Security Bulletin MS03-039 today, September 10, 2003. This bulletin details >three critical vulnerabilities in the Windows operating system and provides >instructions for applying the corresponding patch. While there is currently no >active exploit of this vulnerability, if successfully exploited, these >vulnerabilities would allow an attacker to gain control of the target system. > >We strongly encourage you to obtain and deploy this patch to any affected system >that connects to your infrastructure; this includes systems on your local area >network and remote or mobile systems. For the most current information on >affected systems and recommended remediation steps, please read the bulletin >posted at: http://www.microsoft.com/technet/security/bulletin/ms03-039.asp > >We understand the potential effect this situation and the recommended >remediation steps may have on you. Microsoft is committed to providing you with >information and tools to help run your enterprise safely and reliably on an >on-going basis. When we become aware of vulnerabilities, it is our goal to >quickly share protection and remediation information and work in partnership >with you to eliminate these kinds of threats to your business. In order to help >protect your computing environment from security vulnerabilities, we strongly >encourage you to visit http://www.microsoft.com/technet/security/protect and >implement the following three steps in your enterprise: > > 1. Verify firewall configuration. Audit Internet and intranet firewalls to >ensure they comply with your security policy; these are your first line of >defense. In addition, evaluate using host-level firewalls such as the Internet >Connection Firewall in Windows XP. This is especially important for systems >such as laptops and home PCs that connect to your network remotely. > > 2. Stay up to date. Use update services from Microsoft to keep your systems >up to date. These services include three main components. > >. Automatic Updates, available on Windows XP, Windows 2000 SP3 and SP4, and >Windows Server 2003. Automatic Updates works with the Windows Update Web site to >automate the process of updating Windows systems. > >. Software Update Services (SUS), a patch-distribution server available for >download from our Web site. SUS enables you deploy a server in your enterprise >that Automatic Updates clients will use to get only approved and tested patches. > >. Systems Management Server (SMS) is a flexible, enterprise-wide software update >and systems management product. >In addition to using these update services, we strongly recommend that you >subscribe to Microsoft's free security notification service at >http://www.microsoft.com/securitynotification, so that you are proactively kept >aware of new security issues. > > 3. Use and keep antivirus software up-to-date. Antivirus software programs >will help protect your systems against viruses and other malicious code. To >protect your systems from new viruses, it's also important to obtain up-to-date >antivirus signatures through a subscription service from the antivirus software >vendor. You should not let remote users or laptops connect to your network >unless they have up-to-date antivirus software installed. In addition, consider >using antivirus software in multiple points of your computer infrastructure, >such as on edge Web proxy systems, as well as on email servers and gateways. > >You should also protect your network by requiring employees to take the same >three steps with home and laptop PCs they use to remotely connect to your >enterprise, and by encouraging them to talk with friends and family to do the >same with their PCs. To make this easier, we have set up a new Web site to >assist PC users at http://www.microsoft.com/protect. > >Again, we want to encourage you to read this security bulletin and deploy the >patch to your systems. We want to thank you for your patience and work with you >to protect your business from these kinds of security threats. > > > >Thank you, > >Microsoft Corporation > > >For information about Microsoft's privacy policies, please go to >http://www.microsoft.com/info/privacy.htm > >------------- End Forwarded Message ------------- > > >*********************************************************************** > "If all economists were laid end-to-end -- it would be a good thing." > John Kenneth Galbraith >*********************************************************************** > ------------------------------------------------------ Kelley McDonald Sr. Systems Administrator Astronomy Department kelley@astro.berkeley.edu ------------------------------------------------------ ------------- End Forwarded Message ------------- *********************************************************************** "If all economists were laid end-to-end -- it would be a good thing." John Kenneth Galbraith *********************************************************************** From urry@astron.Berkeley.EDU Tue Sep 23 16:36:25 2003 Received: from amoeba (amoeba [128.32.92.85]) by astron.Berkeley.EDU (8.11.7/8.11.4) with SMTP id h8NNaOU08006 for ; Tue, 23 Sep 2003 16:36:24 -0700 (PDT) Message-Id: <200309232336.h8NNaOU08006@astron.Berkeley.EDU> Date: Tue, 23 Sep 2003 16:36:24 -0700 (PDT) From: lynn urry 445 Reply-To: lynn urry 445 Subject: bogus microsoft message To: windowsusers@astron.Berkeley.EDU MIME-Version: 1.0 Content-Type: TEXT/plain; charset=us-ascii Content-MD5: NKFjFWJknB8Ft2T1xyOqNw== X-Mailer: dtmail 1.3.0 @(#)CDE Version 1.3.4p_5 SunOS 5.7 sun4u sparc Content-Length: 596 Status: RO X-Status: $$$$ X-UID: 0000000039 I just received an e-mail from claiming to be from Microsoft. It contains an attached executible called Q553931.exe. The letter claims that the executable contains a cumulative patch with all of the functionality of all of the previously released patches. If you get one of these don't open it, dump it! Lynn *********************************************************************** "If all economists were laid end-to-end -- it would be a good thing." John Kenneth Galbraith *********************************************************************** From kelley@astron.Berkeley.EDU Tue Oct 14 08:41:19 2003 Received: from beast (beast [128.32.92.126]) by astron.Berkeley.EDU (8.11.7/8.11.4) with SMTP id h9EFfIN12003 for ; Tue, 14 Oct 2003 08:41:18 -0700 (PDT) Message-Id: <200310141541.h9EFfIN12003@astron.Berkeley.EDU> Date: Tue, 14 Oct 2003 08:40:54 -0700 (PDT) From: Kelley McDonald Reply-To: Kelley McDonald Subject: new windows virus in email To: windowsusers@astron.Berkeley.EDU MIME-Version: 1.0 Content-Type: TEXT/plain; charset=us-ascii Content-MD5: iNuk9CMD85Lo6QPv8UqyEw== X-Mailer: dtmail 1.3.0 @(#)CDE Version 1.5.5 SunOS 5.9 sun4u sparc Content-Length: 655 Status: RO X-Status: $$$$ X-UID: 0000000040 Windows Users: Please do not open any attachments to emails that state they are from "admin@astro.berkeley.edu", it would appear that someone is trying to spread a virus by claiming to be a message about your account being deactivated. 