Re: new mailman spam???
I've seen this before. In that case, it was a newbie "accidental spammer", who'd been fooled into buying a scraped list which they imported into a normal Mailman system -- they *intended* to operate a clean mass-mailing system. Generally they clean up once you point out the error of their ways; if they don't, you at least have clear source-identifying audit trail thanks to Mailman's lack of forgery abilities. ;) --j. Thomas Bolioli writes: > I have included the mailing in it's entirety below. Is this an old trick > I just have not seen or is this something new using mailman to send > spam. I assure you I neither signed up nor confirmed a submission for > this mailing list. Is this just a poorly configured mailman install? > Tom > > > Return-Path: <[EMAIL PROTECTED]> > X-Original-To: [EMAIL PROTECTED] > Delivered-To: [EMAIL PROTECTED] > Received: from permemail02.alumniconnections.com > (permemail02.alumniconnections.com [198.212.10.117]) > by nova.terranovum.com (Postfix) with ESMTP id E7AD93567E3 > for <[EMAIL PROTECTED]>; Wed, 31 May 2006 20:07:55 -0400 (EDT) > Received: from brandy.adelphi.edu (brandy.adelphi.edu [192.147.12.5]) > by permemail02.alumniconnections.com (8.13.4/8.13.4) with ESMTP id > k5107sOG012089 > for <[EMAIL PROTECTED]>; Wed, 31 May 2006 20:07:54 > -0400 (EDT) > Received: from brandy.adelphi.edu (127.0.0.1) by brandy.adelphi.edu > (MlfMTA v3.1r24) id hfoths0171sd for > <[EMAIL PROTECTED]>; Wed, 31 May 2006 20:55:46 -0400 > (envelope-from <[EMAIL PROTECTED]>) > Received: from sodiconmx.org.mx ([206.225.91.17]) > by brandy.adelphi.edu (Adelphi University) > with ESMTP; Wed, 31 May 2006 20:55:46 -0400 > Received: (qmail 29676 invoked from network); 31 May 2006 20:07:53 -0500 > Received: from localhost (HELO sodiconmx.org.mx) (127.0.0.1) > by localhost with SMTP; 31 May 2006 20:07:53 -0500 > MIME-Version: 1.0 > Content-Type: text/plain; charset="us-ascii" > Content-Transfer-Encoding: 7bit > Subject: Welcome to the "Newsl2" mailing list > From: [EMAIL PROTECTED] > To: [EMAIL PROTECTED] > X-No-Archive: yes > Message-ID: <[EMAIL PROTECTED]> > Date: Wed, 31 May 2006 18:08:54 -0500 > Precedence: bulk > X-BeenThere: [EMAIL PROTECTED] > X-Mailman-Version: 2.1.5 > List-Id: newsl2.nueva-alianza.org.mx > X-List-Administrivia: yes > Sender: [EMAIL PROTECTED] > Errors-To: [EMAIL PROTECTED] > X-Mlf-Threat: nothreat > X-Mlf-Threat-Detailed: nothreat;none;none;none > X-Mlf-UniqueId: 200606010055460009014 > X-Virus-Scanned: ClamAV 0.88/1504/Wed May 31 15:59:14 2006 on permemail02 > X-Virus-Status: Clean > X-Spam-Checker-Version: SpamAssassin 3.0.4 (2005-06-05) on > nova.terranovum.com > X-Spam-Level: > X-Spam-Status: No, score=0.2 required=4.0 > tests=FORGED_RCVD_HELO,NO_REAL_NAME > autolearn=disabled version=3.0.4 > > Welcome to the [EMAIL PROTECTED] mailing list! > > To post to this list, send your email to: > > [EMAIL PROTECTED] > > General information about the mailing list is at: > > http://lists.nueva-alianza.org.mx/mailman/listinfo/newsl2 > > If you ever want to unsubscribe or change your options (eg, switch to > or from digest mode, change your password, etc.), visit your > subscription page at: > > > http://lists.nueva-alianza.org.mx/mailman/options/newsl2/thomas_bolioli%40alumni.adelphi.edu > > > You can also make such adjustments via email by sending a message to: > > [EMAIL PROTECTED] > > with the word `help' in the subject or body (don't include the > quotes), and you will get back a message with instructions. > > You must know your password to change your options (including changing > the password, itself) or to unsubscribe. It is: > > ekhuku > > Normally, Mailman will remind you of your nueva-alianza.org.mx mailing > list passwords once every month, although you can disable this if you > prefer. This reminder will also include instructions on how to > unsubscribe or change your account options. There is also a button on > your options page that will email your current password to you.
Re: new mailman spam???
I definitely did not see an approval request. And I can now confirm that there are some people who are trying to opt out of the list saying they did not subscribe. I already have sent postmaster but I am not optimistic. Tom Benny Pedersen wrote: I have included the mailing in it's entirety below. Is this an old trick I just have not seen or is this something new using mailman to send spam. I assure you I neither signed up nor confirmed a submission for this mailing list. Is this just a poorly configured mailman install? Tom could be a mail forge that did go to the mailman, now you did see the requst to be added, just ignore it but send the mail to the postmaster at that domain might help to solve it It's either some weird kind of spam or a very strange list gone rogue. I'm finding these mesages showing up in spamtraps that I've setup using accounts that have been inactive for 10 or more years. nice
Re: new mailman spam???
