 
Sat, 8 Oct 2005 13:12:42 -0400
|
I haven't read about this otherwise, but as a list owner, for one week I have been seeing a constant barage of spoofed mail from all over the world directly to [log in to unmask] for one specific list.
The source of these spoofs are from many different PCs and their IP addresses are not cloaked by open SMTP gateways.
The FROM: userid (and name) @ HOTMAIL.COM are random. Eudora Bayesian filtering doesn't help. Obviously LISTSERV has to process these as "normal" bounces. I would have posted this to [log in to unmask] but I'm thinking that fellow LISTSERV(R) list-owners would be interested in hearing (and possibly reacting to) this.
Here's an example (oops, the first one was too racy, let's try one that won't offend the dirty word filters):
Received: from tr12n05.aset.psu.edu (tr12g05.aset.psu.edu [128.118.146.135])
by f07n01.cac.psu.edu (8.9.3p2.1/8.9.3) with ESMTP id LAA61960
for <[log in to unmask]>; Tue, 4 Oct 2005 11:58:51 -0400
Received: from f05n16.cac.psu.edu (f05s16.cac.psu.edu [128.118.141.59])
by tr12n05.aset.psu.edu (8.13.2/8.13.2) with ESMTP id j94FwoMd557162
for <[log in to unmask]>; Tue, 4 Oct 2005 11:58:50 -0400
Received: from f05n16 (f05s16.cac.psu.edu [128.118.141.59])
by f05n16.cac.psu.edu (8.12.11/8.12.11) with ESMTP id j94AF4le233476;
Tue, 4 Oct 2005 11:58:41 -0400
Date: Tue, 4 Oct 2005 11:58:39 -0400
From: "LISTS.PSU.EDU LISTSERV Server (14.4)" <[log in to unmask]>
Subject: mylist-L: error report from HOTMAIL.COM
To: Pete Weiss <[log in to unmask]>
Message-ID: <[log in to unmask]>
X-LSV-ListID: None
X-Virus-Scanned: amavisd-sophos
X-PSU-Spam-Flag: YES
Precedence: bulk
X-PSU-Spam-Hits: 3.404
X-PSU-Spam-Level: ***
The enclosed message has been identified as a delivery error for the mylist-L
list because it was sent to [log in to unmask]
------------------------------ Message in error -------------------------------
Received: from lists.psu.edu (84.94.52.221.cable.012.net.il [84.94.52.221])
by f05n16.cac.psu.edu (8.12.11/8.12.11) with SMTP id j94FwUF9165102
for <[log in to unmask]>; Tue, 4 Oct 2005 11:58:31 -0400
Date: Tue, 4 Oct 2005 11:58:30 -0400
Message-Id: <[log in to unmask]>
From: "roigcl" <[log in to unmask]>
To: [log in to unmask]
Content-type: text/html
Subject: Cialils at $2.19 per dose!
/'i'a'g'rŽa is the best thing that can ever happen to Y()U!
Want PILLs? Cia1is, Viagr@, Many M3ds Phenterm1ne#
Cheapest d()se$ only in our online pharŽmacŠy sh0p! VI$IT N0W!
Thank you!-
<BR><BR><BR><BR><BR><BR><BR>
<A href="[log in to unmask]" target="_blank">http:[log in to unmask]">Remove your email</A>
|
|
|
