More forged cancels

These were found in control.  Note that they all have the string
"CANCELLED", and all are timestamped 17:56.

The first one is definitely forged.  The others look like they
probably are.  I asked Jukka Santala, and he didn't issue that
forgery.  I asked Joel Rubin, and haven't gotten a response yet.
I haven't asked the other people yet.

So I'll go ahead and post this, crossposted to the affected groups.

It looks like the Cancelschnauzer is hitting lots of groups.

A note to the canceller:  if you try to cancel this, I'll just put it
back.

-----------------begin control message
Path:
sundog.tiac.net!news.sprintlink.net!in2.uu.net!sunic!mn6.swip.net!seunet!news2..swip..net!plug..ne
ws.pipex.net!pipex!tank.news.pipex.net!pipex!usenet.eel.ufl.edu!news.gmi..edu!msunews!netnew
s.upenn.edu!ts7-28.upenn.edu!user
From: 73323.603@compuserve.com
Newsgroups: soc.culture.german,soc.culture.jewish
Subject: cmsg cancel <73323.603-3009951517290001@ts7-28.upenn.edu>
Date: Sun, 1 Oct 1995 17:56 GMT
Organization: The National Alliance
Message-ID: <cancel.73323.603-3009951517290001@ts7-28.upenn.edu>
NNTP-Posting-Host: ts7-28.upenn.edu
Approved: 73323.603@compuserve.com
Control: cancel <73323.603-3009951517290001@ts7-28.upenn.edu>
X-Cancelled-By: 73323.603@compuserve.com
Lines: 1

CANCELLED.

----end control message

These others are suspicious, the Santala cancel is definitly forged.
I don't have the original posts of any of these, I suspect they are
all related to National Alliance.

------------rest of the cancels:
Path:
sundog.tiac.net!news.kei.com!news.mathworks.com!tank.news.pipex.net!pipex!in2..uu..net!howla
nd.reston.ans.net!ix.netcom.com!netnews
From: jmrubin@ix.netcom.com (Joel Rubin)
Newsgroups:
soc.culture.german,soc.culture.jewish,rec.radio.shortwave,alt.2600
Subject: cmsg cancel <44lfpn$qoh@ixnews7.ix.netcom.com>
Date: Sun, 1 Oct 1995 17:56 GMT
Organization: Netcom
Message-ID: <cancel.44lfpn$qoh@ixnews7.ix.netcom.com>
NNTP-Posting-Host: ix-sf17-08.ix.netcom.com
Approved: jmrubin@ix.netcom.com (Joel Rubin)
Control: cancel <44lfpn$qoh@ixnews7.ix.netcom.com>
X-Cancelled-By: jmrubin@ix.netcom.com (Joel Rubin)
Lines: 1

CANCELLED.

========
Path:
sundog.tiac.net!news.sprintlink.net!in2.uu.net!sun4nl!xs4all!mail
From: nobody@alpha.c2.org (Anonymous)
Newsgroups:
mail.cypherpunks,alt.privacy.anon-server,alt.2600,alt.stop.spamming,alt..stop-
spamming
Subject: cmsg cancel <199510010427.VAA28730@infinity.c2.org>
Date: Sun, 1 Oct 1995 17:56 GMT
Organization: Mail to Usenet Gateway at Utopia
Message-ID: <cancel.199510010427.VAA28730@infinity.c2.org>
NNTP-Posting-Host: utopia.hacktic.nl
Approved: nobody@alpha.c2.org (Anonymous)
Control: cancel <199510010427.VAA28730@infinity.c2.org>
X-Cancelled-By: nobody@alpha.c2.org (Anonymous)
Lines: 1

CANCELLED.