1) I would never send email to users as admin@astro.berkeley.edu and 2) I would never send any attachment to users in the form of a .zip file. Thanks for your attention. Kelley ------------------------------------------------------ Kelley McDonald Sr. Systems Administrator Astronomy Department kelley@astro.berkeley.edu ------------------------------------------------------ From kelley@astron.Berkeley.EDU Tue Oct 14 08:41:19 2003 Received: from beast (beast [128.32.92.126]) by astron.Berkeley.EDU (8.11.7/8.11.4) with SMTP id h9EFfIN12003 for ; Tue, 14 Oct 2003 08:41:18 -0700 (PDT) Message-Id: <200310141541.h9EFfIN12003@astron.Berkeley.EDU> Date: Tue, 14 Oct 2003 08:40:54 -0700 (PDT) From: Kelley McDonald Reply-To: Kelley McDonald Subject: new windows virus in email To: windowsusers@astron.Berkeley.EDU MIME-Version: 1.0 Content-Type: TEXT/plain; charset=us-ascii Content-MD5: iNuk9CMD85Lo6QPv8UqyEw== X-Mailer: dtmail 1.3.0 @(#)CDE Version 1.5.5 SunOS 5.9 sun4u sparc Content-Length: 655 Status: RO X-Status: $$$$ X-UID: 0000000041 Windows Users: Please do not open any attachments to emails that state they are from "admin@astro.berkeley.edu", it would appear that someone is trying to spread a virus by claiming to be a message about your account being deactivated. 1) I would never send email to users as admin@astro.berkeley.edu and 2) I would never send any attachment to users in the form of a .zip file. Thanks for your attention. Kelley ------------------------------------------------------ Kelley McDonald Sr. Systems Administrator Astronomy Department kelley@astro.berkeley.edu ------------------------------------------------------ From colby@celestial.Berkeley.EDU Tue Oct 14 09:01:15 2003 Received: from celestial.berkeley.edu (celestial [128.32.92.243]) by astron.Berkeley.EDU (8.11.7/8.11.4) with ESMTP id h9EG1EN12496; Tue, 14 Oct 2003 09:01:14 -0700 (PDT) Received: from localhost (colby@localhost) by celestial.berkeley.edu (8.11.4/8.11.4) with ESMTP id h9EG1EM29524; Tue, 14 Oct 2003 09:01:14 -0700 X-Authentication-Warning: celestial.berkeley.edu: colby owned process doing -bs Date: Tue, 14 Oct 2003 09:01:14 -0700 (PDT) From: James Colby Kraybill To: Kelley McDonald cc: windowsusers@astron.Berkeley.EDU Subject: Re: new windows virus in email In-Reply-To: <200310141541.h9EFfIN12003@astron.Berkeley.EDU> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 960 Status: RO X-Status: $$$$ X-UID: 0000000042 nuts! --------------------------------------------------------------------- James Colby Kraybill Radio Astronomy Laboratory colby@astro.berkeley.edu University of California, Berkeley On Tue, 14 Oct 2003, Kelley McDonald wrote: > Windows Users: > > Please do not open any attachments to emails > that state they are from "admin@astro.berkeley.edu", > it would appear that someone is trying to spread > a virus by claiming to be a message about your > account being deactivated. > > 1) I would never send email to users as > admin@astro.berkeley.edu > > and > > 2) I would never send any attachment to users in the > form of a .zip file. > > Thanks for your attention. > > Kelley > ------------------------------------------------------ > Kelley McDonald Sr. Systems Administrator > Astronomy Department kelley@astro.berkeley.edu > ------------------------------------------------------ > From kelley@astron.Berkeley.EDU Tue Oct 14 09:07:53 2003 Received: from beast (beast [128.32.92.126]) by astron.Berkeley.EDU (8.11.7/8.11.4) with SMTP id h9EG7qN12841; Tue, 14 Oct 2003 09:07:52 -0700 (PDT) Message-Id: <200310141607.h9EG7qN12841@astron.Berkeley.EDU> Date: Tue, 14 Oct 2003 09:07:28 -0700 (PDT) From: Kelley McDonald Reply-To: Kelley McDonald Subject: Re: new windows virus in email To: colby@astron.berkeley.edu Cc: windowsusers@astron.Berkeley.EDU MIME-Version: 1.0 Content-Type: TEXT/plain; charset=us-ascii Content-MD5: zX+/+3nd7ID/LJo4YLxOVQ== X-Mailer: dtmail 1.3.0 @(#)CDE Version 1.5.5 SunOS 5.9 sun4u sparc Content-Length: 560 Status: RO X-Status: $$$$ X-UID: 0000000043 I am relatively certain that if users have an up-to-date version of Norton (Symantec) Anti Virus software and are scanning all of their incoming email on their windows computer, they will be safe. I cannot over-emphasize the importance of running antivirus software that has up-to-date information on windows-based computers. Kelley ------------------------------------------------------ Kelley McDonald Sr. Systems Administrator Astronomy Department kelley@astro.berkeley.edu ------------------------------------------------------ From mdexter@astron.Berkeley.EDU Wed Oct 15 10:51:57 2003 Received: from ariel.Berkeley.EDU (ariel [128.32.92.31]) by astron.Berkeley.EDU (8.11.7/8.11.4) with ESMTP id h9FHpuN27449 for ; Wed, 15 Oct 2003 10:51:56 -0700 (PDT) Received: from localhost (mdexter@localhost) by ariel.Berkeley.EDU (8.11.7+Sun/8.11.4) with ESMTP id h9FHpZj07816 for ; Wed, 15 Oct 2003 10:51:35 -0700 (PDT) X-Authentication-Warning: ariel.Berkeley.EDU: mdexter owned process doing -bs Date: Wed, 15 Oct 2003 10:51:35 -0700 (PDT) From: Matt Dexter X-X-Sender: mdexter@ariel To: windowsusers@astron.Berkeley.EDU Subject: More security updates at Microsoft Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 124 Status: RO X-Status: $$$$ X-UID: 0000000044 Hey, In case you haven't checked lately Microsoft recently posted a handful of security patches at their web site. Matt From kelley@astron.Berkeley.EDU Thu Oct 16 11:19:26 2003 Received: from beast (beast [128.32.92.126]) by astron.Berkeley.EDU (8.11.7/8.11.4) with SMTP id h9GIIkN06418; Thu, 16 Oct 2003 11:18:46 -0700 (PDT) Message-Id: <200310161818.h9GIIkN06418@astron.Berkeley.EDU> Date: Thu, 16 Oct 2003 11:18:22 -0700 (PDT) From: Kelley McDonald Reply-To: Kelley McDonald Subject: Simple web archive of emails to mailing lists To: macusers@astron.Berkeley.EDU, windowsusers@astron.Berkeley.EDU, linuxusers@astron.Berkeley.EDU MIME-Version: 1.0 Content-Type: TEXT/plain; charset=us-ascii Content-MD5: t48nGvDQIaPvZvyMYB/Cjw== X-Mailer: dtmail 1.3.0 @(#)CDE Version 1.5.5 SunOS 5.9 sun4u sparc Content-Length: 763 Status: RO X-Status: $$$$ X-UID: 0000000045 I have constructed a VERY simple archive of the emails collected, most of them in any event, that have been sent to the macusers, windowsusers, and linuxusers mailing lists. You can view these by directing your web browser to: http://astro.berkeley.edu/computing/archives/ Click on the respective link. It is simple, just a flat file of all the emails, so you will have to use the Find In This Page function of the browser to seek for answers to your problems. At some point, it will be revamped to make it more user friendly. Kelley ------------------------------------------------------ Kelley McDonald Sr. Systems Administrator Astronomy Department kelley@astro.berkeley.edu ------------------------------------------------------ From kelley@astron.Berkeley.EDU Wed Nov 12 08:53:00 2003 Received: from beast (beast [128.32.92.126]) by astron.Berkeley.EDU (8.11.7/8.11.4) with SMTP id hACGr0N01435 for ; Wed, 12 Nov 2003 08:53:00 -0800 (PST) Message-Id: <200311121653.hACGr0N01435@astron.Berkeley.EDU> Date: Wed, 12 Nov 2003 08:52:28 -0800 (PST) From: Kelley McDonald Reply-To: Kelley McDonald Subject: [Fwd: CERT Advisory CA-2003-28 Buffer Overflow in Windows Workstation Service] To: windowsusers@astron.Berkeley.EDU MIME-Version: 1.0 Content-Type: TEXT/plain; charset=us-ascii Content-MD5: