Sysadmin,

Can you have a look at this?

-- 
Sylvain

----- Forwarded message from Werner LEMBERG <[EMAIL PROTECTED]> -----

Date: Fri, 01 Apr 2005 11:59:29 +0200 (CEST)
To: savannah-hackers@gnu.org
From: Werner LEMBERG <[EMAIL PROTECTED]>
X-Mailer: Mew version 4.2.50 on Emacs 22.0.50.1 / Mule 5.0 (SAKAKI)
Subject: [Savannah-help-public] Fw: [Groff] Spam from list member addresses


Dear Savannah hackers,


it seems that the spam filter doesn't recognize mails like this

  http://lists.gnu.org/archive/html/groff/2005-03/msg00178.html

Please update as soon as possible or take other measures to fix this!
It is quite embarrassing for subscribed members that infected
computers can fake the email address for such spams without being
filtered out.

Below is a complaint about that.  Today, others have analyzed the spam
problem (please check the mailing list archive); maybe this is helpful
for you.


    Werner

Date: Thu, 31 Mar 2005 12:39:48 -0500
From: Peter Schaffter <[EMAIL PROTECTED]>
To: groff@gnu.org
User-Agent: Mutt/1.5.4i
Subject: [Groff] Spam from list member addresses

Hi.

I got two pornographic-sounding spams today, one apparently from
Werner, the other apparently from Ted Harding.  Rather than wait to
see if these are isolated incidents, I'm cut 'n' pasting both
emails with full headers into this post.

I'm not an expert in mail header forensics, but someone else may
spot something useful.  I'm operating on the "an ounce of
prevention is worth a pound of cure" theory here.  I can deal with
spams like these easily myself, provided they remain sporadic.  But
in the event they become systematic and affect other list members,
these two messages may prove useful in isolating the source of the
problem.

==================Begin bogus email from [EMAIL PROTECTED]

>From [EMAIL PROTECTED]  Thu Mar 31 11:48:45 2005
Return-path: [EMAIL PROTECTED]
Envelope-to: [EMAIL PROTECTED]
Delivery-date: Thu, 31 Mar 2005 11:46:49 -0500
Received: from pop.golden.net [199.166.210.104]
        by localhost with POP3 (fetchmail-5.9.11)
        for [EMAIL PROTECTED] (single-drop); Thu, 31 Mar 2005
11:48:45 -0500 (EST)
Received: from exprod6mx30.postini.com ([64.18.1.170] helo=psmtp.com)
        by mail4.int.golden.net with smtp (Exim 4.12)
        id 1DH2oi-000Njt-00
        for [EMAIL PROTECTED]; Thu, 31 Mar 2005 11:46:48
-0500
Received: from source ([199.166.210.22]) (using TLSv1) by 
exprod6mx30.postini.com
+([64.18.5.10]) with SMTP;
        Thu, 31 Mar 2005 11:46:46 EST
Received: from lists.gnu.org ([199.232.76.165])
        by mail3.int.golden.net with esmtp (Exim 4.12)
        id 1DH2of-0004Pm-00
        for [EMAIL PROTECTED]; Thu, 31 Mar 2005 11:46:46 -0500
Received: from localhost ([127.0.0.1] helo=lists.gnu.org)
        by lists.gnu.org with esmtp (Exim 4.43)
        id 1DH34E-0003zD-Cn
        for [EMAIL PROTECTED]; Thu, 31 Mar 2005 12:02:50 -0500
Received: from mailman by lists.gnu.org with tmda-scanned (Exim 4.43)
        id 1DH30h-0001PN-62
        for groff@gnu.org; Thu, 31 Mar 2005 11:59:11 -0500
Received: from exim by lists.gnu.org with spam-scanned (Exim 4.43)
        id 1DH30S-0001Hl-Vf
        for groff@gnu.org; Thu, 31 Mar 2005 11:59:08 -0500
Received: from [199.232.76.173] (helo=monty-python.gnu.org)
        by lists.gnu.org with esmtp (Exim 4.43) id 1DH30S-0001E5-Bf
        for groff@gnu.org; Thu, 31 Mar 2005 11:58:56 -0500
Received: from [194.2.232.250] (helo=199.232.76.166)
        by monty-python.gnu.org with smtp (Exim 4.34) id 1DH2ik-0007k9-Uq
        for groff@gnu.org; Thu, 31 Mar 2005 11:40:39 -0500
From: wl <[EMAIL PROTECTED]>
To: groff@gnu.org
Date: 31 Mar 2005 18:40:37 +0100
MIME-Version: 1.0
X-Mailer: OstroSoft SMTP Component (5.1.1)
Content-Type: multipart/mixed; boundary="--NextMimePart"
Message-Id: <[EMAIL PROTECTED]>
X-Content-Filtered-By: Mailman/MimeDel 2.1.5
Subject: [Groff] File - movie SuCkingPuSSy.mpeg
X-BeenThere: groff@gnu.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: groff.gnu.org
List-Unsubscribe: <http://lists.gnu.org/mailman/listinfo/groff>,
        <mailto:[EMAIL PROTECTED]>
List-Archive: <http://lists.gnu.org/pipermail/groff>
List-Post: <mailto:groff@gnu.org>
List-Help: <mailto:[EMAIL PROTECTED]>
List-Subscribe: <http://lists.gnu.org/mailman/listinfo/groff>,
        <mailto:[EMAIL PROTECTED]>
Sender: [EMAIL PROTECTED]
Errors-To: [EMAIL PROTECTED]
X-original-rcpt: [EMAIL PROTECTED]

