Expand all has stopped working today!

From: (Vanguardlh)

From: VanguardLH

Individual.net has, so far, responded that they won't block uuhec.net
because the original articles are still on the server despite having to
find them in a flood of forged duplicates (where Path, From, and
Message-ID have been altered and References has been stripped). They
figure it is a misconfigured e-mail-to-NNTP gateway and the screwup is
probably not deliberately malicious; however, that doesn't change the
malicious effect whether accidental or deliberate. I'm still trying to
convince them that this constitutes abuse by altering the original
articles to pretend they originated from their server (Path header),
falsifying the poster's identify (From header), and destroying article
ID and tracking (Message-ID header). uuhec.net is spewing forgeries.

I am notifying uuhec.net of their screwup just in case it was accidental
although malicious in effect.

For those who use NNTP client capable of regex filtering, I've defined
the following filters to clean up this newsgroup (and any others that
uuhec.net might touch):

- For their alteration of the Path header (to pretend articles were
submitted through them), and to eliminate not only when they pretend
they are the injection node but also whenever any articles are peered
through them (i.e., don't just test on just the injection node but on
any node in Path being them) and under the presumption you are not
using uuhec.net (which would have just the one uuhec.net node in the
Path you see):

^Path: \S+!(\w+\.)?uuhec.net!

- For their destruction of the poster's ID in the From header:

^From: \s*\(

- For their corruption of the Message-ID header used for article
identification and tracking:

^Message-ID:

How you apply the regex filters depends on your NNTP client. Mine
supports From and Message-ID, so "^From: " and "^Message-ID: " are not
specified in the regex string; however, Path is a non-overview header,
so I must use a generic header filter by specifying the header name in
the filter.

Once I applied those filters, this newsgroup was cleaned of uuhec.net's
faked duplicates. They are NOT peering the original articles through
their gateway. They are spewing fakes aka forgeries.

--- Internet Rex 2.31
* Origin: The gateway at Omicron Theta/2 (1:261/20.119)


--- Internet Rex 2.31
* Origin: The gateway at Omicron Theta/2 (1:261/20.119)