t2SJdIN9XoZTx/AxeHUyow== X-Mailer: dtmail 1.3.0 @(#)CDE Version 1.5.5 SunOS 5.9 sun4u sparc Content-Length: 9396 Status: RO X-Status: $$$$ X-UID: 0000000046 If you are using Windows 2000 or Windows XP, you should read this and look into applying available patches. The follow URL has more information (from Microsoft): http://www.microsoft.com/technet/treeview/?url=/technet/security/bulletin/MS03-0 49.asp Kelley ------------- Begin Forwarded Message ------------- Date: Tue, 11 Nov 2003 18:08:05 -0800 From: Kelley McDonald User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.0.2) Gecko/20030208 Netscape/7.02 X-Accept-Language: en-us, en MIME-Version: 1.0 To: kelley@astron.Berkeley.EDU Subject: [Fwd: CERT Advisory CA-2003-28 Buffer Overflow in Windows Workstation Service] Content-Transfer-Encoding: 7bit -------- Original Message -------- Subject: CERT Advisory CA-2003-28 Buffer Overflow in Windows Workstation Service Date: Tue, 11 Nov 2003 19:04:21 -0500 From: CERT Advisory Organization: CERT(R) Coordination Center - +1 412-268-7090 To: cert-advisory@cert.org -----BEGIN PGP SIGNED MESSAGE----- CERT Advisory CA-2003-28 Buffer Overflow in Windows Workstation Service Original release date: November 11, 2003 Last revised: -- Source: CERT/CC A complete revision history is at the end of this file. Systems Affected * Microsoft Windows 2000 Service Pack 2, Service Pack 3, Service Pack 4 * Microsoft Windows XP * Microsoft Windows XP Service Pack 1 * Microsoft Windows XP 64-Bit Edition Overview A buffer overflow vulnerability exists in Microsoft's Windows Workstation Service (WKSSVC.DLL). A remote attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service. I. Description Microsoft's Security Bulletin MS03-049 discusses a buffer overflow in Microsoft's Workstation Service that can be exploited via a specially crafted network message. According to the eEye Digital Security Advisory AD20031111, the vulnerability is caused by a flaw in the network management functions of the DCE/RPC service and a logging function implemented in Workstation Service (WKSSVC.DLL). Various RPC functions will permit the passing of long strings to the vsprintf() routine that is used to create log entries. The vsprintf() routine contains no bounds checking for parameters thus creating a buffer overflow situation. The CERT/CC is tracking this issue as VU#567620. This reference number corresponds to CVE candidate CAN-2003-0812. II. Impact A remote attacker could exploit this vulnerability to execute arbitrary code with system-level privileges or to cause a denial of service. The exploit vector and impact for this vulnerability are conducive to automated attacks such as worms. III. Solution Apply a patch from your vendor Apply the appropriate patch as specified in Microsoft Security Bulletin MS03-049. Appendix A contains additional information provided by vendors for this advisory. As vendors report new information to the CERT/CC, we will update this section and note the changes in our revision history. If a particular vendor is not listed below or in the individual vulnerability notes, we have not received their comments. Please contact your vendor directly. Restrict access You may wish to block access from outside your network perimeter, specifically by blocking access to TCP & UDP ports 138, 139, and 445. This will limit your exposure to attacks. However, blocking at the network perimeter would still allow attackers within the perimeter of your network to exploit the vulnerability. It is important to understand your network's configuration and service requirements before deciding what changes are appropriate. Disable the Workstation Service Depending on site requirements, you may wish to disable the Workstation Service as described in MS03-049. Disabling the Workstation Service will help protect against this vulnerability, but may also cause undesirable side effects. According to the Microsoft's Security Bulletin, the impacts of disabling the Workstation Service are as follows: "If the Workstation service is disabled, the system cannot connect to any shared file resources or shared print resources on a network. Only use this workaround on stand-alone systems (such as many home systems) that do not connect to a network. If the Workstation service is disabled, any services that explicitly depend on the Workstation service do not start, and an error message is logged in the system event log. The following services depend on the Workstation service: * Alerter * Browser * Messenger * Net Logon * RPC Locator These services are required to access resources on a network and to perform domain authentication. Internet connectivity and browsing for stand-alone systems, such as users on dial-up connections, on DSL connections, or on cable modem connections, should not be affected if these services are disabled. Note: The Microsoft Baseline Security Analyzer will not function if the Workstation service is disabled. It is possible that other applications may also require the Workstation service. If an application requires the Workstation service, simply re-enable the service. This can be performed by changing the Startup Type for the Workstation service back to Automatic and restarting the system." Appendix A. - Vendor Information This appendix contains information provided by vendors for this advisory. As vendors report new information to the CERT/CC, we will update this section and note the changes in our revision history. If a particular vendor is not listed below or in the individual vulnerability notes, we have not received their comments. Microsoft Corporation Microsoft has released MS03-049. _________________________________________________________________ This vulnerability was discoved by eEye Digital Security and reported in Microsoft Security Bulletin MS03-049. _________________________________________________________________ Author: Jason A Rafail. ______________________________________________________________________ This document is available from: http://www.cert.org/advisories/CA-2003-28.html ______________________________________________________________________ CERT/CC Contact Information Email: cert@cert.org Phone: +1 412-268-7090 (24-hour hotline) Fax: +1 412-268-6989 Postal address: CERT Coordination Center Software Engineering Institute Carnegie Mellon University Pittsburgh PA 15213-3890 U.S.A. CERT/CC personnel answer the hotline 08:00-17:00 EST(GMT-5) / EDT(GMT-4) Monday through Friday; they are on call for emergencies during other hours, on U.S. holidays, and on weekends. Using encryption We strongly urge you to encrypt sensitive information sent by email. Our public PGP key is available from http://www.cert.org/CERT_PGP.key If you prefer to use DES, please call the CERT hotline for more information. Getting security information CERT publications and other security information are available from our web site http://www.cert.org/ To subscribe to the CERT mailing list for advisories and bulletins, send email to majordomo@cert.org. Please include in the body of your message subscribe cert-advisory * "CERT" and "CERT Coordination Center" are registered in the U.S. Patent and Trademark Office. ______________________________________________________________________ NO WARRANTY Any material furnished by Carnegie Mellon University and the Software Engineering Institute is furnished on an "as is" basis. Carnegie Mellon University makes no warranties of any kind, either expressed or implied as to any matter including, but not limited to, warranty of fitness for a particular purpose or merchantability, exclusivity or results obtained from use of the material. Carnegie Mellon University does not make any warranty of any kind with respect to freedom from patent, trademark, or copyright infringement. ______________________________________________________________________ Conditions for use, disclaimers, and sponsorship information Copyright 2003 Carnegie Mellon University. Revision History Nov 11, 2003: Initial release -----BEGIN PGP SIGNATURE----- Version: PGP 6.5.8 iQCVAwUBP7F0nJZ2NNT/dVAVAQG7/wQAmaU+HCKRv46mZx8QJv2GetcS+2F9oJeZ V5Yb6vZc+e/PldD3eVLNPLsAlSX2eKE8ecjaY429vuzoaELQXk/9fnpI3EwhduwQ kmcUQ5zZ56yFo0tA+Ym6ksaGi/tMSUlPwZuvV/B/iS9vMXN7hcZr9eYmNey/vJuj R2c4QCey+R8= =/wxG -----END PGP SIGNATURE----- ------------- End Forwarded Message ------------- ------------------------------------------------------ Kelley McDonald Sr. Systems Administrator Astronomy Department kelley@astro.berkeley.edu ------------------------------------------------------ From colby@celestial.Berkeley.EDU Thu Jan 15 10:49:04 2004 Received: from celestial.berkeley.edu (celestial [128.32.92.243]) by astron.Berkeley.EDU (8.11.7/8.11.4) with ESMTP id i0FIn2H18378; Thu, 15 Jan 2004 10:49:02 -0800 (PST) Date: Thu, 15 Jan 2004 10:49:02 -0800 (PST) From: James Colby Kraybill To: noise@celestial.Berkeley.EDU cc: macusers@celestial.Berkeley.EDU, linuxusers@celestial.Berkeley.EDU, windowsusers@celestial.Berkeley.EDU Subject: Very useful book mark management/sharing tool Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 823 Status: RO X-Status: $$$$ X-UID: 0000000047 http://del.icio.us Register and try it out. You can drag and drop the "post to del.icio.us" link to your bookmarks tool bar (this works in netscape/ie/safari/camino/mozilla). Then, when you're on a page that you want to submit to the site (you can use it to handle all of your bookmarks if you like...), you click on the toolbar link(button) you've created which immediately takes you to a form to add some extra info like special tags that you can create at random (such as "Astronomy" or "Bush" or "Hubble-Porn"). The community might get over run by spammers, but so far, is extremely useful. - Colby --------------------------------------------------------------------- James Colby Kraybill Radio Astronomy Laboratory colby@astro.berkeley.edu University of California, Berkeley From kelley@astron.Berkeley.EDU Wed Jan 28 17:13:35 2004 Received: from beast (beast [128.32.92.126]) by astron.Berkeley.EDU (8.11.7/8.11.4) with SMTP id i0T1DYD09523 for ; Wed, 28 Jan 2004 17:13:34 -0800 (PST) Message-Id: <200401290113.i0T1DYD09523@astron.Berkeley.EDU> Date: Wed, 28 Jan 2004 17:13:32 -0800 (PST) From: Kelley McDonald Reply-To: Kelley McDonald Subject: MyDoom.B worm spreading To: windowsusers@astron.Berkeley.EDU MIME-Version: 1.0 Content-Type: TEXT/plain; charset=us-ascii Content-MD5: ejoXgJc2kVzX7zbTKLce/g== X-Mailer: dtmail 1.3.0 @(#)CDE Version 1.5.5 SunOS 5.9 sun4u sparc Content-Length: 415 Status: RO X-Status: $$$$ X-UID: 0000000048 Please be very very careful about opening attachments on a windows computer...at least until you have updated your virus scanning software with an update that will check for this worm. Kelley ------------------------------------------------------ Kelley McDonald Sr. Systems Administrator Astronomy Department kelley@astro.berkeley.edu ------------------------------------------------------ From colby@celestial.Berkeley.EDU Mon Feb 9 11:38:12 2004 Received: from celestial.berkeley.edu (celestial [128.32.92.243]) by astron.Berkeley.EDU (8.11.7/8.11.4) with ESMTP id i19JcAD21211; Mon, 9 Feb 2004 11:38:10 -0800 (PST) Date: Mon, 9 Feb 2004 11:38:11 -0800 (PST) From: James Colby Kraybill To: macusers@celestial.Berkeley.EDU cc: windowsusers@celestial.Berkeley.EDU, linuxusers@celestial.Berkeley.EDU Subject: Firefox Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 332 Status: RO X-Status: $$$$ X-UID: 0000000049 Phoenix 0.6, firebird 0.7, firefox 0.8 Firefox is now available: http://www.mozilla.org/products/firefox/ - Colby --------------------------------------------------------------------- James Colby Kraybill Radio Astronomy Laboratory colby@astro.berkeley.edu University of California, Berkeley From kelley@astron.Berkeley.EDU Tue Feb 10 19:53:34 2004 Received: from beast.Berkeley.EDU (beast [128.32.92.126]) by astron.Berkeley.EDU (8.11.7/8.11.4) with ESMTP id i1B3rWD00294 for ; Tue, 10 Feb 2004 19:53:32 -0800 (PST) From: Kelley McDonald Received: (from kelley@localhost) by beast.Berkeley.EDU (8.11.4/8.11.4) id i1B3rVu13407 for windowsusers; Tue, 10 Feb 2004 19:53:31 -0800 (PST) Message-Id: <200402110353.i1B3rVu13407@beast.Berkeley.EDU> Subject: please make sure to do a windows update To: windowsusers@astron.Berkeley.EDU Date: Tue, 10 Feb 2004 19:53:31 -0800 (PST) X-Mailer: ELM [version 2.5 PL2] MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Content-Length: 216 Status: RO X-Status: $$$$ X-UID: 0000000050 I heard today that Microsoft released a critical security patch for Windows NT, 2000, XP, and Server 2003. Please take the time to perform a "Windows Update" and apply any critical updates you find. Thanks, Kelley From kelley@astron.Berkeley.EDU Thu Feb 12 08:50:15 2004 Received: from beast (beast [128.32.92.126]) by astron.Berkeley.EDU (8.11.7/8.11.4) with SMTP id i1CGoDD29333 for ; Thu, 12 Feb 2004 08:50:13 -0800 (PST) Message-Id: <200402121650.i1CGoDD29333@astron.Berkeley.EDU> Date: Thu, 12 Feb 2004 08:50:13 -0800 (PST) From: Kelley McDonald Reply-To: Kelley McDonald Subject: [comp-mgrs] Free C@B Secure CD provides anti-virus, personal firewall software To: windowsusers@astron.Berkeley.EDU MIME-Version: 1.0 Content-Type: TEXT/plain; charset=us-ascii Content-MD5: BPyHh78KGW5rXbx496xJqw== X-Mailer: dtmail 1.3.0 @(#)CDE Version 1.5.5 SunOS 5.9 sun4u sparc Content-Length: 594 Status: RO X-Status: $$$$ X-UID: 0000000051 Everyone running a computer with Microsoft Windows on it may wish to check into getting the Free C@B Secure CD from one of the distribution points listed on the web site: http://seaotter.berkeley.edu/bcc/Spring2004/cabsecure.html They will be distributed on 17 Feb (this is Tuesday). Please follow the URL above and it will explain where they will be available. Kelley ------------------------------------------------------ Kelley McDonald Sr. Systems Administrator Astronomy Department kelley@astro.berkeley.edu ------------------------------------------------------ From mdexter@astron.Berkeley.EDU Wed Feb 18 15:19:21 2004 Received: from ariel.Berkeley.EDU (ariel [128.32.92.31]) by astron.Berkeley.EDU (8.11.7/8.11.4) with ESMTP id i1INJKD09144; Wed, 18 Feb 2004 15:19:20 -0800 (PST) Received: from localhost (mdexter@localhost) by ariel.Berkeley.EDU (8.11.7+Sun/8.11.4) with ESMTP id i1INJKD09399; Wed, 18 Feb 2004 15:19:20 -0800 (PST) X-Authentication-Warning: ariel.Berkeley.EDU: mdexter owned process doing -bs Date: Wed, 18 Feb 2004 15:19:19 -0800 (PST) From: Matt Dexter X-X-Sender: mdexter@ariel To: kmcdonald cc: dmacmahon Subject: low priority : firewall questions Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 1621 Status: RO X-Status: $$$$ X-UID: 0000000052 Hi Kelley, Yesterday I installed the C@B Secure CD's Symantec Client Firewall on my desktop PC. All seems to be working fine. I've been scanning the event log and I'm just curious about a few of the accesses that I've noticed. If you have time could you explain to me what is going on ? I'm not particularly nervous about these accesses - rather I'm just trying to learn a little. 