got sigalarm, taking too long to process, aborted.

[cputerace]

Got the following error:

Tracking link: http:// what.phillysayswhat. biz/ 736460/ chws/fullpage.php

No recent reports, no history available

got sigalarm, taking too long to process, aborted.

Perhaps you can wait a few minutes and reload?

Any suggestions?

[Wazoo]

For starters, please hit the Forum FAQ / Glossary and read what a Tracking URL actually is ... what you posted was a link to a porn site .... not funny .. edited that link ...

If you want to talk about your spam, then please use an actual Tracking URL .... on the other hand, a search within this Forum for "sigalarm" will get you into many previous discussions on the causes of this issue.

[cputerace]

sorry about that, i copied the text right out of the spamcop page, it called it a tracking link and i didnt change it.

[get-even]

Got the following error:

Tracking link: http:// what.phillysayswhat. biz/ 736460/ chws/fullpage.php

No recent reports, no history available

got sigalarm, taking too long to process, aborted.

Perhaps you can wait a few minutes and reload?

Any suggestions?

24035[/snapback]

It seem that the "No recent reports" is unreliable -I reported that site yesterday (and they are already blacklisted a few other places now). Also, wildcard DNS:

% dig '*.phillysayswhat.biz' any

; <<>> DiG 9.3.0 <<>> *.phillysayswhat.biz any

;; global options: printcmd

;; Got answer:

;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 62958

;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 2

;; QUESTION SECTION:

;*.phillysayswhat.biz. IN ANY

;; ANSWER SECTION:

*.phillysayswhat.biz. 3577 IN CNAME www.phillysayswhat.biz.

;; AUTHORITY SECTION:

phillysayswhat.biz. 3577 IN NS ns7.bighostsolutions.com.

phillysayswhat.biz. 3577 IN NS ns1.realdnssystem.com.

phillysayswhat.biz. 3577 IN NS ns3.autonameservers.com.

phillysayswhat.biz. 3577 IN NS ns4.bighostsolutions.com.

;; ADDITIONAL SECTION:

ns3.autonameservers.com. 41026 IN A 61.240.131.209

ns4.bighostsolutions.com. 35877 IN A 218.7.120.118

;; Query time: 3 msec

;; SERVER: 127.0.0.1#53(127.0.0.1)

;; WHEN: Mon Feb 7 14:12:58 2005

;; MSG SIZE rcvd: 210

At least it is a spammer with a sense of humor - he also has been using the domain "bagelsandcreamcheese.biz" -- BTW. The actual operator is either or both of "Clever Link Trading Limited" and "Fantasy Content" of 14150 NE 20th St. Suite #99 Bellevue WA. 98007. He also has a few dozen other domains (whch I know of) that reference the same site. He tries to be legal (at least the porn part) - His "18 U.S.C. section 2257" filing copy is readable at (google cached copy, not the original) the URL:

http://216.239.57.104/search?q=cache:b6cCg...Cyprus%22&hl=en

(Note: the site it was cached from "parkleah.biz" is down.)

[get-even]

It seem that the "No recent reports" is unreliable -I reported that site yesterday (and they are already blacklisted a few other places now).  Also,  wildcard DNS:

I hate to reply to my own post, but I just reported another spam from the same site. Again, "No recent reports". Note, the wildcard DNS on the domain in the previous post and that there only one 'A' record if you follow the trail from the CNAME.

% dig www.phillysayswhat.biz any [at]218.7.120.118

; <<>> DiG 9.3.0 <<>> www.phillysayswhat.biz any [at]218.7.120.118

;; global options: printcmd

;; Got answer:

;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 63865

;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 2

;; QUESTION SECTION:

;www.phillysayswhat.biz. IN ANY

;; ANSWER SECTION:

www.phillysayswhat.biz. 30 IN A 211.144.164.204

;; AUTHORITY SECTION:

phillysayswhat.biz. 3600 IN NS ns1.realdnssystem.com.

phillysayswhat.biz. 3600 IN NS ns3.autonameservers.com.

phillysayswhat.biz. 3600 IN NS ns4.bighostsolutions.com.

phillysayswhat.biz. 3600 IN NS ns7.bighostsolutions.com.

;; ADDITIONAL SECTION:

ns4.bighostsolutions.com. 3600 IN A 218.7.120.118

ns7.bighostsolutions.com. 3600 IN A 222.223.134.244

;; Query time: 504 msec

;; SERVER: 218.7.120.118#53(218.7.120.118)

;; WHEN: Tue Feb 8 18:18:21 2005

;; MSG SIZE rcvd: 210

Also, as I mentioned before, at least nearly a dozen other (also reported) domains refer to the same IP (it does move around, see that the TTL is only one hour for the name servers and just 30 seconds for the actual site).