Sysadmin, Can you have a look at this?
-- Sylvain ----- Forwarded message from Werner LEMBERG <[EMAIL PROTECTED]> ----- Date: Fri, 01 Apr 2005 11:59:29 +0200 (CEST) To: savannah-hackers@gnu.org From: Werner LEMBERG <[EMAIL PROTECTED]> X-Mailer: Mew version 4.2.50 on Emacs 22.0.50.1 / Mule 5.0 (SAKAKI) Subject: [Savannah-help-public] Fw: [Groff] Spam from list member addresses Dear Savannah hackers, it seems that the spam filter doesn't recognize mails like this http://lists.gnu.org/archive/html/groff/2005-03/msg00178.html Please update as soon as possible or take other measures to fix this! It is quite embarrassing for subscribed members that infected computers can fake the email address for such spams without being filtered out. Below is a complaint about that. Today, others have analyzed the spam problem (please check the mailing list archive); maybe this is helpful for you. Werner Date: Thu, 31 Mar 2005 12:39:48 -0500 From: Peter Schaffter <[EMAIL PROTECTED]> To: groff@gnu.org User-Agent: Mutt/1.5.4i Subject: [Groff] Spam from list member addresses Hi. I got two pornographic-sounding spams today, one apparently from Werner, the other apparently from Ted Harding. Rather than wait to see if these are isolated incidents, I'm cut 'n' pasting both emails with full headers into this post. I'm not an expert in mail header forensics, but someone else may spot something useful. I'm operating on the "an ounce of prevention is worth a pound of cure" theory here. I can deal with spams like these easily myself, provided they remain sporadic. But in the event they become systematic and affect other list members, these two messages may prove useful in isolating the source of the problem. ==================Begin bogus email from [EMAIL PROTECTED] >From [EMAIL PROTECTED] Thu Mar 31 11:48:45 2005 Return-path: [EMAIL PROTECTED] Envelope-to: [EMAIL PROTECTED] Delivery-date: Thu, 31 Mar 2005 11:46:49 -0500 Received: from pop.golden.net [199.166.210.104] by localhost with POP3 (fetchmail-5.9.11) for [EMAIL PROTECTED] (single-drop); Thu, 31 Mar 2005 11:48:45 -0500 (EST) Received: from exprod6mx30.postini.com ([64.18.1.170] helo=psmtp.com) by mail4.int.golden.net with smtp (Exim 4.12) id 1DH2oi-000Njt-00 for [EMAIL PROTECTED]; Thu, 31 Mar 2005 11:46:48 -0500 Received: from source ([199.166.210.22]) (using TLSv1) by exprod6mx30.postini.com +([64.18.5.10]) with SMTP; Thu, 31 Mar 2005 11:46:46 EST Received: from lists.gnu.org ([199.232.76.165]) by mail3.int.golden.net with esmtp (Exim 4.12) id 1DH2of-0004Pm-00 for [EMAIL PROTECTED]; Thu, 31 Mar 2005 11:46:46 -0500 Received: from localhost ([127.0.0.1] helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1DH34E-0003zD-Cn for [EMAIL PROTECTED]; Thu, 31 Mar 2005 12:02:50 -0500 Received: from mailman by lists.gnu.org with tmda-scanned (Exim 4.43) id 1DH30h-0001PN-62 for groff@gnu.org; Thu, 31 Mar 2005 11:59:11 -0500 Received: from exim by lists.gnu.org with spam-scanned (Exim 4.43) id 1DH30S-0001Hl-Vf for groff@gnu.org; Thu, 31 Mar 2005 11:59:08 -0500 Received: from [199.232.76.173] (helo=monty-python.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1DH30S-0001E5-Bf for groff@gnu.org; Thu, 31 Mar 2005 11:58:56 -0500 Received: from [194.2.232.250] (helo=199.232.76.166) by monty-python.gnu.org with smtp (Exim 4.34) id 1DH2ik-0007k9-Uq for groff@gnu.org; Thu, 31 Mar 2005 11:40:39 -0500 From: wl <[EMAIL PROTECTED]> To: groff@gnu.org Date: 31 Mar 2005 18:40:37 +0100 MIME-Version: 1.0 X-Mailer: OstroSoft SMTP Component (5.1.1) Content-Type: multipart/mixed; boundary="--NextMimePart" Message-Id: <[EMAIL PROTECTED]> X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Subject: [Groff] File - movie SuCkingPuSSy.mpeg X-BeenThere: groff@gnu.