Some spam emails do not bear [SLE] and still sit in the list archive. Why does it not carry [SLE]? As far as I know, Linux-kernel list does not have those things sitting in the list archive. Why is that so? Is there any way preventing these spammers spewing on us? Thanks Hugh
* hugh
Some spam emails do not bear [SLE] and still sit in the list archive. Why does it not carry [SLE]?
Can you point us to a link of such?
As far as I know, Linux-kernel list does not have those things sitting in the list archive. Why is that so?
Because they get removed.
Is there any way preventing these spammers spewing on us?
I've not gotten one single spam to this list, since it's subscribe only. Are you sure you mean you get spam distributed via this list? -- Mads Martin Joergensen, http://mmj.dk "Why make things difficult, when it is possible to make them cryptic and totally illogical, with just a little bit more effort?" -- A. P. J.
Is there any way preventing these spammers spewing on us?
I've not gotten one single spam to this list, since it's subscribe only. Are you sure you mean you get spam distributed via this list?
In the last 2 months, I've started getting spam sent to my SuSE mail alias, but I've just attributed it to the fact that I'm posting to the list more and that makes it easier for the spammers to get my address from the archives. Maybe I shoulda kept being a lurker.. :) -- trey
Hi Trey, On Tue, 4 Nov 2003 09:23:52 -0500 (EST) UTC (11/4/2003, 8:23 AM -0600 UTC my time), Trey Gruel wrote: T> In the last 2 months, I've started getting spam sent to my SuSE mail T> alias, but I've just attributed it to the fact that I'm posting to the T> list more and that makes it easier for the spammers to get my address T> from the archives. T> Maybe I shoulda kept being a lurker.. :) Then they win... you can easily stop spammers who harvest email address on this list, and they do, by using a fake or timed From: header. This list uses ezmlm, and when you subscribed it was done with your envelope sender address, (Return-Path header), not your From: address... use a MUA that allows you to change either your From: header or envelope sender address... What is shown to the list is your From: header only which is either fake, or timed to expire, as mine is. -- Gary Go the extra mile. It makes your boss look like an incompetent slacker.
The Tuesday 2003-11-04 at 08:45 -0600, Gary wrote:
T> Maybe I shoulda kept being a lurker.. :)
Then they win... you can easily stop spammers who harvest email address on this list, and they do, by using a fake or timed From: header.
This list uses ezmlm, and when you subscribed it was done with your envelope sender address, (Return-Path header), not your From: address... use a MUA that allows you to change either your From: header or envelope sender address... What is shown to the list is your From: header only which is either fake, or timed to expire, as mine is.
We have commented this several times, and it seems that the only MUA capable of doing that is "mutt". Not kmail, not balsa, not pine, not mozilla, not evolution (I think)... only "mutt". The other way is having our own domain - and I don't. So, what you say is true, but impossible to do for the majority of listers. -- Cheers, Carlos Robinson
Hi Carlos, On Tue, 4 Nov 2003 22:01:44 +0100 (CET) UTC (11/4/2003, 3:01 PM -0600 UTC my time), Carlos E. R. wrote: C> The Tuesday 2003-11-04 at 08:45 -0600, Gary wrote:
Then they win... you can easily stop spammers who harvest email address on this list, and they do, by using a fake or timed From: header.
C> We have commented this several times, and it seems that the only MUA C> capable of doing that is "mutt". Not kmail, not balsa, not pine, not C> mozilla, not evolution (I think)... only "mutt". C> The other way is having our own domain - and I don't. This is also a possibility, and only costs about $15 US a year or two (depending on com - net / versus biz - info domains) C> So, what you say is true, but impossible to do for the majority of C> listers. Currently, I am using my all time favorite MUA, The Bat! under SUSE wine, which does allow you to reset anything through macros, etc, and this works well. If I come across a Linux MUA that allows for the necessary changes, I will keep you posted. -- Gary A snooze button is a poor substitute for no alarm clock at all.
