-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Sun, Aug 13, 2017 at 02:44:56PM +0000, Andy Smith wrote: > Hi, > > On Sun, Aug 13, 2017 at 11:21:04PM +0900, Byung-Hee HWANG (황병희, 黃炳熙) wrote: > > [snipped spam] > > > By the way the mail got valid DKIM signature. > > It came from a real person so why wouldn't it? DKIM says nothing of > content. > > > Please explain to me why the mail is here. It's odd. Please Please Please > > ... > > A spammer sent out a spam run (this "would you be my king?" then URL > to questionable site nonsense) using the debian-user address as the > from address. Some of the hapless confused recipients replied to it, > thus their reply ends up on the mailing list.
I have the hunch that it's a (faked, in the sense that the copy hasn't been sent to debian-user) Cc: -- a From: might trigger the spam filter at the victim's site (bad SPF and/or DKIM). But then, maybe not... > It would be best not to reply to it (unless you feel like replying > off-list to the person explaining that they are replying to spam), > as the sender won't see your reply and no one on this list can do > anything about it. I do that from time to time, when I have a whiff of evidence that the victim might understand what's going on. Never got a reply so far (still curious :) Cheers - -- tomás -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iEYEARECAAYFAlmQaBIACgkQBcgs9XrR2kY1JACdGN/Y4cw5gP3RZ3zyufaMoOYS TvsAnjZCeCQVFsii/3J68udK2cRkoDuK =IChh -----END PGP SIGNATURE-----