We have hit a very odd problem at the maelstrom listserv that I think is a
bug and potentially a security problem.
I had a day earlier in the week, and then today where posts that had been
submitted a few days earlier suddenly showed up on the list. The only
difference, other than the header information I'll detail below, is the
banner is duplicated.
That is particularly odd is it appears that a roadrunner server is receiving
the posts, then reinjecting the posts back to the listserv, and the listserv
software is passing them on.
I run a semi-moderated lists. Two of the posts I had to approve for
distribution. The duplicates came though without requiring confirmation.
Of the duplicates, non originate from roadrunner.
Then, after getting the duplicates, another duplicate post claiming that it
originated from my list address came back to me for approval.
And a user just forwarded an error from the listserv claiming they had
exceeded their posting limit. The post was another duplicate already posted
(and not needing moderator approval) May 6.
> show license
License type: Permanent
Expiration date: None - perpetual license
Capacity: Unlimited
Product options: HPO
Version: 1.8d
Serial number: STJOHNS-VM-TESHPO-1T
Build date: 16 Jul 2000
Email of one of the duplicates:
-------- Original Message --------
Return-path: <[log in to unmask]>
Received: from mta1.snfc21.pbi.net (mta1-pr.snfc21.pbi.net)by
sims2.snfc21.pbi.net(Sun Internet Mail Server sims.3.5.2000.01.05.12.18.p9)
with ESMTP id<[log in to unmask]> for
jrryan@sims-ms-daemon; Sat,10 Mar 2001 15:31:28 -0800 (PST)
Received: from maelstrom.stjohns.edu ([149.68.45.24])by mta1.snfc21.pbi.net
(Sun Internet Mail Server sims.3.5.2000.01.05.12.18.p9)with ESMTP id
<[log in to unmask]> [log in to unmask]; Sat, 10
Mar 2001 15:30:37 -0800 (PST)
Received: from maelstrom.stjohns.edu (149.68.45.24)by maelstrom.stjohns.edu
(LSMTP for OpenVMS v1.1a)with SMTP id <[log in to unmask]>;
Sat,10 Mar 2001 18:30:31 -0500
Received: from MAELSTROM.STJOHNS.EDU by
MAELSTROM.STJOHNS.EDU(LISTSERV-TCP/IP release 1.8d) with spool id 1591357
[log in to unmask]; Sat, 10 Mar 2001 18:30:30 -0500
Received: from mail.satx.rr.com (24.93.35.55)by maelstrom.stjohns.edu (LSMTP
for OpenVMS v1.1a)with SMTP id <[log in to unmask]>; Sat,10
Mar 2001 18:30:30 -0500
Received: from mail pickup service by mail.satx.rr.com with Microsoft
SMTPSVC;Sat, 10 Mar 2001 17:30:20 -0600
Received: from mail pickup service by mail.satx.rr.com with Microsoft
SMTPSVC;Fri, 09 Mar 2001 20:56:19 -0600
Received: from maelstrom.stjohns.edu ([149.68.45.24]) by mail.satx.rr.com
withMicrosoft SMTPSVC(5.5.1877.537.53); Tue, 06 Mar 2001 15:55:33 -0600
Received: from maelstrom.stjohns.edu (149.68.45.24)by maelstrom.stjohns.edu
(LSMTP for OpenVMS v1.1a)with SMTP id <[log in to unmask]>;
Tue,06 Mar 2001 16:46:13 -0500
Received: from MAELSTROM.STJOHNS.EDU by
MAELSTROM.STJOHNS.EDU(LISTSERV-TCP/IP release 1.8d) with spool id 1354431
[log in to unmask]; Tue, 06 Mar 2001 16:46:11 -0500
Received: from hotmail.com (64.4.20.185)by maelstrom.stjohns.edu (LSMTP for
OpenVMS v1.1a)with SMTP id <[log in to unmask]>; Tue,06 Mar
2001 14:51:45 -0500
Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC;
Tue,06 Mar 2001 11:51:39 -0800
Received: from 64.60.7.80 by lw14fd.law14.hotmail.msn.com with HTTP; Tue,06
Mar 2001 19:51:39 +0000 (GMT)
Date: Tue, 06 Mar 2001 11:51:39 -0800
From: username <[log in to unmask]>
Subject: Re: [OK] Is anyone else still getting that HA HA virus?
Sender: OUR-KIDS <[log in to unmask]>
To: [log in to unmask]
X-To: [log in to unmask]
Reply-to: username <[log in to unmask]>
Message-id: <[log in to unmask]>
MIME-version: 1.0
Content-type: text/plain; format=flowed
Approved-By: [log in to unmask]
X-Originating-IP: [64.60.7.80]
X-OriginalArrivalTime: 06 Mar 2001 19:51:39.0359
(UTC)FILETIME=[DBFE1EF0:01C0A676]
Approved-By: OUR-KIDS <[log in to unmask]>
X-Mozilla-Status: 9015
X-Mozilla-Status2: 00000000
X-UIDL: 3875b2d100006194
text of email (dupped banner shown below)
~~~~~ http://www.our-kids.org/ for Help/Info/Interest ~~~~~
~~~~~ http://www.our-kids.org/ for Help/Info/Interest ~~~~~
|
