[ale] Is delivered mail

[Fulton Green]

On Sun, Feb 20, 2005 at 05:09:36PM -0500, James Baldwin wrote:
> Yes, I have received multiple attachment from 202.9.146.122 which is 
> the ONLY source of this virus. This is why I brought this to the 
> attention of the list days ago. This IP is listed in the CBL and 
> Spamhaus XBL. It is passing the W32/Bagle.bk at MM virus.
> 
> Here is the delivery line to room17:
> 
> Received: from unknown (HELO hemant.com) (202.9.146.122)
> 	by mail.room17.com with SMTP; 19 Feb 2005 12:42:17 -0000

Guess I'll jump in here ...

That address is reported by APNIC to be within the network of VSNL, a
major broadband provider in India (and 45% owned by Tata, a major
provider of offshoring services).  I sent an email to abuse at vsnl.com
several days ago, with apparently no effect, so I now just block out
anything coming from that IP address.