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: groff.gnu.org List-Unsubscribe: <http://lists.gnu.org/mailman/listinfo/groff>, <mailto:[EMAIL PROTECTED]> List-Archive: <http://lists.gnu.org/pipermail/groff> List-Post: <mailto:groff@gnu.org> List-Help: <mailto:[EMAIL PROTECTED]> List-Subscribe: <http://lists.gnu.org/mailman/listinfo/groff>, <mailto:[EMAIL PROTECTED]> Sender: [EMAIL PROTECTED] Errors-To: [EMAIL PROTECTED] X-original-rcpt: [EMAIL PROTECTED] [-- Attachment #1 --] [-- Type: text/plain, Encoding: 7bit, Size: 0K --] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit [-- Attachment #2 --] [-- Type: text/plain, Encoding: 7bit, Size: 0.1K --] Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Groff mailing list Groff@gnu.org http://lists.gnu.org/mailman/listinfo/groff ===================End bogus email from [EMAIL PROTECTED] =========Begin bogus email from [EMAIL PROTECTED] >From [EMAIL PROTECTED] Thu Mar 31 12:08:58 2005 Return-path: [EMAIL PROTECTED] Envelope-to: [EMAIL PROTECTED] Delivery-date: Thu, 31 Mar 2005 12:08:35 -0500 Received: from pop.golden.net [199.166.210.104] by localhost with POP3 (fetchmail-5.9.11) for [EMAIL PROTECTED] (single-drop); Thu, 31 Mar 2005 12:08:58 -0500 (EST) Received: from exprod6mx89.postini.com ([64.18.1.73] helo=psmtp.com) by mail1.int.golden.net with smtp (Exim 4.12) id 1DH39n-000ATb-00 for [EMAIL PROTECTED]; Thu, 31 Mar 2005 12:08:35 -0500 Received: from source ([199.166.210.22]) (using TLSv1) by exprod6mx89.postini.com +([64.18.5.10]) with SMTP; Thu, 31 Mar 2005 09:08:33 PST Received: from lists.gnu.org ([199.232.76.165]) by mail5.int.golden.net with esmtp (Exim 4.12) id 1DH39l-000JRo-00 for [EMAIL PROTECTED]; Thu, 31 Mar 2005 12:08:33 -0500 Received: from localhost ([127.0.0.1] helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1DH3PJ-0007Ci-U6 for [EMAIL PROTECTED]; Thu, 31 Mar 2005 12:24:37 -0500 Received: from mailman by lists.gnu.org with tmda-scanned (Exim 4.43) id 1DH3Oq-0007AR-18 for groff@gnu.org; Thu, 31 Mar 2005 12:24:08 -0500 Received: from exim by lists.gnu.org with spam-scanned (Exim 4.43) id 1DH3Oh-00075C-Fx for groff@gnu.org; Thu, 31 Mar 2005 12:24:00 -0500 Received: from [199.232.76.173] (helo=monty-python.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1DH3Oh-000752-9Z for groff@gnu.org; Thu, 31 Mar 2005 12:23:59 -0500 Received: from [194.2.232.250] (helo=199.232.76.166) by monty-python.gnu.org with smtp (Exim 4.34) id 1DH38K-0001xV-QP for groff@gnu.org; Thu, 31 Mar 2005 12:07:06 -0500 From: "Ted.Harding" <[EMAIL PROTECTED]> To: groff@gnu.org Date: 31 Mar 2005 19:07:03 +0100 MIME-Version: 1.0 X-Mailer: OstroSoft SMTP Component (5.1.1) Content-Type: multipart/mixed; boundary="--NextMimePart" Message-Id: <[EMAIL PROTECTED]> X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Subject: [Groff] Asses Mpeg's X-BeenThere: groff@gnu.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: groff.gnu.org List-Unsubscribe: <http://lists.gnu.org/mailman/listinfo/groff>, <mailto:[EMAIL PROTECTED]> List-Archive: <http://lists.gnu.org/pipermail/groff> List-Post: <mailto:groff@gnu.org> List-Help: <mailto:[EMAIL PROTECTED]> List-Subscribe: <http://lists.gnu.org/mailman/listinfo/groff>, <mailto:[EMAIL PROTECTED]> Sender: [EMAIL PROTECTED] Errors-To: [EMAIL PROTECTED] X-original-rcpt: [EMAIL PROTECTED] [-- Attachment #1 --] [-- Type: text/plain, Encoding: 7bit, Size: 0K --] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit [-- Attachment #2 --] [-- Type: text/plain, Encoding: 7bit, Size: 0.1K --] Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Groff mailing list Groff@gnu.org http://lists.gnu.org/mailman/listinfo/groff ==========End bogus email from [EMAIL PROTECTED] -- Peter Schaffter Author of _The Schumann Proof_ (RendezVous Press, Canada) http://www.golden.net/~ptpi/theschumannproof.html _______________________________________________ Groff mailing list Groff@gnu.org http://lists.gnu.org/mailman/listinfo/groff _______________________________________________ Savannah-help-public mailing list [EMAIL PROTECTED] http://lists.gnu.org/mailman/listinfo/savannah-hackers ----- End forwarded message ----- -- Sylvain _______________________________________________ Savannah-help-public mailing list [EMAIL PROTECTED] http://lists.gnu.org/mailman/listinfo/savannah-hackers