192.168.100.100 : phys addr 00:02:b9:e3:10:80 = Cisco. (this also is the DNS ?: lots of UDP packs to port 53) UDP packets to 255.255.255.255 tftp port 69 Why are they trying to tftp into my machine - I'm not a bootp server ? 192.168.1.162 port 49737 to 255.255.255.255 ? port 2222 port 49731 to 255.255.255.255 ? port 2222 port 49752 to 255.255.255.255 ? port 2222 port 49758 to 255.255.255.255 ? port 2222 and so on 128.32.92.228 lss.berkeley.edu, phys addr 00:0a:95:9e:86:cc = Apple port 49459 to 255.255.255.255 ? port 2222 port 49458 to 255.255.255.255 ? port 2222 port 49464 to 255.255.255.255 ? port 2222 and so on. Google shows me all sorts of discussion of moving sshd to port 2222 but why are these machines trying all sorts of ports to get into my, and everyone else's, machine over this port ? Many many machines from 128.32.92.X use their port 177 (XDMCP) to try to access my machine (at port 3533). Why ? Thanks, Matt P.S. : David taught me I could check 'arp -a' to see that the 192.168.100.100 machine's MAC is 00:02:b9:e3:10:80 and then I could check online at for example http://www.coffer.com/mac_find/ to see 00:02:b9 is one of Cisco's devices. And similarly for the other machines. From davidm@astron.berkeley.edu Wed Feb 18 15:28:31 2004 Received: from calmail-cl.berkeley.edu (mailfarm.Berkeley.EDU [128.32.61.106]) by astron.Berkeley.EDU (8.11.7/8.11.4) with ESMTP id i1INSVD09406 for ; Wed, 18 Feb 2004 15:28:31 -0800 (PST) Received: from [128.32.92.133] (account davidm@calmail.berkeley.edu HELO localhost) by calmail-cl.berkeley.edu (CommuniGate Pro SMTP 4.1.8) with ESMTP-TLS id 476290; Wed, 18 Feb 2004 15:28:27 -0800 Date: Wed, 18 Feb 2004 15:28:27 -0800 From: David MacMahon To: Matt Dexter Cc: kmcdonald Subject: Re: low priority : firewall questions Message-ID: <20040218232823.GF3790@astro.berkeley.edu> References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.5.1i Content-Length: 2166 Status: RO X-Status: $$$$ X-UID: 0000000053 Matt, Actually, since these are all "to 255.255.255.255", I believe they are broadcast messages so I don't think anyone is singling out your computer. After a quick Google search, I found this tidbit... http://www.ciac.org/ciac/techbull/CIACTech02-003.shtml It seems that these "port 2222" packets are from an anti-piracy mechanism that is built into MS Office for Macintosh OS X. Dave On Wed, Feb 18, 2004 at 03:19:19PM -0800, Matt Dexter wrote: > Hi Kelley, > > Yesterday I installed the C@B Secure CD's Symantec Client Firewall on my > desktop PC. All seems to be working fine. > > I've been scanning the event log and I'm just curious about a few > of the accesses that I've noticed. If you have time could you explain to > me what is going on ? > I'm not particularly nervous about these accesses - rather I'm just > trying to learn a little. > > 192.168.100.100 : phys addr 00:02:b9:e3:10:80 = Cisco. > (this also is the DNS ?: lots of UDP packs to port 53) > UDP packets to 255.255.255.255 tftp port 69 > Why are they trying to tftp into my machine - I'm not a bootp server ? > > 192.168.1.162 > port 49737 to 255.255.255.255 ? port 2222 > port 49731 to 255.255.255.255 ? port 2222 > port 49752 to 255.255.255.255 ? port 2222 > port 49758 to 255.255.255.255 ? port 2222 > and so on > > 128.32.92.228 lss.berkeley.edu, phys addr 00:0a:95:9e:86:cc = Apple > port 49459 to 255.255.255.255 ? port 2222 > port 49458 to 255.255.255.255 ? port 2222 > port 49464 to 255.255.255.255 ? port 2222 > and so on. > > Google shows me all sorts of discussion of moving sshd to port 2222 > but why are these machines trying all sorts of ports to get into my, and > everyone else's, machine over this port ? > > Many many machines from 128.32.92.X use their port 177 (XDMCP) to try to > access my machine (at port 3533). Why ? > > Thanks, > > Matt > > P.S. : David taught me I could check > 'arp -a' to see that the 192.168.100.100 machine's MAC is 00:02:b9:e3:10:80 > and then I could check online at for example http://www.coffer.com/mac_find/ > to see 00:02:b9 is one of Cisco's devices. > > And similarly for the other machines. From mdexter@astron.Berkeley.EDU Wed Feb 18 15:50:50 2004 Received: from ariel.Berkeley.EDU (ariel [128.32.92.31]) by astron.Berkeley.EDU (8.11.7/8.11.4) with ESMTP id i1INooD10352; Wed, 18 Feb 2004 15:50:50 -0800 (PST) Received: from localhost (mdexter@localhost) by ariel.Berkeley.EDU (8.11.7+Sun/8.11.4) with ESMTP id i1INone09432; Wed, 18 Feb 2004 15:50:49 -0800 (PST) X-Authentication-Warning: ariel.Berkeley.EDU: mdexter owned process doing -bs Date: Wed, 18 Feb 2004 15:50:48 -0800 (PST) From: Matt Dexter X-X-Sender: mdexter@ariel To: David MacMahon cc: kmcdonald Subject: Re: low priority : firewall questions In-Reply-To: <20040218232823.GF3790@astro.berkeley.edu> Message-ID: References: <20040218232823.GF3790@astro.berkeley.edu> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Content-Length: 782 Status: RO X-Status: $$$$ X-UID: 0000000054 Dave, Sorry - I did know they were broadcasts and didn't mean they were explicitly targetting just my machine - I should have written that part better. Thanks - I didn't see that Mac OS anti-piracy page in my quickie Google search. I'll try google again regarding the tftp (ports 67, 68 and 69) accesses.. thanks, Matt On Wed, 18 Feb 2004, David MacMahon wrote: > Matt, > > Actually, since these are all "to 255.255.255.255", I believe they are > broadcast messages so I don't think anyone is singling out your > computer. > > After a quick Google search, I found this tidbit... > > http://www.ciac.org/ciac/techbull/CIACTech02-003.shtml > > It seems that these "port 2222" packets are from an anti-piracy > mechanism that is built into MS Office for Macintosh OS X. > > Dave From kelley@astron.Berkeley.EDU Wed Mar 3 04:19:08 2004 Received: from beast.Berkeley.EDU (beast [128.32.92.126]) by astron.Berkeley.EDU (8.11.7/8.11.4) with ESMTP id i23CJ7A02756; Wed, 3 Mar 2004 04:19:07 -0800 (PST) From: Kelley McDonald Received: (from kelley@localhost) by beast.Berkeley.EDU (8.11.4/8.11.4) id i23CJ6V04857; Wed, 3 Mar 2004 04:19:06 -0800 (PST) Message-Id: <200403031219.i23CJ6V04857@beast.Berkeley.EDU> Subject: Re: E-mail account security warning. (fwd) To: klein@astron.Berkeley.EDU (richard klein 551) Date: Wed, 3 Mar 2004 04:19:05 -0800 (PST) Cc: windowsusers@astron.Berkeley.EDU In-Reply-To: from "richard klein 551" at Mar 03, 2004 12:03:15 AM X-Mailer: ELM [version 2.5 PL2] MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Content-Length: 1669 Status: RO X-Status: $$$$ X-UID: 0000000055 The "virus warning" is a virus itself. This is the newest version of virus spreading