>> I have included the mailing in it's entirety below. Is this an old trick >> I just have not seen or is this something new using mailman to send >> spam. I assure you I neither signed up nor confirmed a submission for this >> mailing list. Is this just a >> poorly configured mailman install? Tom could be a mail forge that did go to the mailman, now you did see the requst to be added, just ignore it but send the mail to the postmaster at that domain might help to solve it > It's either some weird kind of spam or a very strange list gone rogue. > I'm finding these mesages showing up in spamtraps that I've setup using > accounts that have been inactive for 10 or more years. nice
Re: new mailman spam???
On Wed, 31 May 2006, Thomas Bolioli wrote: > I have included the mailing in it's entirety below. Is this an old trick > I just have not seen or is this something new using mailman to send > spam. I assure you I neither signed up nor confirmed a submission for > this mailing list. Is this just a poorly configured mailman install? > Tom > > > Return-Path: <[EMAIL PROTECTED]> > X-Original-To: [EMAIL PROTECTED] > Delivered-To: [EMAIL PROTECTED] [snip..] > General information about the mailing list is at: > > http://lists.nueva-alianza.org.mx/mailman/listinfo/newsl2 > > If you ever want to unsubscribe or change your options (eg, switch to > or from digest mode, change your password, etc.), visit your > subscription page at: > > > http://lists.nueva-alianza.org.mx/mailman/options/newsl2/thomas_bolioli%40alumni.adelphi.edu It's either some weird kind of spam or a very strange list gone rogue. I'm finding these mesages showing up in spamtraps that I've setup using accounts that have been inactive for 10 or more years. -- Dave Funk University of Iowa College of Engineering 319/335-5751 FAX: 319/384-0549 1256 Seamans Center Sys_admin/Postmaster/cell_adminIowa City, IA 52242-1527 #include Better is not better, 'standard' is better. B{
new mailman spam???
I have included the mailing in it's entirety below. Is this an old trick I just have not seen or is this something new using mailman to send spam. I assure you I neither signed up nor confirmed a submission for this mailing list. Is this just a poorly configured mailman install? Tom Return-Path: <[EMAIL PROTECTED]> X-Original-To: [EMAIL PROTECTED] Delivered-To: [EMAIL PROTECTED] Received: from permemail02.alumniconnections.com (permemail02.alumniconnections.com [198.212.10.117]) by nova.terranovum.com (Postfix) with ESMTP id E7AD93567E3 for <[EMAIL PROTECTED]>; Wed, 31 May 2006 20:07:55 -0400 (EDT) Received: from brandy.adelphi.edu (brandy.adelphi.edu [192.147.12.5]) by permemail02.alumniconnections.com (8.13.4/8.13.4) with ESMTP id k5107sOG012089 for <[EMAIL PROTECTED]>; Wed, 31 May 2006 20:07:54 -0400 (EDT) Received: from brandy.adelphi.edu (127.0.0.1) by brandy.adelphi.edu (MlfMTA v3.1r24) id hfoths0171sd for <[EMAIL PROTECTED]>; Wed, 31 May 2006 20:55:46 -0400 (envelope-from <[EMAIL PROTECTED]>) Received: from sodiconmx.org.mx ([206.225.91.17]) by brandy.adelphi.edu (Adelphi University) with ESMTP; Wed, 31 May 2006 20:55:46 -0400 Received: (qmail 29676 invoked from network); 31 May 2006 20:07:53 -0500 Received: from localhost (HELO sodiconmx.org.mx) (127.0.0.1) by localhost with SMTP; 31 May 2006 20:07:53 -0500 MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Subject: Welcome to the "Newsl2" mailing list From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] X-No-Archive: yes Message-ID: <[EMAIL PROTECTED]> Date: Wed, 31 May 2006 18:08:54 -0500 Precedence: bulk X-BeenThere: [EMAIL PROTECTED] X-Mailman-Version: 2.1.5 List-Id: newsl2.nueva-alianza.org.mx X-List-Administrivia: yes Sender: [EMAIL PROTECTED] Errors-To: [EMAIL PROTECTED] X-Mlf-Threat: nothreat X-Mlf-Threat-Detailed: nothreat;none;none;none X-Mlf-UniqueId: 200606010055460009014 X-Virus-Scanned: ClamAV 0.88/1504/Wed May 31 15:59:14 2006 on permemail02 X-Virus-Status: Clean X-Spam-Checker-Version: SpamAssassin 3.0.4 (2005-06-05) on nova.terranovum.com X-Spam-Level: X-Spam-Status: No, score=0.2 required=4.0 tests=FORGED_RCVD_HELO,NO_REAL_NAME autolearn=disabled version=3.0.4 Welcome to the [EMAIL PROTECTED] mailing list! To post to this list, send your email to: [EMAIL PROTECTED] General information about the mailing list is at: http://lists.nueva-alianza.org.mx/mailman/listinfo/newsl2 If you ever want to unsubscribe or change your options (eg, switch to or from digest mode, change your password, etc.), visit your subscription page at: http://lists.nueva-alianza.org.mx/mailman/options/newsl2/thomas_bolioli%40alumni.adelphi.edu You can also make such adjustments via email by sending a message to: [EMAIL PROTECTED] with the word `help' in the subject or body (don't include the quotes), and you will get back a message with instructions. You must know your password to change your options (including changing the password, itself) or to unsubscribe. It is: ekhuku Normally, Mailman will remind you of your nueva-alianza.org.mx mailing list passwords once every month, although you can disable this if you prefer. This reminder will also include instructions on how to unsubscribe or change your account options. There is also a button on your options page that will email your current password to you.