[-- Attachment #1 --]
[-- Type: text/plain, Encoding: 7bit, Size: 0K --]
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit


[-- Attachment #2 --]
[-- Type: text/plain, Encoding: 7bit, Size: 0.1K --]
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Groff mailing list
Groff@gnu.org
http://lists.gnu.org/mailman/listinfo/groff

===================End bogus email from [EMAIL PROTECTED]

=========Begin bogus email from [EMAIL PROTECTED]

>From [EMAIL PROTECTED]  Thu Mar 31 12:08:58 2005
Return-path: [EMAIL PROTECTED]
Envelope-to: [EMAIL PROTECTED]
Delivery-date: Thu, 31 Mar 2005 12:08:35 -0500
Received: from pop.golden.net [199.166.210.104]
        by localhost with POP3 (fetchmail-5.9.11)
        for [EMAIL PROTECTED] (single-drop); Thu, 31 Mar 2005 12:08:58 -0500 
(EST)
Received: from exprod6mx89.postini.com ([64.18.1.73] helo=psmtp.com)
        by mail1.int.golden.net with smtp (Exim 4.12)
        id 1DH39n-000ATb-00
        for [EMAIL PROTECTED]; Thu, 31 Mar 2005 12:08:35 -0500
Received: from source ([199.166.210.22]) (using TLSv1) by 
exprod6mx89.postini.com
+([64.18.5.10]) with SMTP;
        Thu, 31 Mar 2005 09:08:33 PST
Received: from lists.gnu.org ([199.232.76.165])
        by mail5.int.golden.net with esmtp (Exim 4.12)
        id 1DH39l-000JRo-00
        for [EMAIL PROTECTED]; Thu, 31 Mar 2005 12:08:33 -0500
Received: from localhost ([127.0.0.1] helo=lists.gnu.org)
        by lists.gnu.org with esmtp (Exim 4.43)
        id 1DH3PJ-0007Ci-U6
        for [EMAIL PROTECTED]; Thu, 31 Mar 2005 12:24:37 -0500
Received: from mailman by lists.gnu.org with tmda-scanned (Exim 4.43)
        id 1DH3Oq-0007AR-18
        for groff@gnu.org; Thu, 31 Mar 2005 12:24:08 -0500
Received: from exim by lists.gnu.org with spam-scanned (Exim 4.43)
        id 1DH3Oh-00075C-Fx
        for groff@gnu.org; Thu, 31 Mar 2005 12:24:00 -0500
Received: from [199.232.76.173] (helo=monty-python.gnu.org)
        by lists.gnu.org with esmtp (Exim 4.43) id 1DH3Oh-000752-9Z
        for groff@gnu.org; Thu, 31 Mar 2005 12:23:59 -0500
Received: from [194.2.232.250] (helo=199.232.76.166)
        by monty-python.gnu.org with smtp (Exim 4.34) id
1DH38K-0001xV-QP
        for groff@gnu.org; Thu, 31 Mar 2005 12:07:06 -0500
From: "Ted.Harding" <[EMAIL PROTECTED]>
To: groff@gnu.org
Date: 31 Mar 2005 19:07:03 +0100
MIME-Version: 1.0
X-Mailer: OstroSoft SMTP Component (5.1.1)
Content-Type: multipart/mixed; boundary="--NextMimePart"
Message-Id: <[EMAIL PROTECTED]>
X-Content-Filtered-By: Mailman/MimeDel 2.1.5
Subject: [Groff] Asses Mpeg's
X-BeenThere: groff@gnu.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: groff.gnu.org
List-Unsubscribe: <http://lists.gnu.org/mailman/listinfo/groff>,
        <mailto:[EMAIL PROTECTED]>
List-Archive: <http://lists.gnu.org/pipermail/groff>
List-Post: <mailto:groff@gnu.org>
List-Help: <mailto:[EMAIL PROTECTED]>
List-Subscribe: <http://lists.gnu.org/mailman/listinfo/groff>,
        <mailto:[EMAIL PROTECTED]>
Sender: [EMAIL PROTECTED]
Errors-To: [EMAIL PROTECTED]
X-original-rcpt: [EMAIL PROTECTED]

[-- Attachment #1 --]
[-- Type: text/plain, Encoding: 7bit, Size: 0K --]
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit


[-- Attachment #2 --]
[-- Type: text/plain, Encoding: 7bit, Size: 0.1K --]
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Groff mailing list
Groff@gnu.org
http://lists.gnu.org/mailman/listinfo/groff

==========End bogus email from [EMAIL PROTECTED]

-- 
Peter Schaffter
  Author of _The Schumann Proof_ (RendezVous Press, Canada)
  http://www.golden.net/~ptpi/theschumannproof.html


_______________________________________________
Groff mailing list
Groff@gnu.org
http://lists.gnu.org/mailman/listinfo/groff

_______________________________________________
Savannah-help-public mailing list
[EMAIL PROTECTED]
http://lists.gnu.org/mailman/listinfo/savannah-hackers


----- End forwarded message -----

-- 
Sylvain


_______________________________________________
Savannah-help-public mailing list
[EMAIL PROTECTED]
http://lists.gnu.org/mailman/listinfo/savannah-hackers

Reply via email to