around the network. No legitimate virus warning would send you any .zip or .exe file. Suns in general do not get infected with viruses. This is just another way of virus authors trying to convince you to trust them by pretending to be some important email. Please do not open the attached file (at least not on any PCs running windows). Kelley > > This message is in MIME format. The first part should be readable text, > while the remaining parts are likely unreadable without MIME-aware tools. > Send mail to mime@docserver.cac.washington.edu for more info. > > ----------evonumylqpixjlqiqdlf > Content-Type: TEXT/PLAIN; CHARSET=US-ASCII > Content-ID: > > > > Kelley, > > I am going out of town for a few days. > I just recieved this notice. Is it possible for you to use this > anti-virus tool on my machine to clean up my software? I'm not sure how > to do this myself. I'm not sure what they mean by viruses outgoing > from my computer account. > > I am assuming that this message is legitimate and > not itself a virus. > > thanks, > > Richard Klein > > > ---------- Forwarded message ---------- > Date: Wed, 03 Mar 2004 01:14:36 -0500 > From: staff@berkeley.edu > To: klein@radhydro.Berkeley.EDU > Subject: E-mail account security warning. > > Dear user of Berkeley.edu, > > Our antivirus software has detected a large ammount of viruses outgoing > from your email account, you may use our free anti-virus tool to clean up > your computer software. > > For details see the attach. From kelley@astron.Berkeley.EDU Thu Mar 11 08:49:07 2004 Received: from beast (beast [128.32.92.126]) by astron.Berkeley.EDU (8.11.7/8.11.4) with SMTP id i2BGn5A05273 for ; Thu, 11 Mar 2004 08:49:06 -0800 (PST) Message-Id: <200403111649.i2BGn5A05273@astron.Berkeley.EDU> Date: Thu, 11 Mar 2004 08:49:05 -0800 (PST) From: Kelley McDonald Reply-To: Kelley McDonald Subject: [Fwd: US-CERT Technical Cyber Security Alert TA04-070A -- Microsoft Outlook mailto URL Handling Vulnerability] To: windowsusers@astron.Berkeley.EDU MIME-Version: 1.0 Content-Type: TEXT/plain; charset=us-ascii Content-MD5: 7jfo/Ww131lZC0qUd8SD3Q== X-Mailer: dtmail 1.3.0 @(#)CDE Version 1.5.5 SunOS 5.9 sun4u sparc Content-Length: 6697 Status: RO X-Status: $$$$ X-UID: 0000000056 Please read and check to see that your version of MS Office XP is patched as appropriate. Kelley -------- Original Message -------- Subject: US-CERT Technical Cyber Security Alert TA04-070A -- Microsoft Outlook mailto URL Handling Vulnerability Date: Wed, 10 Mar 2004 21:11:52 -0500 From: CERT Advisory Organization: CERT(R) Coordination Center - +1 412-268-7090 To: cert-advisory@cert.org -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Microsoft Outlook mailto URL Handling Vulnerability Original issue date: March 10, 2004 Last revised: -- Source: US-CERT Systems Affected * Microsoft Office XP (up to Service Pack 2) * Microsoft Outlook 2002 (up to Service Pack 2) Overview A vulnerability in the way that Microsoft Outlook 2002 handles a certain type of URL could allow a remote attacker to execute arbitrary code on the vulnerable system. I. Description Microsoft Outlook provides a centralized application for managing and organizing email messages, schedules, tasks, notes, contacts, and other information. Outlook is included as a component of newer versions of Microsoft Office and available as a stand-alone product. Outlook 2002 exposes a vulnerability due to inadequate checking of parameters passed to the Outlook email client. The vulnerability is caused by the way a "mailto:" URL is interpreted. An attacker creating specially formatted "mailto:" URLs can cause Outlook to run privileged script, ultimately leading to the execution of arbitrary code. The malicious code could be delivered to the victim via a specially crafted HTML email message or from an intruder-controlled web page. Microsoft originally stated that users were only at risk from this vulnerability when Outlook 2002 is configured as the default mail reader and when the "Outlook Today" home page is their default folder home page. Subsequent information has been published that indicates that this is not true and users in other situations are vulnerable via a slightly different attack vector. II. Impact An attacker could execute arbitrary code of their choosing on the system running the vulnerable version of Outlook. Upon successful exploitation, the malicious code would be executed in the context of the "Local Machine" Internet Explorer zone under the user running Outlook. III. Solution Apply a patch Apply the appropriate patch as specified by Microsoft Security Bulletin MS04-009. Workarounds Microsoft recommends the following workarounds for users who are unable to apply the patches: * Do not use the "Outlook Today" folder home page in Outlook 2002 You can help protect against this vulnerability by turning off the "Outlook today" folder home page in Outlook 2002. 1. In the "Folder List" window of Outlook, right-click on "Outlook Today" or "Mailbox - [User Name]" 2. Select Properties for "Outlook Today" or "Mailbox - [User Name]" 3. Select "Home Page" tab 4. Uncheck "Show home page by default for this folder" 5. Repeat for all other "Folder List" items labeled "Outlook Today" or "Mailbox - [User Name]" Impact of Workaround: The "Outlook Today" folder home page would no longer be available. * If you are using Outlook 2002 or Outlook Express 6.0 SP1 or later, read email messages in plain text format to help protect yourself from the HTML email attack vector Microsoft Outlook 2002 users who have applied Service Pack 1 or later and Outlook Express 6.0 users who have applied Service Pack 1 or later can enable a feature that will enable them to view all non-digitally-signed email messages or non-encrypted email messages in plain text only. Digitally-signed email messages and encrypted email messages are not affected by the setting and may be read in their original formats. Instructions for enabling these settings can be found at the following locations: + Outlook 2002 - Microsoft Knowledge Base Article 307594 + Outlook Express 6.0 - Microsoft Knowledge Base Article 291387 Impact of Workaround: Email that is viewed in plain text format cannot contain pictures, specialized fonts, animations, or other rich content. Additionally: + The changes are applied to the preview pane and to open messages. + Pictures become attachments to avoid loss of message content. + The object model (custom code solutions) may behave unexpectedly because the message is still in Rich Text Format or in HTML format in the mail store. Appendix A. Vendor Information This appendix contains information provided by vendors. When vendors report new information, this section is updated and the changes are noted in the revision history. If a vendor is not listed below, we have not received their comments. Microsoft Please see Microsoft Security Bulletin MS04-009. Appendix B. References * US-CERT Vulnerability Note VU#305206 - * iDEFENSE Security Advisory 03.09.04 - * IETF RFC2368, "The mailto URL scheme" - * Microsoft Security Bulletin MS04-009 - * Microsoft Knowledge Base Article 307594 - * Microsoft Knowledge Base Article 291387 - _________________________________________________________________ This issue