All of "my" bounces are coming from emails that originated from 195.157.87.253... Maybe it's the same guy with others here? Mark Fyi.. netadmin@aaa-01:~> whois -h whois.ripe.net 195.157.87.253 % This is the RIPE Whois server. % The objects are in RPSL format. % % Rights restricted by copyright. % See http://www.ripe.net/ripencc/pub-services/db/copyright.html inetnum: 195.157.70.0 - 195.157.87.255 netname: NSUK-PARTITION-LL descr: Connectivity country: GB admin-c: NSUK2-RIPE tech-c: NSUK1-RIPE status: LIR-PARTITIONED PA remarks: ************************************************************** remarks: * Please do not send abuse reports to tech or admin contacts * remarks: * All abuse reports to abuse@netscalibur.co.uk * remarks: ************************************************************** remarks: * This is an partition object and does not represent a valid # remarks: # assignment. Valid assignments have status: ASSIGNED PA # remarks: ############################################################## notify: ripe@netscalibur.co.uk mnt-by: NETSCALIBURUK-MNT mnt-lower: NETSCALIBURUK-MNT changed: ripe@netscalibur.co.uk 20011025 changed: ripe@netscalibur.co.uk 20020110 changed: ripe@netscalibur.co.uk 20020514 source: RIPE route: 195.157.0.0/16 descr: Netscalibur UK Ltd origin: AS8272 mnt-by: NETSCALIBURUK-MNT changed: ripe@netscalibur.co.uk 20010706 source: RIPE role: Netscalibur UK Hostmaster address: Netscalibur UK Ltd address: 9 Selsdon Way address: Cityharbour address: London E14 9GL address: UK phone: +44 (0)870 887 8800 fax-no: +44 (0)870 887 8867 e-mail: hostmaster@netscalibur.co.uk admin-c: CSP3-RIPE admin-c: SY131-RIPE tech-c: NSUK1-RIPE tech-c: NSUK3-RIPE nic-hdl: NSUK2-RIPE remarks: Hostmaster remarks: **** remarks: * All abuse reports to abuse@netscalibur.co.uk remarks: **** notify: ripe@netscalibur.co.uk mnt-by: NETSCALIBURUK-MNT changed: ripe@netscalibur.co.uk 20010712 changed: ripe@netscalibur.co.uk 20010731 changed: ripe@netscalibur.co.uk 20020109 changed: ripe@netscalibur.co.uk 20020116 source: RIPE role: Netscalibur UK NOC address: Netscalibur UK Ltd address: 9 Selsdon Way address: Cityharbour address: London E14 9GL address: UK phone: +44 (0)845 117 2200 fax-no: +44 (0)870 887 8867 e-mail: noc@netscalibur.co.uk admin-c: ZP64-RIPE admin-c: DJH8-RIPE tech-c: NSUK2-RIPE tech-c: NSUK3-RIPE nic-hdl: NSUK1-RIPE remarks: Network Operations Center remarks: **** remarks: * All abuse reports to abuse@netscalibur.co.uk remarks: **** notify: ripe@netscalibur.co.uk mnt-by: NETSCALIBURUK-MNT changed: ripe@netscalibur.co.uk 20010711 changed: ripe@netscalibur.co.uk 20020116 source: RIPE -- Mark Segal Director, Network Planning FCI Broadband Tel: 905-284-4070 Fax: 416-987-4701 http://www.fcibroadband.com Futureway Communications Inc. is now FCI Broadband -----Original Message----- From: Jim Deleskie [mailto:jdeleski@rci.rogers.com] Sent: August 20, 2003 10:36 AM To: nanog@merit.edu Subject: RE: To send or not to send 'virus in email' notifications? Kind of like a statement made @ a security conference I was recently at, 'Hacking from the conference = Dismissal, if you have to ask No you shouldn't' -----Original Message----- From: Gregory Hicks [mailto:ghicks@cadence.com] Sent: Wednesday, August 20, 2003 10:30 AM To: nanog@merit.edu; jmaimon@ttec.com Subject: Re: To send or not to send 'virus in email' notifications?

Date: Wed, 20 Aug 2003 10:25:28 -0400 From: Joe Maimon <jmaimon@ttec.com> To: nanog@merit.edu Subject: To send or not to send 'virus in email' notifications?

Considering the amount of email traffic generated by responding to forged virus laden email from culprits like sobig should email virus scanning systems be configured to send notifications back to sender or not?

Not.