========
Path:
sundog.tiac.net!news.sprintlink.net!in2.uu.net!sunic!sunic!sunic.sunet.se!news..funet..fi!zippo..uwa
sa.fi!!jsantala
From: jsantala@walli.uwasa.fi (Jukka Santala)
Newsgroups: alt.2600,news.admin.net-abuse.misc
Subject: cmsg cancel <tlqbws0p37xU084yn@walli.uwasa.fi>
Date: Sun, 1 Oct 1995 17:56 GMT
Organization: And you think we're organized?
Message-ID: <cancel.tlqbws0p37xU084yn@walli.uwasa.fi>
NNTP-Posting-Host: walli.uwasa.fi
Approved: jsantala@walli.uwasa.fi (Jukka Santala)
Control: cancel <tlqbws0p37xU084yn@walli.uwasa.fi>
X-Cancelled-By: jsantala@walli.uwasa.fi (Jukka Santala)
Lines: 1

CANCELLED.

========
Path:
sundog.tiac.net!news.texas.net!newshost.comco.com!news.tamu.edu!news.utdallas..edu!news01..
aud.alcatel.com!gatech!news.mathworks.com!zombie.ncsc.mil!simtel!news.sprintlink..net!in2..uu..
net!sunic!mn6.swip.net!seunet!news2.swip.net!plug.news.pipex.net!pipex!tank..news..pipex..net!pi
pex!news1.digital.com!nntp-hub2.barrnet.net!nntp-ucb.barrnet.net!well!usenet
From: themed@well.com
Newsgroups: alt.2600
Subject: cmsg cancel <44mknk$1m0@nkosi.well.com>
Date: Sun, 1 Oct 1995 17:56 GMT
Organization: The Whole Earth 'Lectronic Link, Sausalito, CA
Message-ID: <cancel.44mknk$1m0@nkosi.well.com>
NNTP-Posting-Host: sf-tty7-ppp.well.com
Approved: themed@well.com
Control: cancel <44mknk$1m0@nkosi.well.com>
X-Cancelled-By: themed@well.com
Lines: 1

CANCELLED.

========

Michael R. Grabois (orbit@ix.netcom.com) wrote:
: >From: 73323.603@compuserve.com

: Does this mean that the cancel came from the Compuserve account?

No - he was the original sender of the message. The cancel message must
appear to come from the originator of the post.

-- 
**********************************************
*   Ryan O'Connell <cs95rro@brunel.ac.uk>    *
*  http://http1.brunel.ac.uk:8080/~cs95rro/  *
*    finger:cs95rro@molnir.brunel.ac.uk      *
*   (Includes PGP key and talk location)     *
**********************************************

On Sun, 01 Oct 1995 23:45:24 GMT, jbyrd@tiac.net (Jim Byrd) wrote:

[snip]

>-----------------begin control message
>Path:
>sundog.tiac.net!news.sprintlink.net!in2.uu.net!sunic!mn6.swip.net!seunet!news2..swip..net!plug..ne
>ws.pipex.net!pipex!tank.news.pipex.net!pipex!usenet.eel.ufl.edu!news.gmi..edu!msunews!netnew
>s.upenn.edu!ts7-28.upenn.edu!user
>From: 73323.603@compuserve.com
>Newsgroups: soc.culture.german,soc.culture.jewish
>Subject: cmsg cancel <73323.603-3009951517290001@ts7-28.upenn.edu>
>Date: Sun, 1 Oct 1995 17:56 GMT
>Organization: The National Alliance
>Message-ID: <cancel.73323.603-3009951517290001@ts7-28.upenn.edu>
>NNTP-Posting-Host: ts7-28.upenn.edu
>Approved: 73323.603@compuserve.com
>Control: cancel <73323.603-3009951517290001@ts7-28.upenn.edu>
>X-Cancelled-By: 73323.603@compuserve.com
>Lines: 1

>CANCELLED.

>----end control message

Does this mean that the cancel came from the Compuserve account?
Forging cancel notices is definitely against CIS rules, as is
unsolicited e-mail. I've already talked to a sysop there about it, and
he said he'd pass it along to the CIS Security folks.

If nothing else, that may get his account revoked. Hey, small
victories.



        Michael R. Grabois    | orbit@ix.netcom.com
        Houston, TX           | CI$: 74737,2600
-------------------------------------------------------
    Gravity. It's not just a good idea, it's the law.