Moderators get these messages too when we post to the list. There is usually no
need to ask us to remove them as we do it as a matter of course. Depending on a
number of factors, the address may also get barred from re-subscribing. Please
give us a reasonable time to spot and remove them before you prompt us otherwise
it is just more spam ;)

The moderators can be reached at [EMAIL PROTECTED]

Mark

> -----Original Message-----
> From: Reshat Sabiq [mailto:[EMAIL PROTECTED] 
> Sent: Wednesday, April 14, 2004 5:21 AM
> To: Tomcat Developers List
> Subject: Re: Spam vulnerability at apache
> 
> I'm glad to hear that this doesn't involve DNS issues.
>  From this discussion, do i understand correctly that the following 2 
> addresses should be blocked?
> 1) [EMAIL PROTECTED]
> 2) "[EMAIL PROTECTED]"
> 
> If yes, it would be nice to somehow make this stuff 
> systematic, so that 
> the regular lists don't have to be involved. Would it be 
> correct to just 
> forward these incidents to moderators quietly?
> 
> P.S. I hope not to receive anything this time. :)
> P.P.S. And yes, i should consider having special accounts for "risky" 
> usage, if there is at all any hope to keep a low-profile 
> email account 
> these days. :)
> 
> Thanks,
> <rsa/>
> 
> Paul Speed wrote:
> 
> > I think this is a combination of a misconfigured mail server at
> > one800.net and a bad e-mail address subscribed to the list. 
>  The mail
> > server is badly configured because it replied to sender 
> instead of the
> > reply-to address.  If it had replied to the reply-to 
> address you would
> > never have seen it and the mailing list software would likely have
> > disabled the address.
> >
> > It's probably also a recent thing.
> > -Paul
> >
> > Reshat Sabiq wrote:
> >
> >> I'm sorry to report that sending the message below, caused the 
> >> following to show up in my mail box. There is definitely something 
> >> fishy with the apache mail servers. This does not happen 
> when i send 
> >> an email to a non-apache address. Please, let's fix this:
> >>
> >> Your Mail has been bounced from the OutPost/1.800eMail Server
> >> Because "[EMAIL PROTECTED]" is not a valid username
> >>
> >>
> >> Original message, less any attachments, follows:
> >> 
> ====================================================================
> >>
> >>
> >> 
> --------------------------------------------------------------
> ----------
> >> ...
> >>
> >> Reshat Sabiq wrote:
> >>
> >>> Hi,
> >>>
> >>> I extremely apologize for this message, but i think this 
> needs to be 
> >>> figured out. I just yesterday registered my new email 
> address with 
> >>> tomcat-dev, and i received the spam below almost immediately 
> >>> thereafter. Only a few people are aware of this email address, so 
> >>> the origin of spam info 99% appears to be tomcat-dev 
> registration. 
> >>> Is there any chance that DNS gets resolved to one of several IPs, 
> >>> one of which collects these emails and uses them for spam (or 
> >>> perhaps is infected with a virus)? I would look for any 
> IPs based in 
> >>> russia as the prime suspects, because this email contains russian 
> >>> text and appears to be originated there.
> >>>
> >>> What's worse is that 25 minutes after this spam, i 
> received another 
> >>> one of similar content. Please help save me and others from this 
> >>> plague of the Internet.
> >>> I entrusted apache.org with this address, and hope we can keep it 
> >>> between us.
> >>>
> >>> P.S. If there are other people who received similar 
> emails, please 
> >>> let me, the admins, or the list know. If you let only me know, i 
> >>> will accumulate the number of people affected and forward 
> this to an 
> >>> admin.
> >>> P.P.S. I see that emails are protected in the archives publicly 
> >>> published, and i think this issue is in the same category.
> >>>
> >>> Thanks,
> >>> <rsa/>
> >>>
> >>> [EMAIL PROTECTED] wrote:
> >>>
> >>>> russian(win-1251):
> >>>>
> >>>> Приветствуем!
> >>>>
> >>>> Данное уведомление автоматически создано в ответ на Ваше 
> письмо на 
> >>>> тему
> >>>> "Photo document", приведенное ниже. Вам не надо отвечать на него.
> >>>> Служба поддержки клиентов получила Ваше письмо, и ему присвоен 
> >>>> идентификатор
> >>>> [TID#4977]. Пожалуйста, включайте следующий блок:
> >>>>
> >>>>      [TID#4977]
> >>>>
> >>>> в заголовок (subject) всей последующей корреспонденции 
> на эту тему. 
> >>>> Это можно сделать отвечая на это письмо (reply).
> >>>>
> >>>> C уважением,
> >>>> служба технической поддержки клиентов
> >>>> Хостинг оператор М-10
> >>>> http://www.m-10.ru
> >>>> 
> --------------------------------------------------------------
> ---------- 
> >>>>
> >>>> english:
> >>>>
> >>>> Greetings,
> >>>>
> >>>> This message has been automatically generated in 
> response to your 
> >>>> message
> >>>> regarding "Photo document", the content of which appears 
> below.  There
> >>>> is no need to reply to it now. Support has received your message 
> >>>> and it has
> >>>> been assigned a ticket ID of [TID#4977]. Please include 
> the string:
> >>>>
> >>>>      [TID#4977]
> >>>>
> >>>> in the subject line of all future correspondence about this 
> >>>> problem. To do so, you may reply to this message.
> >>>>
> >>>> WBR,
> >>>> Support Team
> >>>> Hosting Operator M-10 http://www.m-10.ru
> >>>> ----------------------------Original 
> >>>> Message-----------------------------
> >>>>
> >>>> Please, photo document.
> >>>> Yours sincerely
> >>>>
> >>>> +++ X-Attachment-Type: document
> >>>> +++ X-Attachment-Status: no virus found
> >>>> +++ Powered by the new F-Secure OnlineAntiVirus
> >>>> +++ Visit us: www.f-secure.com
> >>>>
> >>>>
> >>>>
> >>>> -----------------------------Headers 
> >>>> Follow------------------------------
> >>>> Received: from [EMAIL PROTECTED]
> >>>>  by office.m-10.ru (CommuniGate Pro GROUP 4.1.8)
> >>>>  with GROUP id 1745058; Mon, 12 Apr 2004 17:13:05 +0400
> >>>> Received: from [62.5.188.222] (HELO office.m-10.ru)
> >>>>  by office.m-10.ru (CommuniGate Pro SMTP 4.1.8)
> >>>>  with ESMTP id 1745042 for [EMAIL PROTECTED]; 
> Mon, 12 Apr 
> >>>> 2004 17:12:58 +0400
> >>>> X-Antivirus: Checked by Dr.Web (http://www.drweb.net)
> >>>> From: [EMAIL PROTECTED]
> >>>> To: [EMAIL PROTECTED]
> >>>> Subject: Photo document
> >>>> Date: Mon, 12 Apr 2004 17:11:48 +0400
> >>>> MIME-Version: 1.0
> >>>> Content-Type: multipart/mixed;
> >>>>     boundary="----=_NextPart_000_0016----=_NextPart_000_0016"
> >>>> X-Priority: 3
> >>>> X-Msmail-Priority: Normal
> >>>> Message-Id: <[EMAIL PROTECTED]>
> >>>>
> >>>>
> >>>> 
> ---------------------------------------------------------------------
> >>>> To unsubscribe, e-mail: [EMAIL PROTECTED]
> >>>> For additional commands, e-mail: 
> [EMAIL PROTECTED]
> >>>>  
> >>>>
> >
> >
> > 
> ---------------------------------------------------------------------
> > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > For additional commands, e-mail: [EMAIL PROTECTED]
> >
> 



---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to