was jointly reported publicly by Microsoft Security and iDefense. They, in turn, credit Juoko Pyonen with the discovery and research of this vulnerability. Information from iDefense and Microsoft was used in this document. _________________________________________________________________ This document is also available online at Feedback can be directed to the authors, Chad Dougherty and Jeff Havrilla. _________________________________________________________________ Copyright 2004 Carnegie Mellon University. Terms of use, see Revision History March 10, 2004: Initial release -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQFAT8dmXlvNRxAkFWARAnY5AKCZJY4Nm58+RJBK5nbzlgCCfhUC5QCfbnGl X5nSukAsCMCepN3+mFsxW50= =wQ3h -----END PGP SIGNATURE----- ------------- End Forwarded Message ------------- ------------------------------------------------------ Kelley McDonald Sr. Systems Administrator Astronomy Department kelley@astro.berkeley.edu ------------------------------------------------------ From colby@astron.berkeley.edu Wed Sep 15 10:47:55 2004 Received: from calmail-fe2.berkeley.edu (mailfarm.Berkeley.EDU [128.32.61.106]) by astron.Berkeley.EDU (8.11.7/8.11.4) with ESMTP id i8FHlsc17271 for ; Wed, 15 Sep 2004 10:47:54 -0700 (PDT) Received: from [67.180.204.45] (HELO [192.168.100.101]) by calmail-fe2.berkeley.edu (CommuniGate Pro SMTP 4.1.8) with ESMTP id 28509747 for windowsusers@astro.berkeley.edu; Wed, 15 Sep 2004 10:47:30 -0700 Mime-Version: 1.0 (Apple Message framework v619) Content-Transfer-Encoding: 7bit Message-Id: <4DD58260-073F-11D9-9139-000A95C8FB56@astro.berkeley.edu> Content-Type: text/plain; charset=US-ASCII; format=flowed To: windowsusers@astron.berkeley.edu From: Colby Gutierrez-Kraybill Subject: JPEG Exploit on Windows Machines Date: Wed, 15 Sep 2004 10:47:25 -0700 X-Mailer: Apple Mail (2.619) X-Spam-Checker-Version: SpamAssassin 2.61 (1.212.2.1-2003-12-09-exp) on astron X-Spam-Level: X-Spam-Status: No, hits=-100.0 required=1.0 tests=USER_IN_WHITELIST autolearn=no version=2.61 Status: RO X-Status: $$$$ X-UID: 0000000057 There is a serious vulnerability on microsoft windows machines: http://www.microsoft.com/technet/security/bulletin/MS04-028.mspx It affects many applications (including ms internet explorer) across the entire operating system. Any that use microsoft's library to process jpeg images could end up executing viral/worm code, so, even just browsing the internet makes you vulnerable to attack even if you're running a firewall on your machine. - Colby From MAILER-DAEMON Fri Jun 30 19:22:32 2006 Return-Path: <> X-Spam-Checker-Version: SpamAssassin 3.1.0 (2005-09-13) on chandra X-Spam-Level: X-Spam-Status: No, score=-4.0 required=1.0 tests=ALL_TRUSTED,BAYES_00, FROM_NO_LOWER,MIME_BASE64_NO_NAME autolearn=ham version=3.1.0 X-Original-To: windowsusers@astron.berkeley.edu Delivered-To: kelley@astro.berkeley.edu Received: by chandra.berkeley.edu (Postfix) id 4A4647AADE; Fri, 30 Jun 2006 19:22:32 -0700 (PDT) Delivered-To: windowsusers@astron.berkeley.edu Received: from mailwall.ssl.berkeley.edu (mailwall.SSL.Berkeley.EDU [128.32.147.15]) by chandra.berkeley.edu (Postfix) with SMTP id 43B327AACB for ; Fri, 30 Jun 2006 19:22:32 -0700 (PDT) MIME-Version: 1.0 From: MAILER-DAEMON <> Message-Id: <20060701022231.0E7647A9D1@chandra.berkeley.edu> Subject: **Message sent to danw@ssl.berkeley.edu has been blocked by SSL's Spam filters** Content-Type: multipart/report; report-type=delivery-status; charset=utf-8; boundary="----------=_1151720551-18212-57" To: Date: Fri, 30 Jun 2006 19:22:31 -0700 (PDT) X-Virus-Status: No X-Virus-Checker-Version: clamassassin 1.2.3 with clamscan / ClamAV 0.88.2/1578/Fri Jun 30 02:34:32 2006 This is a multi-part message in MIME format... ------------=_1151720551-18212-57 Content-Type: text/plain; charset="utf-8" Content-Disposition: inline Content-Transfer-Encoding: base64 WW91ciBtZXNzYWdlIHRvOiBkYW53QHNzbC5iZXJrZWxleS5lZHUNClN1Ympl Y3Q6IFRoZSBzcGVlZCBvZiBsb3Npbmcgd2VpZ2h0IHdpdGggSG9vZGlhIDky MCsgaXMgdW5iZWxpZXZhYmxlLiANCg0Kd2FzIGJsb2NrZWQgYnkgb3VyIFNw YW0gRmlyZXdhbGwuIFRoaXMgZW1haWwgaGFzIE5PVCBCRUVOIERFTElWRVJF RC4NCg0KQSBtZXNzYWdlIGFwcGVhcmluZyB0byBiZSBmcm9tIHlvdQ0KDQog VG86IGRhbndAc3NsLmJlcmtlbGV5LmVkdQ0KIFN1YmplY3Q6IFRoZSBzcGVl ZCBvZiBsb3Npbmcgd2VpZ2h0IHdpdGggSG9vZGlhIDkyMCsgaXMgdW5iZWxp ZXZhYmxlLiANCg0Kd2FzIGJsb2NrZWQgYW5kIGhhcyBOT1QgQkVFTiBERUxJ VkVSRUQuDQoNCklmIHlvdSBkaWQgbm90IHNlbmQgdGhlIGluZGljYXRlZCBt ZXNzYWdlLCB5b3VyIGVtYWlsIGFkZHJlc3MNCndhcyB1c2VkIGFzIGEgZm9y Z2VkICJGcm9tIiBhZGRyZXNzIGJ5IGEgY29tcHV0ZXIgdmlydXMNCm9yIGV2 aWwgc3BhbW1lci4gIERlbGV0ZSB0aGlzIG5vdGljZS4NCg0KT3VyIGFudGlz cGFtIHN5c3RlbSB1c2VzIGEgdmFyaWV0eSBvZiBydWxlcyB0byBkZXRlcm1p bmUgaWYgYSBtZXNzYWdlDQptaWdodCBiZSBzcGFtLiBJbiBhZGRpdGlvbiB0 byBleGFtaW5pbmcgbWVzc2FnZSBjb250ZW50IGFuZCBncmFtbWFyLCBpdA0K bWF0Y2hlcyBJUCBhZGRyZXNzZXMgYW5kIHdlYiBVUkwncyBmcm9tIHlvdXIg bWVzc2FnZSBhZ2FpbnN0IGh1Z2UgZGF0YWJhc2VzIA0KZ2VuZXJhdGVkIGZy b20gaGlzdG9yaWNhbCBzcGFtLiBJZiB5b3VyIGxlZ2l0aW1hdGUgbWVzc2Fn ZSBpcyBnZXR0aW5nIGJsb2NrZWQsIA0KOTUgcGVyY2VudCBvZiB0aGUgdGlt ZSBpdCBpcyBiZWNhdXNlIG9mIHRoZXNlIFVSTCB0ZXN0cy4gT3VyIGZhbHNl IHBvc2l0aXZlIHJhdGUgaXMgDQp2ZXJ5IHNtYWxsLCBidXQgaXQgaGFwcGVu cy4gV2UgYXBvbG9naXplIGluIGFkdmFuY2UuDQoNCklmIHlvdSBkaWQgc2Vu ZCB0aGUgaW5kaWNhdGVkIG1lc3NhZ2UgYW5kIGl0IHdhcyBibG9ja2VkDQpp biBlcnJvciwgd2Ugd2FudCB0byBmaXggdGhlIHByb2JsZW0uICBGb3J3YXJk IHRoaXMgbWVzc2FnZSB0bw0Kc3BhbWZpeEBzc2wuYmVya2VsZXkuZWR1IHdp dGggYW4gZXhwbGFuYXRpb24gYW5kIGEgdmFsaWQgcmVwbHkgYWRkcmVzcw0K c28gd2UgY2FuIGxvb2sgaW50byB0aGUgcmVhc29uIGZvciB0aGUgYmxvY2su IA0KDQoK ------------=_1151720551-18212-57 Content-Type: message/delivery-status Content-Disposition: inline Content-Transfer-Encoding: 7bit Content-Description: Delivery error report Reporting-MTA: dns; mailwall.ssl.berkeley.edu Received-From-MTA: smtp; mailwall.ssl.berkeley.edu ([127.0.0.1]) Arrival-Date: Fri, 30 Jun 2006 19:22:31 -0700 (PDT) Final-Recipient: rfc822; danw@ssl.berkeley.edu Action: failed Status: 5.7.1 Diagnostic-Code: smtp; 550 5.7.1 Message content rejected, UBE, id=18212-01-38 Last-Attempt-Date: Fri, 30 Jun 2006 19:22:31 -0700 (PDT) ------------=_1151720551-18212-57 Content-Type: text/rfc822-headers Content-Disposition: inline Content-Transfer-Encoding: 7bit Content-Description: Undelivered-message headers Received: from chandra.berkeley.edu (chandra.Berkeley.EDU [128.32.92.22]) by mailwall.ssl.berkeley.edu (Spam Firewall) with ESMTP id 8D6B820016E8 for ; Fri, 30 Jun 2006 19:22:31 -0700 (PDT) Received: by chandra.berkeley.edu (Postfix) id 839947A9D5; Fri, 30 Jun 2006 19:22:31 -0700 (PDT) Delivered-To: windowsusers@astro.berkeley.edu Received: from chandra.berkeley.edu (cm218-252-130-56.hkcable.com.hk [218.252.130.56]) by chandra.berkeley.edu (Postfix) with SMTP id 0E7647A9D1 for ; Fri, 30 Jun 2006 19:22:30 -0700 (PDT) From: To: windowsusers@astro.berkeley.edu Content-type: text/html; Charset=Windows-1251 Subject: The speed of losing weight with Hoodia 920+ is unbelievable. Message-Id: <20060701022231.0E7647A9D1@chandra.berkeley.edu> Date: Fri, 30 Jun 2006 19:22:30 -0700 (PDT) ------------=_1151720551-18212-57-- From MAILER-DAEMON Mon Jul 3 00:51:53 2006 Return-Path: <> X-Spam-Checker-Version: SpamAssassin 3.1.0 (2005-09-13) on chandra X-Spam-Level: X-Spam-Status: No, score=-3.3 required=1.0 