The Tuesday 2003-11-04 at 15:18 -0600, Gary wrote:
C> The other way is having our own domain - and I don't.
This is also a possibility, and only costs about $15 US a year or two (depending on com - net / versus biz - info domains)
Plus a 24/7 server and network. And, if the domain purchase is not handled through my ISP, I don't get reverse dns, which is needed sometimes. Not a solution for everybody.
C> So, what you say is true, but impossible to do for the majority of C> listers.
Currently, I am using my all time favorite MUA, The Bat! under SUSE wine, which does allow you to reset anything through macros, etc, and this works well. If I come across a Linux MUA that allows for the necessary changes, I will keep you posted.
Till you find a linux native program that allows having different from and envelope from headers, no solution either ;-) -- Cheers, Carlos Robinson
On Tue, Nov 04, 2003 at 10:01:44PM +0100, Carlos E. R. wrote:
The Tuesday 2003-11-04 at 08:45 -0600, Gary wrote:
This list uses ezmlm, and when you subscribed it was done with your envelope sender address, (Return-Path header), not your From: address... use a MUA that allows you to change either your From: header or envelope sender address... What is shown to the list is your From: header only which is either fake, or timed to expire, as mine is.
We have commented this several times, and it seems that the only MUA capable of doing that is "mutt". Not kmail, not balsa, not pine, not mozilla, not evolution (I think)... only "mutt".
The other way is having our own domain - and I don't.
So, what you say is true, but impossible to do for the majority of listers.
This is just a thought o.k? I just checked and Kmail lets you specify an outgoing account "Sendmail": Going to Settings-> Configure Kmail -> Network -> Sending Clicking 'add' gives you a choice of 'smtp' or 'Sendmail'. Now, if you choose 'Sendmail' a dialog pops up that lets you type in a 'Name' for the account (Prefilled "Sendmail") and a 'Location' (Prefilled "/usr/bin/sendmail") So couldn't you use this to specify a script that would add/modify headers as neccessary (Procmail? Formail?) and *then* hand the mail over to whatever mechanism to send it off... Just a thought... /Jon -- Whatever rocks your boat!
The Tuesday 2003-11-04 at 23:28 +0100, Jon Clausen wrote:
This is just a thought o.k? ... So couldn't you use this to specify a script that would add/modify headers as neccessary (Procmail? Formail?) and *then* hand the mail over to whatever mechanism to send it off...
Just a thought...
Arg! I'm going to have nightmares in a few moments (bed time here)... too difficult, possibly not possible. -- Cheers, Carlos Robinson
On Wednesday 05 November 2003 02:42, Carlos E. R. wrote:
The Tuesday 2003-11-04 at 23:28 +0100, Jon Clausen wrote:
This is just a thought o.k?
...
So couldn't you use this to specify a script that would add/modify headers as neccessary (Procmail? Formail?) and *then* hand the mail over to whatever mechanism to send it off...
Just a thought...
Arg! I'm going to have nightmares in a few moments (bed time here)... too difficult, possibly not possible.
I think that 'we' the users need to spoof our from addresses, when sending to a mailing list. I got lots of spam from the samba mailing list, more than from this one. Dunno if it's accepted, but if it was possible to just put 'void@nowhere.net' as the from/reply address, would make it harder for spammers to pick up email addresses from the archives. Better yet, the list daemon should do it.
The Wednesday 2003-11-05 at 14:47 +0100, Örn Hansen wrote:
I think that 'we' the users need to spoof our from addresses, when sending to a mailing list.
The trick is to spoof the from address, while keeping the "envelope from" intact and correct - and the only mua (mail user agent) that allows it (as far as I know) is 'mutt'. For the rest, the "envelope from" is set automatically equal to the "from address". Therefore, if you spoof the from address on a normal client program your mail will be simply rejected (as it is not the one you subscribed from). If you alter the reply-to, you don't get any advantage, the spammers will still get the correct one.
