re: changes to remailer@jpunix.com

I read about some changes that John Perry made to his remailer, since
it is being abused.  (Sorry to hear it!)

I thought he said he is doing source blocking (I deleted the message
and can't check.)  Is this true?  Were there no hops between the
abuser and the remailer?  How can you prevent the abuser from just
chaining through different paths to reach your remailer and continuing
to use it?  Or am I remembering incorrectly ;)

Random Factor suggested (among other things)
> * require encryption for incoming messages.

Requiring encryption is OK, as long as you don't require the remailing
header and message body to be encrypted together.  If you do, like the
extropia remailer does, then you can't form reply blocks that include
such a remailer (since the reply block is created by a sender who
obviously doesn't have the message body that his recipient will use
the reply block to respond to).

-----BEGIN PGP SIGNED MESSAGE-----

In message <9411172231.AA27739@fast.owlnet.rice.edu> you write:
>
>I thought he said he is doing source blocking (I deleted the message
>and can't check.)  Is this true?  Were there no hops between the
>abuser and the remailer?  How can you prevent the abuser from just
>chaining through different paths to reach your remailer and continuing
>to use it?  Or am I remembering incorrectly ;)

There were no hops and the person that did it signed the message. That is 
why it was so easy to track.


 John A. Perry - KG5RG - perry@jpunix.com
 WWW - http://jpunix.com
 PGP 2.62 key for perry@jpunix.com is on the keyservers.
 PGP-encrypted e-mail welcome!
 
 Finger kserver@jpunix.com for PGP keyserver help.
 Finger remailer@jpunix.com for remailer help.

-----BEGIN PGP SIGNATURE-----
Version: 2.6.2
Comment: Finger kserver@jpunix.com for PGP keyserver help.

iQCVAwUBLsvnyVOTpEThrthvAQGoOwP/cmEamhUubgd+aCJm1PyIw9mzr1PDzdJW
i5Cl7mb6m110tLzTmQhs+pau2K/lF7I52IBekewr/LLS5KZOtpinb52dhj/Dp20X
5kBcvRRy2R5d0N/gvuVWon8rs6J0j2quJknTYA6fk024ACph864aeHUgyK/1U7V6
sWg8ExanhAs=
=PlZO
-----END PGP SIGNATURE-----

-----BEGIN PGP SIGNED MESSAGE-----

John Perry writes:
> There were no hops and the person that did it signed the message. That is
> why it was so easy to track.

*quizzical look*  
Any idea, then, why the person bothered with remailing at all ?

- -L. McCarthy

-----BEGIN PGP SIGNATURE-----
Version: 2.6.1

iQCVAwUBLsv0lWf7YYibNzjpAQG+AAP/eSuWa9P6tjNe8u87nNOmcJkHaLfKakYS
wMzvD05xqwvJn1VXwpTBNs6WFmAdRsQZT90X5Absr1Ntvr19JMF8AVqqggE+JqNf
L9o3xj3Vnln1VajpGvPtloW5nw/JG8gn7IZJZX5yUePuzF+ywtNV81RgLPs8tIzT
SMEgSJJl0MQ=
=/1Cj
-----END PGP SIGNATURE-----

-----BEGIN PGP SIGNED MESSAGE-----

In message <199411180026.TAA02840@bali.cs.umass.edu> you write:
>-----BEGIN PGP SIGNED MESSAGE-----
>
>John Perry writes:
>> There were no hops and the person that did it signed the message. That is
>> why it was so easy to track.
>
>*quizzical look*  
>Any idea, then, why the person bothered with remailing at all ?

I'm sure he didn't realize what he had done. When he "shar"ed the code it 
added his email address to each segment. He probably didn't think to 
check it. All I had to do was go to the newsgroup and read the article to 
see who it was.. Duh..

 John A. Perry - KG5RG - perry@jpunix.com
 WWW - http://jpunix.com
 PGP 2.62 key for perry@jpunix.com is on the keyservers.
 PGP-encrypted e-mail welcome!
 
 Finger kserver@jpunix.com for PGP keyserver help.
 Finger remailer@jpunix.com for remailer help.

-----BEGIN PGP SIGNATURE-----
Version: 2.6.2
Comment: Finger kserver@jpunix.com for PGP keyserver help.

iQCVAwUBLsv/i1OTpEThrthvAQGjnQP/fub8+NqlLd4KhFkWSUFRxjnntbmLLd5A
5awgaObwmMBzIph++vjxnb8c/Bywp+U6m83pF9k3UdPsd1RmBoXuIPtu7UskhvTC
ZNo7ubE/Y4prrlZnuhgM6tkym4VUVAuJNp5rPvz+R96WpwEevRS6fBAPqTW+d4GX
z0Ay1ZPXC9k=
=h/gx
-----END PGP SIGNATURE-----