On Tue, 16 Nov 1999, Jeffrey Goldberg wrote:

> Someone (or their 'bot) is spamming majordomo based lists forging the
> addresses of legitimate subscribers.

I've seen this particular attack as well, on both my domains.  It's not
spamming just lists, it's apparently spamming any address it was able to
harvest from the 'net, as I've had the messages arrive to my personal
mailbox.  It's a (rather pathetic) attempt to make the message appear to
be coming from a user who mis-mailed someone, I think.  It appears to just
always take addresses its seen in similar situations (e.g. both addresses
appeared on the same webpage) and use them; thus how it ends up forging to
a mailing list.  :/
-- 
Jeremy Blackman - [EMAIL PROTECTED] / [EMAIL PROTECTED] / [EMAIL PROTECTED]
Lithtech Team, Monolith Productions      -- http://www.lith.com
Listar Developer                         -- http://www.listar.org

Reply via email to