Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

How can I read control.cancel?

2 views
Skip to first unread message

layh...@bonbon.net

unread,
May 5, 2003, 11:24:28 PM5/5/03
to
layh...@bonbon.net wrote:
>
> I can subscribe, but there never seems to be any messages
> there, or only just a few. I KNOW this ain't the case.
>
> Is there an FAQ out there? (I've read Skriven's cancel FAQ)
> Is this something only net admins can do? Do I need a
> better/different newsreader? More ram? Garlic clove hung
> over my PC?
>
> From what I understand, the axiom is "No cancel message, no
> cancel", but how can I verify anything if I can't even read
> the group?

DOH!! I typoed one of the newsgroups I sent this to.

Also, I forgot to mention, when my machine detects "unread
messages" in control.cancel, I'm informed that there are
thousands of unread cancel messages awaiting my attention.

I select "download all", and I get 3 or 4. Any ideas?

David Ritz

unread,
May 6, 2003, 12:52:10 AM5/6/03
to
-----BEGIN PGP SIGNED MESSAGE-----

[note Followup-To: news.admin.net-abuse.usenet]

In article <3EB72AEC...@bonbon.net>, layh...@bonbon.net wrote:

lay> layh...@bonbon.net wrote:

>> I can subscribe, but there never seems to be any messages there,
>> or only just a few. I KNOW this ain't the case.

>> Is there an FAQ out there? (I've read Skriven's cancel FAQ) Is
>> this something only net admins can do? Do I need a
>> better/different newsreader? More ram? Garlic clove hung over my
>> PC?

Anyone can do it, if they have access to a server which is useful
for this purpose.

>> From what I understand, the axiom is "No cancel message, no
>> cancel", but how can I verify anything if I can't even read the
>> group?

If you cannot find what you are looking for, ask. Please note,
specifics will be most helpful.

lay> DOH!! I typoed one of the newsgroups I sent this to.

lay> Also, I forgot to mention, when my machine detects "unread
lay> messages" in control.cancel, I'm informed that there are
lay> thousands of unread cancel messages awaiting my attention.

lay> I select "download all", and I get 3 or 4. Any ideas?

I'll start out by assuming that you're accessing news.qwest.net
(news.uswest.net). This server is running Typhoon v1.2.3. The
only articles you're likely to see in control.cancel on most
servers running High Winds server software, are those which list
control.cancel in the Newsgroups line. Chances are most of what
you are seeing are articles from alpha-spam runs, where the
spammers actually posted to this pseudo-group.

Here's an example of a telnet session to a server on which
control.cancel is accessible. It shows that there are 308,019
messages available, with article numbers 175210413 through
175518431. I grabbed the headers of the most recent cancel
received.

]rossem# telnet news.alt.net 119
]Trying 207.14.113.17...
]Connected to news.alt.net.
]Escape character is '^]'.
]200 Check out http://www.altopia.com for info about NNTP access (posting ok).
]AUTHINFO USER [elided]
]381 PASS required
]AUTHINFO PASS [elided]
]281 Ok
]GROUP control.cancel
]211 308019 175210413 175518431 control.cancel
]head 175518431
]221 175518431 <cancel.f3be.qDGta.455625$0M1.4...@telenews.teleline.es> head
]Xref: news control.cancel:175518431
]Path: news.alt.net!news-out.visi.com!petbe.visi.com!newsfeeds.sol.net!newsengine.sol.net!news-feed.riddles.org.uk!news-in.riddles.org.uk!news.noc.cabal.int!news-out.riddles.org.uk!annihilator!cyberspam!bincancel!not-for-mail
]Newsgroups: vmsnet.sources.games
]Subject: cmsg cancel <qDGta.455625$0M1.4...@telenews.teleline.es> ignore no reply
]Control: cancel <qDGta.455625$0M1.4...@telenews.teleline.es>
]Message-ID: <cancel.f3be.qDGta.455625$0M1.4...@telenews.teleline.es>
]Date: Tue, 06 May 2003 04:16:41 +0000
]Sender: juand...@hotmail.com
]From: binc...@erlenstar.demon.co.uk
]Organization: Annihilator v0.3
]Approved: y
]X-Cancelled-By: binc...@erlenstar.demon.co.uk
]X-No-Archive: yes
]X-Original-Path: ...!sn-xit-09!supernews.com!newsfeed-east.nntpserver.com!newsfeed-west.nntpserver.com!hub1.meganetnews.com!nntpserver.com!newsfeed.news2me.com!newsfeed2.easynews.com!newsfeed1.easynews.com!easynews.com!easynews!border3.nntp.aus1.giganews.com!nntp.giganews.com!newsfeed.cwix.com!nsnmpen1-lo.nuria.telefonica-data.net!telenews.teleline.es!not-for-mail
]X-Original-From: juand...@hotmail.com (Juandemones)
]X-Original-NNTP-Posting-Host: 10.20.31.4
]X-Original-Subject: (??] [07/12] - "Dragon Quest (FLY) Episodio 19 - Cumbre del ejercito diablo [www.Hispanime.da.ru].avi.006 (23/30)"
]X-Original-Date: Tue, 06 May 2003 04:13:10 GMT
]X-Original-X-Trace: telenews.teleline.es 1052194390 10.20.31.4 (Tue, 06 May 2003 06:13:10 MET DST)
]X-Original-NNTP-Posting-Date: Tue, 06 May 2003 06:13:10 MET DST
]X-Cancel-ID: %^(/TVI]#&YGPG=']0B`UD<2/P.:K3R>E_*G=R4XL`9W0F\SRMULSL<B
]Lines: 3
].
]DATE
]111 20030506041818
]QUIT
]205
]Connection closed by foreign host.

