Re: redirect to meagpass.net while using Tor

To: or-talk@xxxxxxxxxxxxx

Subject: Re: redirect to meagpass.net while using Tor

From: John Brooks <special@xxxxxxxxxxxxxxxx>

Date: Tue, 13 Jan 2009 09:42:59 -0700

Delivered-to: archiver@xxxxxxxx

Delivered-to: or-talk-outgoing@xxxxxxxx

Delivered-to: or-talk@xxxxxxxx

Delivery-date: Tue, 13 Jan 2009 11:43:05 -0500

Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:sender:received:in-reply-to :references:date:x-google-sender-auth:message-id:subject:from:to :content-type; bh=oOi2joJ63CJt2mvai3GADadMBJNG1sj/Wi0QbRLV6cs=; b=oHY+ptLhoLOaKfX5DYcLWN+3DECPdhjYhfvYDTbWtKsn9kC95ZlXDvAmwtGr5BVs4L 5ogk3UEXgN2SqB+ozrlZoUpYrk8SN96LOafmEMJIhMzYqxwKy/Zvy6A19KpPTok/Y3sP ZoqL/+iWRZn5LzdAxHcQtbv8wiP9qp9bvSisQ=

Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:sender:in-reply-to:references:date :x-google-sender-auth:message-id:subject:from:to:content-type; b=aVSOgnHOGc2oXQW36Ko6UHvcZ1Y8k+hYz+aHV4ursUp+ZIDjI1UT91UmJg1tGDmfmu 1196OhWLnxZiUvlNc+P+F0wWvQKUcWGyU2ZrXRKPx1CvA9Nl+OC70tW+CRB/buwBKGRj QbsiIs9In66AyZ/gOFGd1fropf9iOzjEDl5Ho=

In-reply-to: <4e79549a0901130837g25869e57le369847c5b0c7146@xxxxxxxxxxxxxx>

References: <4e79549a0901130837g25869e57le369847c5b0c7146@xxxxxxxxxxxxxx>

Reply-to: or-talk@xxxxxxxxxxxxx

Sender: owner-or-talk@xxxxxxxxxxxxx

Figure out what exit is doing this (visit http://torcheck.xenobite.eu/ while it's happening) and add it by name or hash to the ExcludeNodes option in your torrc - this should prevent it from being used for any exit traffic.

Also, let us know here so the authorities can mark it as a bad exit as well.

On Tue, Jan 13, 2009 at 9:37 AM, KT <listclient@xxxxxxxxx> wrote:

Recently a large number of my requests are being redirected to
https://kangnam.megapass.net:7003/index.html?sso=121.138.5.103&no=8403&origin=[http://actual
request] when I am using Tor. :(
Is this a Tor exit trying to get credit for an affiliate scheme with
megapass? Is there anything that can be done?
Thanks