OT: still seeing spam

7 posts ยท Mar 4 2005 to Mar 5 2005

From: Frits Kuijlman <frits@k...>

Date: Fri, 4 Mar 2005 13:03:03 +0100

Subject: OT: still seeing spam

I am still getting several spams a day on this list. As far as I can see in
the header it is not spoofed but actually sent via the list. Is there anything
that can be done about this? Stricter
filtering/matching of membership of senders or something?

Compared to the rest of the spam I get it is not much, but it is irritating.

From: db-ft@w... (David Brewer)

Date: Fri, 04 Mar 2005 12:37:19 +0000

Subject: Re: OT: still seeing spam

> Frits Kuijlman wrote:

I'm getting them too, but I don't think they are passing as
regular list-mail. If I read the headers correctly (I'm no
expert), it isn't going via the majordomo list traffic but cuts into the
csua.b.e bulk mailing program that the majordomo list uses.

Perhaps csua.b.e has been compromised or misconfigured to provide an open
relay for spammers.

From: Aaron Teske <ateske@H...>

Date: Fri, 4 Mar 2005 05:33:32 -0800 (PST)

Subject: Re: OT: still seeing spam

Oddly enough, all of them are coming through to me dated February 14th, so I
have to scroll back in the list to clear them out every now and then...not
sure if others are seeing the same thing or not? (Or maybe I just save too
many messages....)

'Til later, Aaron

> --- David Brewer <davidbrewer@blueyonder.co.uk> wrote:

From: Frits Kuijlman <frits@k...>

Date: Fri, 4 Mar 2005 15:06:40 +0100

Subject: Re: OT: still seeing spam

> Aaron Teske wrote:

From: Roger Burton West <roger@f...>

Date: Fri, 4 Mar 2005 14:19:08 +0000

Subject: Re: OT: still seeing spam

> On Fri, Mar 04, 2005 at 12:37:19PM +0000, David Brewer wrote:

> I'm getting them too, but I don't think they are passing as

That's consistent with what I'm seeing - they aren't carrying the

From: Matthew Seidl <seidl@v...>

Date: Fri, 04 Mar 2005 10:16:50 -0700

Subject: Re: OT: still seeing spam

> On Fri, 4 Mar 2005 13:03:03 +0100, Frits Kuijlman writes:

I don't think I've seen a single one. Can you forward me one (with the
complete headers attached)?

From: Warbeads@a...

Date: Fri, 4 Mar 2005 21:51:27 EST

Subject: Re: OT: still seeing spam

In a message dated 3/4/05 6:20:04 AM Pacific Standard Time,
> roger@firedrake.org writes:

<snip>

Looks as though the spammer is exploiting a vulnerability in the majordomo
configuration to
address mail directly to  the "gzg-l-outgoing" list alias.

Roger

Would that be exploitable from outside the list? All that brain power and
energy for Chaos... It gives Kaos a bad name!

Gracias,