On 2017-07-09 at 07:32 +0000, Andy Smith wrote:
> The spammers' motivation is to use an address that is not associated
> with them but is a real address so cannot be easily blocked on the
> basis of from address alone.
Not just a real address, but an address belonging to a popular mailing
list. If eg. gmail started seeing lots of spammy emails with an email of
j...@example.com, that email address itself could become a spam
indicator (even if that was a real email). However, it receives enough
legitimate debian-user traffic to dwarf it. And even if moved the
classification of messages with this address into spam, actual
subscribers would vote in the opposite direction.
So this seems a pretty smart move, unless the recipient spam filters
also take into account that only the spammy ones don't come from
bendel.debian.org
PS: Why don't {lists.,}debian.org have spf records?
Kind regards
