   Contents

Table of contents for The Unabomber Help.

What is the Unabomber?

Installation

Using the Program

Anonymity

A Legal Warning


What is The Unabomber?

A description of the program.

     The Unabomber is an anonymous, multiple-messaging mail sending tool.  In essence, the program sends multiple copies of the same message to the same person.  It masks the sender's actual identity and location, and allows the sender to fill in this information to his or her liking.  If the mail is bounced from a server that does not support tracebacks, the program is 100% anonymous.

     The Unabomber and programs of its type are commonly referred to as "mail bombers", because if used irresponsibly they can severely hinder the recipient's system's performance.  The author of The Unabomber does not condone or encourage this use of the program, however.  If this is your intended use of the program it should be removed from your system.


Installation

How to install the program.

     Installation is pretty straightforward.  You first create a directory in which you would like The Unabomber to reside.  You then move the self-extracting executable (UNA.EXE) to this directory, execute it, and copy the following files to the following locations:

ipport.vbx................................................................System Directory (i.e., c:\windows\system)

vbrun300.dll............................................................System Directory

readme.txt...............................................................You can delete it, if you want

     Just copy these files to these locations, leave the rest where they are, and you should be on your way.


Using the Program

How to use the program.

     When the program is launched, the user is greeted with a "splash" screen.  After the user clicks the "Ok" button:

 the main program window appears.

The Main Program Window

     To send mail to someone, fill in the blanks (Mail Server, To/From, etc.).  The "To:" field lists the parties that will receive the message.  After typing their name in the entry box, click the

button.

     You can then send the mail, or add other recipients in the same fashion.  The Mail Server entry is the server from which the message will be "bounced".  The "Apparent" Server field is the server from which it will appear that the message came from.  You must fill in something for pretty much all of these.  No, you don't have to put your real name in. Like it says in the warning, this program should be used only for educational or entertainment purposes.  Anyway, fill in the blanks, put in your oh-so-clever message, and click the button that looks like this:

     The program will send X number of duplicates to the addressee, where X is the number you put in the Number entry.

     The comic bubble:

 tells you the current status of the program, and the [image] indicator tells you how

many messages remain to be sent.

     The "Mail Server: " field is linked to a list of anonymous servers provided in

SERVERS.INI.  By clicking the [image] and [image] buttons, you can

add and remove hosts to and from this list.


Warning!!!

If operated irresponsibly, The Unabomber can be used to harass and inconvenience others, and may possibly cause the loss of important data.  The Unabomber should only be used for the purpose of education and entertainment, and never for the purpose of damaging or harassing other computer users.  The author of The Unabomber accepts no responsibility for any consequences resulting either directly or indirectly from the use/misuse of this product.  This product is provided to the public domain, free of charge, and as such carries no warranty or guarantee against loss of data or any other damages due to its use/misuse.  By using The Unabomber, you accept full responsibility for the consequences of your actions.  If you do not accept the terms of this agreement, the program should be removed from your computer.


Anonymity

How anonymous am I?

     How anonymous am I?  This all depends on the server through which you do your mailing.  Basically, newer version of sendmail will look up your server and put a reference to it in the headers of your messages.  Older versions assume that the information provided to them is correct, and consequently the mail is 100% anonymous.

     Provided with The Unabomber is a list of servers that will (at the time of writing) send anonymously.  This list is located in SERVERS.INI, and can be accessed through the program.

     Before using The Unabomber, I would suggest that you find a host that uses an older version of sendmail.  To do this, proceed as follows:

  1.  Come up with a host name.  This doesn't have to be any name in particular; it does, however, have to exist.  You can try FTP hosts, WWW hosts, etc.

  2.  Telnet to the site from port 25.  If you are using Windows' Telnet program, put the hostname in the Host box, and change the "Port: TELNET" box to "Port: 25".

  3.  If the site accepts SMTP connections, you will be greeted by a message.  For example,

220 Hostname Smail3.1.29.1 #3 ready at Wed, 31 Jul 96 14:19 MDT.

  4.  After the greeting, type:

      HELO fake.com

     The host will respond with some sort of introduction.

  3.  Type in the following sequence of commands, following each line with a carriage return:

   MAIL FROM:fake@fake.com

   RCPT TO: Your e-mail address

   DATA

   this is a test

   .

   QUIT

     The remote host will then terminate the connection, and send your mail.  Check your mail, and look at the headers to determine whether or not the message was sent anonymously.  Look for a "RECEIVED:" line specifying your computer as the sender.  For example:

Received: from fake.com (Your Computer) by Hostname (8.6.10/8.6.9) with SMTP

id NAA04438.; Wed, 31 Jul 1996 13:00:39 -0400

     This is no good, because the remote host (Hostname in this case) looked up your server's real address (Your Computer in this case).  A successful attempt would look like:

Received: from fake.com by Hostname with smtp

(Smail3.1.29.1 #3) id m0ulhh1-000FAUC; Wed, 31 Jul 96 14:16 MDT

     Note that in this case, the "from" field was filled not with your computer's address but with the remote host's.  This message will be 100% anonymous, as both the user ID and the server ID have been concealed.

     Although the former case is not 100% anonymous, it will serve for some purposes.  In this scenario, the computer from which the mail was sent is known, but not the sender (Note:  If the recipient contacts your system administrator, it is highly conceivable in this case that they will be able to determine the sender). If the mail is sent from a computer that many people have access to without logging in (a computer lab at a college, for example) it will also be effectively anonymous.  Some servers, however, can do tracebacks including the user ID of the sender.

     As stated previously, The Unabomber comes with a list of servers that will bounce anonymously.  However, due to the possibility of one or more of these servers upgrading their SMTP implementations, it is suggested that you test them by sending yourself an anonymous message frequently.