I got lots of spam from the samba mailing list, more than from this one. Dunno if it's accepted, but if it was possible to just put 'void@nowhere.net' as the from/reply address, would make it harder for spammers to pick up email addresses from the archives. Better yet, the list daemon should do it.
It won't. There are policy issues, or however you call them. Quite complicated, and I don't mean technically. -- Cheers, Carlos Robinson
On Thu, Nov 06, 2003 at 01:46:29AM +0100 or thereabouts, Carlos E. R. wrote:
The Wednesday 2003-11-05 at 14:47 +0100, Örn Hansen wrote:
I think that 'we' the users need to spoof our from addresses, when sending to a mailing list.
The trick is to spoof the from address, while keeping the "envelope from" intact and correct - and the only mua (mail user agent) that allows it (as far as I know) is 'mutt'. For the rest, the "envelope from" is set automatically equal to the "from address".
there are two others, Carlos, now that I think about it, Emacs, and Xemacs. They will support different envelope sender and From: I use it sometimes.
I got lots of spam from the samba mailing list, more than from this one. Dunno if it's accepted, but if it was possible to just put 'void@nowhere.net' as the from/reply address, would make it harder for spammers to pick up email addresses from the archives. Better yet, the list daemon should do it.
The only mail list mgr that I know of that subscribes soneone based on the envelope sender it the one use by this list, Ezmlm ... It has several other features that makes it appealing to a busy list. -- Gary
On Thu, Nov 06, 2003 at 01:46:29AM +0100 or thereabouts, Carlos E. R. wrote:
The trick is to spoof the from address, while keeping the "envelope from" intact and correct - and the only mua (mail user agent) that allows it (as far as I know) is 'mutt'. For the rest, the "envelope from" is set automatically equal to the "from address".
Therefore, if you spoof the from address on a normal client program your mail will be simply rejected (as it is not the one you subscribed from). If you alter the reply-to, you don't get any advantage, the spammers will still get the correct one.
Just had an idea Carlos, in the WU Pine Tech Notes, config and preferences section http://www.washington.edu/pine/tech-notes/config.html (look under customized-hdrs section) you can config a lot of things, more than I realized. Now if you could add a header called Return-Path: with your real suse email address, that should become your envelope sender, while your From: header could be a fake. This might work.. Many MUAs use the Return-Path for envelope sender address. -- Gary
The Wednesday 2003-11-05 at 20:55 -0600, gary wrote:
Just had an idea Carlos, in the WU Pine Tech Notes, config and preferences section http://www.washington.edu/pine/tech-notes/config.html (look under customized-hdrs section)
you can config a lot of things, more than I realized. Now if you could add a header called Return-Path: with your real suse email address, that should become your envelope sender, while your From: header could be a fake. This might work.. Many MUAs use the Return-Path for envelope sender address.
Interesting... lets try it out.
I made a new role. Under the section "actions begin here", I have
(trimmed):
Initialize settings using role : Carlos E. R. (tiscali - lists)
Set From = "Carlos E. R."
The Tuesday 2003-11-04 at 09:23 -0500, Trey Gruel wrote:
In the last 2 months, I've started getting spam sent to my SuSE mail alias, but I've just attributed it to the fact that I'm posting to the list more and that makes it easier for the spammers to get my address from the archives.
Yes, me too. SpamAssassin catches most of them. By the way, one of the mail spams I got included, as attachment, a text file containing 3237 mail addresses (your's not there). The beginning of the file says: | |Email Spider Easy | Targeted Email Extract Expert Another interesting note, is that less than a month ago, the police here captured a gang that posted "nigerian spam". The gang had got, if my memory is correct, a hundred victims, mostly americans and canadians. But it doesn't seem I get less nigerian spam :-(
Maybe I shoulda kept being a lurker.. :)
Then we couldn't "meet" here :-) -- Cheers, Carlos Robinson
participants (10)
-
Carlos E. R. -
Gary -
gary -
gary -
Gary -
hugh -
Jon Clausen -
Mads Martin Joergensen -
Trey Gruel -
Örn Hansen