Michael Scheidell wrote: > > > Since we saw two of them come in pretty back to back, I suspect a joe > job of sometype. those people might not have subscribed. That would be a bit tricky to just be a joe job. This list is confirmed opt-in. i.e.: if you subscribe, an automated bot from ezlm sends you a message that you need to reply to to get subscribed. Well, actually all you have to do is send a second message to a different address that contains randomly generated text as a magic cookie. But still, you need to know that randomly generated address.
Of course, it's always the possibility someone guessed the random text in the reply address.. but, good luck.. They start off a bit like this (note: I've munged the email address, and changed the values of the magic text and serial number, but I have not changed the length. I substituted letters for letters, and numbers for numbers. Otherwise, this is the start of a real confirm message.) --------------------- Hi! This is the ezmlm program. I'm managing the users@spamassassin.apache.org mailing list. To confirm that you would like exam...@example.com added to the users mailing list, please send a short reply to this address: users-sc.1244818352.jacibredcfjnkiobdtef-example=example....@spamassassin.apache.org Usually, this happens when you just hit the "reply" button. ... ------------