tests=ALL_TRUSTED,BAYES_00, BODY_ENHANCEMENT2,FROM_NO_LOWER,MIME_BASE64_NO_NAME autolearn=ham version=3.1.0 X-Original-To: windowsusers@astron.berkeley.edu Delivered-To: kelley@astro.berkeley.edu Received: by chandra.berkeley.edu (Postfix) id 4E7CF7B0C6; Mon, 3 Jul 2006 00:51:44 -0700 (PDT) Delivered-To: windowsusers@astron.berkeley.edu Received: from mailwall.ssl.berkeley.edu (mailwall.SSL.Berkeley.EDU [128.32.147.15]) by chandra.berkeley.edu (Postfix) with SMTP id 4101F7B0C3 for ; Mon, 3 Jul 2006 00:51:44 -0700 (PDT) MIME-Version: 1.0 From: MAILER-DAEMON <> Message-Id: <20060703075141.D464A7AF97@chandra.berkeley.edu> Subject: **Message sent to danw@ssl.berkeley.edu has been blocked by SSL's Spam filters** Content-Type: multipart/report; report-type=delivery-status; charset=utf-8; boundary="----------=_1151913103-13607-133" To: Date: Mon, 3 Jul 2006 00:51:43 -0700 (PDT) X-Virus-Status: No X-Virus-Checker-Version: clamassassin 1.2.3 with clamscan / ClamAV 0.88.2/1579/Sat Jul 1 03:20:41 2006 This is a multi-part message in MIME format... ------------=_1151913103-13607-133 Content-Type: text/plain; charset="utf-8" Content-Disposition: inline Content-Transfer-Encoding: base64 WW91ciBtZXNzYWdlIHRvOiBkYW53QHNzbC5iZXJrZWxleS5lZHUNClN1Ympl Y3Q6IExldCB5b3VyIHBlbmlzIHN0YXJ0IG5ldyBpbXByb3ZlZCBsaWZlIHdp dGggUGVuaXMgRW5sYXJnZSBQYXRjaC4gDQoNCndhcyBibG9ja2VkIGJ5IG91 ciBTcGFtIEZpcmV3YWxsLiBUaGlzIGVtYWlsIGhhcyBOT1QgQkVFTiBERUxJ VkVSRUQuDQoNCkEgbWVzc2FnZSBhcHBlYXJpbmcgdG8gYmUgZnJvbSB5b3UN Cg0KIFRvOiBkYW53QHNzbC5iZXJrZWxleS5lZHUNCiBTdWJqZWN0OiBMZXQg eW91ciBwZW5pcyBzdGFydCBuZXcgaW1wcm92ZWQgbGlmZSB3aXRoIFBlbmlz IEVubGFyZ2UgUGF0Y2guIA0KDQp3YXMgYmxvY2tlZCBhbmQgaGFzIE5PVCBC RUVOIERFTElWRVJFRC4NCg0KSWYgeW91IGRpZCBub3Qgc2VuZCB0aGUgaW5k aWNhdGVkIG1lc3NhZ2UsIHlvdXIgZW1haWwgYWRkcmVzcw0Kd2FzIHVzZWQg YXMgYSBmb3JnZWQgIkZyb20iIGFkZHJlc3MgYnkgYSBjb21wdXRlciB2aXJ1 cw0Kb3IgZXZpbCBzcGFtbWVyLiAgRGVsZXRlIHRoaXMgbm90aWNlLg0KDQpP dXIgYW50aXNwYW0gc3lzdGVtIHVzZXMgYSB2YXJpZXR5IG9mIHJ1bGVzIHRv IGRldGVybWluZSBpZiBhIG1lc3NhZ2UNCm1pZ2h0IGJlIHNwYW0uIEluIGFk ZGl0aW9uIHRvIGV4YW1pbmluZyBtZXNzYWdlIGNvbnRlbnQgYW5kIGdyYW1t YXIsIGl0DQptYXRjaGVzIElQIGFkZHJlc3NlcyBhbmQgd2ViIFVSTCdzIGZy b20geW91ciBtZXNzYWdlIGFnYWluc3QgaHVnZSBkYXRhYmFzZXMgDQpnZW5l cmF0ZWQgZnJvbSBoaXN0b3JpY2FsIHNwYW0uIElmIHlvdXIgbGVnaXRpbWF0 ZSBtZXNzYWdlIGlzIGdldHRpbmcgYmxvY2tlZCwgDQo5NSBwZXJjZW50IG9m IHRoZSB0aW1lIGl0IGlzIGJlY2F1c2Ugb2YgdGhlc2UgVVJMIHRlc3RzLiBP dXIgZmFsc2UgcG9zaXRpdmUgcmF0ZSBpcyANCnZlcnkgc21hbGwsIGJ1dCBp dCBoYXBwZW5zLiBXZSBhcG9sb2dpemUgaW4gYWR2YW5jZS4NCg0KSWYgeW91 IGRpZCBzZW5kIHRoZSBpbmRpY2F0ZWQgbWVzc2FnZSBhbmQgaXQgd2FzIGJs b2NrZWQNCmluIGVycm9yLCB3ZSB3YW50IHRvIGZpeCB0aGUgcHJvYmxlbS4g IEZvcndhcmQgdGhpcyBtZXNzYWdlIHRvDQpzcGFtZml4QHNzbC5iZXJrZWxl eS5lZHUgd2l0aCBhbiBleHBsYW5hdGlvbiBhbmQgYSB2YWxpZCByZXBseSBh ZGRyZXNzDQpzbyB3ZSBjYW4gbG9vayBpbnRvIHRoZSByZWFzb24gZm9yIHRo ZSBibG9jay4gDQoNCgo= ------------=_1151913103-13607-133 Content-Type: message/delivery-status Content-Disposition: inline Content-Transfer-Encoding: 7bit Content-Description: Delivery error report Reporting-MTA: dns; mailwall.ssl.berkeley.edu Received-From-MTA: smtp; mailwall.ssl.berkeley.edu ([127.0.0.1]) Arrival-Date: Mon, 3 Jul 2006 00:51:43 -0700 (PDT) Final-Recipient: rfc822; danw@ssl.berkeley.edu Action: failed Status: 5.7.1 Diagnostic-Code: smtp; 550 5.7.1 Message content rejected, UBE, id=13607-02-94 Last-Attempt-Date: Mon, 3 Jul 2006 00:51:43 -0700 (PDT) ------------=_1151913103-13607-133 Content-Type: text/rfc822-headers Content-Disposition: inline Content-Transfer-Encoding: 7bit Content-Description: Undelivered-message headers Received: from chandra.berkeley.edu (chandra.Berkeley.EDU [128.32.92.22]) by mailwall.ssl.berkeley.edu (Spam Firewall) with ESMTP id 435042008B6B for ; Mon, 3 Jul 2006 00:51:43 -0700 (PDT) Received: by chandra.berkeley.edu (Postfix) id ED0E77B085; Mon, 3 Jul 2006 00:51:42 -0700 (PDT) Delivered-To: windowsusers@astro.berkeley.edu Received: from chandra.berkeley.edu (unknown [85.97.113.184]) by chandra.berkeley.edu (Postfix) with SMTP id D464A7AF97 for ; Mon, 3 Jul 2006 00:51:41 -0700 (PDT) From: To: windowsusers@astro.berkeley.edu Content-type: text/html; Charset=Windows-1251 Subject: Let your penis start new improved life with Penis Enlarge Patch. Message-Id: <20060703075141.D464A7AF97@chandra.berkeley.edu> Date: Mon, 3 Jul 2006 00:51:41 -0700 (PDT) ------------=_1151913103-13607-133-- From MAILER-DAEMON Tue Jul 4 07:00:41 2006 Return-Path: <> X-Spam-Checker-Version: SpamAssassin 3.1.0 (2005-09-13) on chandra X-Spam-Level: X-Spam-Status: No, score=-4.0 required=1.0 tests=ALL_TRUSTED,BAYES_00, FROM_NO_LOWER,MIME_BASE64_NO_NAME autolearn=ham version=3.1.0 X-Original-To: windowsusers@astron.berkeley.edu Delivered-To: kelley@astro.berkeley.edu Received: by chandra.berkeley.edu (Postfix) id C60727B2AA; Tue, 4 Jul 2006 07:00:33 -0700 (PDT) Delivered-To: windowsusers@astron.berkeley.edu Received: from mailwall.ssl.berkeley.edu (mailwall.SSL.Berkeley.EDU [128.32.147.15]) by chandra.berkeley.edu (Postfix) with SMTP id C20F87B2A9 for ; Tue, 4 Jul 2006 07:00:33 -0700 (PDT) MIME-Version: 1.0 From: MAILER-DAEMON <> Message-Id: <20060704140027.139117B1DC@chandra.berkeley.edu> Subject: **Message sent to danw@ssl.berkeley.edu has been blocked by SSL's Spam filters** Content-Type: multipart/report; report-type=delivery-status; charset=utf-8; boundary="----------=_1152021634-10468-263" To: Date: Tue, 4 Jul 2006 07:00:34 -0700 (PDT) X-Virus-Status: No X-Virus-Checker-Version: clamassassin 1.2.3 with clamscan / ClamAV 0.88.2/1582/Mon Jul 3 14:23:18 2006 This is a multi-part message in MIME format... ------------=_1152021634-10468-263 Content-Type: text/plain; charset="utf-8" Content-Disposition: inline Content-Transfer-Encoding: base64 WW91ciBtZXNzYWdlIHRvOiBkYW53QHNzbC5iZXJrZWxleS5lZHUNClN1Ympl Y3Q6IFlvdSBhcmUgYSBidXNpbmVzc21hbiBhbmQgaGF2ZSBubyB0aW1lIGZv ciBhIGxvbmcgc2V4dWFsIHN0aW11bGF0aW9uLiANCg0Kd2FzIGJsb2NrZWQg Ynkgb3VyIFNwYW0gRmlyZXdhbGwuIFRoaXMgZW1haWwgaGFzIE5PVCBCRUVO IERFTElWRVJFRC4NCg0KQSBtZXNzYWdlIGFwcGVhcmluZyB0byBiZSBmcm9t IHlvdQ0KDQogVG86IGRhbndAc3NsLmJlcmtlbGV5LmVkdQ0KIFN1YmplY3Q6 IFlvdSBhcmUgYSBidXNpbmVzc21hbiBhbmQgaGF2ZSBubyB0aW1lIGZvciBh IGxvbmcgc2V4dWFsIHN0aW11bGF0aW9uLiANCg0Kd2FzIGJsb2NrZWQgYW5k IGhhcyBOT1QgQkVFTiBERUxJVkVSRUQuDQoNCklmIHlvdSBkaWQgbm90IHNl bmQgdGhlIGluZGljYXRlZCBtZXNzYWdlLCB5b3VyIGVtYWlsIGFkZHJlc3MN CndhcyB1c2VkIGFzIGEgZm9yZ2VkICJGcm9tIiBhZGRyZXNzIGJ5IGEgY29t cHV0ZXIgdmlydXMNCm9yIGV2aWwgc3BhbW1lci4gIERlbGV0ZSB0aGlzIG5v dGljZS4NCg0KT3VyIGFudGlzcGFtIHN5c3RlbSB1c2VzIGEgdmFyaWV0eSBv ZiBydWxlcyB0byBkZXRlcm1pbmUgaWYgYSBtZXNzYWdlDQptaWdodCBiZSBz cGFtLiBJbiBhZGRpdGlvbiB0byBleGFtaW5pbmcgbWVzc2FnZSBjb250ZW50 IGFuZCBncmFtbWFyLCBpdA0KbWF0Y2hlcyBJUCBhZGRyZXNzZXMgYW5kIHdl YiBVUkwncyBmcm9tIHlvdXIgbWVzc2FnZSBhZ2FpbnN0IGh1Z2UgZGF0YWJh c2VzIA0KZ2VuZXJhdGVkIGZyb20gaGlzdG9yaWNhbCBzcGFtLiBJZiB5b3Vy IGxlZ2l0aW1hdGUgbWVzc2FnZSBpcyBnZXR0aW5nIGJsb2NrZWQsIA0KOTUg cGVyY2VudCBvZiB0aGUgdGltZSBpdCBpcyBiZWNhdXNlIG9mIHRoZXNlIFVS TCB0ZXN0cy4gT3VyIGZhbHNlIHBvc2l0aXZlIHJhdGUgaXMgDQp2ZXJ5IHNt YWxsLCBidXQgaXQgaGFwcGVucy4gV2UgYXBvbG9naXplIGluIGFkdmFuY2Uu DQoNCklmIHlvdSBkaWQgc2VuZCB0aGUgaW5kaWNhdGVkIG1lc3NhZ2UgYW5k IGl0IHdhcyBibG9ja2VkDQppbiBlcnJvciwgd2Ugd2FudCB0byBmaXggdGhl IHByb2JsZW0uICBGb3J3YXJkIHRoaXMgbWVzc2FnZSB0bw0Kc3