On 18/11/2010 11:04, André Warnier wrote: > Guys, > I am starting to receive quite a bit of spam from a guy named "Ed" about > career moves etc.. > Somehow it seems to originate from (or maybe simply mention) the tomcat > users list as a "reply-to". I have also seen at least one message like > that in the list itself. > Anything that should/can be done about this ? Does it mean that someone > harvested the list of subscribers to the list, or worse ?
A spammer subscribed themselves to the users list and started sending messages. As soon as the moderators woke up, had a shot of caffeine and started wading through their inboxes, the idiot was spotted, removed from both the users@ and dev@ lists and banned from further subscriptions. How quickly something like this gets spotted and dealt with depends on when it starts, which timezone the moderators are in at the time and when they look at the list traffic. I'd be surprised if it went on for more than 24 hours before being dealt with. If you need to get hold of the moderators, email users-ow...@tomcat... If that fails you can always escalate it to the ASF infra team but please don't do that unless the moderators appear to have gone AWOL for at least several days. > Or is it just me ? Nope. > Among the headers in the messages themselves are : > Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) > ... > Received-SPF: pass (athena.apache.org: domain of ed_b...@hotmail.com > designates 65.55.90.152 as permitted sender) Yep. I see the same thing. The spammer was subscribed to the users list. Mark --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org