Here's another captured telnet session to another server. It has
a shorter expire time for control.cancel, so only 10,241 messages
were available at the time.

]rossem# telnet news.visi.com 119
]Trying 209.98.13.60...
]Connected to news.visi.com.
]Escape character is '^]'.
]200 VISI.com - AUTH - Email ne...@visi.com - Diablo 5-CUR-20030215-00 (posting ok)
]AUTHINFO USER [elided]
]381 PASS required
]AUTHINFO PASS [elided]
]281 Ok
]GROUP control.cancel
]211 10241 143891293 143901533 control.cancel
]HEAD 143901533
]221 143901533 <cancel.f2b7.1ista.17630$pa5....@rwcrnsc52.ops.asp.att.net> head
]Path: authen.newsreader.visi.com!newsreader.visi.com!phobos.visi.com!zeus.visi.com!news-out.visi.com!petbe.visi.com!news.maxwell.syr.edu!newsfeeds.sol.net!news.noc.cabal.int!gnus.foo.bar!cyberspam!not-for-mail
]From: remov...@mindspring.com
]Organization: SpamBusters!
]Newsgroups: mn.forsale
]Subject: cmsg cancel <1ista.17630$pa5....@rwcrnsc52.ops.asp.att.net> no reply ignore
]Date: 6 May 2003 03:00:13 GMT
]Control: cancel <1ista.17630$pa5....@rwcrnsc52.ops.asp.att.net>
]Message-ID: <cancel.f2b7.1ista.17630$pa5....@rwcrnsc52.ops.asp.att.net>
]Sender: dav...@cowtown.net
]X-Cancelled-By: remov...@mindspring.com
]X-No-Archive: yes
]Approved: y
]X-Original-Path: ...!uunet!ash.uu.net!wn12feed!worldnet.att.net!204.127.198.203!attbi_feed3!attbi.com!rwcrnsc52.ops.asp.att.net.POSTED!not-for-mail
]X-Original-NNTP-Posting-Host: 12.238.51.139
]X-Original-Subject: Removable Drive Kits $15.99
]X-Original-Date: Mon, 05 May 2003 11:54:37 GMT
]X-Original-From: dav...@cowtown.net
]X-Original-X-Trace: rwcrnsc52.ops.asp.att.net 1052135677 12.238.51.139 (Mon, 05 May 2003 11:54:37 GMT)
]X-Cancel-ID: `R(#!>S_/F*GKLU0`12)+#-2,S4<+VZ2U][]@#%$N5QC@F-E3%^>P@<.
]Lines: 1
]Xref: authen.newsreader.visi.com control.cancel:143901533
].
]QUIT
]205 Transferred 1375 bytes in 0 articles, 1 group. Disconnecting.
]Connection closed by foreign host.

There is a chance Qwest/USwest filters cancels. If this is the
case, they won't be found on the server. From past experience,
they don't (and should) filter outbound cancels, as their servers
have been used in various attacks on the network, usually via
promiscuous proxies.

If there is something in particular for which you're looking, let
me know.

- --
David Ritz <dr...@suespammers.org>
The suespammers.org mail server is located in California; do not
send unsolicited bulk e-mail or unsolicited commercial e-mail to my
suespammers.org address.

-----BEGIN PGP SIGNATURE-----
Version: PGP 7.2

iQCVAwUBPrc/G6dkAgrqVVPRAQGQ7gP+O8YxP24nP6PNcr0ARZGj6N0zqp62Ocfa
FM919Q3TG6CzFGzt6DHcIKWs9sVKdUNyivDHnQ3f2Gel0DJpSeAJ5NneMe6yNKGB
pXpwU6bRebSjNE2ZVE2XsUYVKMwzM4ejuWcB02nOqRFs8Ij1WIVzPmpRQYLRApjw
CLYOH9RTs6s=
=GzCj
-----END PGP SIGNATURE-----

Dr Ivan D. Reid

unread,
May 6, 2003, 7:50:48 AM5/6/03
to
On Mon, 05 May 2003 20:20:28 -0700, layh...@bonbon.net <layh...@bonbon.net>
wrote in <3EB729FC...@bonbon.net>:

> I can subscribe, but there never seems to be any messages
> there, or only just a few. I KNOW this ain't the case.

> Is there an FAQ out there? (I've read Skriven's cancel FAQ)
> Is this something only net admins can do? Do I need a
> better/different newsreader? More ram? Garlic clove hung
> over my PC?

> From what I understand, the axiom is "No cancel message, no


> cancel", but how can I verify anything if I can't even read
> the group?

I understand that some newsadmins limit the retention of the
cancel group, sometimes to very short times. Try looking at another
server -- it's not hard to track down one which allows outsiders in,
tho' it's harder to find one that allows posting as well.

--
Ivan Reid, Electronic & Computer Eng., Brunel Uni. Ivan...@brunel.ac.uk

0 new messages