On Thursday 2016-02-11 20:27, Christian Boltz wrote:

Am Freitag, 12. Februar 2016, 02:20:28 CET schrieb Marguerite Su:

...

On Fri, Feb 12, 2016 at 2:17 AM, Lew Wolfgang wrote:

...

Probably forged. Did you check the raw headers?

http://paste.opensuse.org/58091645

Let me quote the relevant parts: (with your mail addresses masked to prevent more spam)

For the gutter. The kiddie scripts will s{ \[AT\] }{@}, or <at>, or whatever else and just try again, because trying is cheap.

From: scanner@opensuse.org To: marguerite [AT] opensuse.org

Needless to say that the "From" is forged ;-)

SPF *cough* *cough* -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org

On 12/02/16 08:22, Dominique Leuenberger wrote:

...

On 11 Feb 2016, at 22:05, Jan Engelhardt wrote:

...

From: scanner@opensuse.org To: marguerite [AT] opensuse.org

Needless to say that the "From" is forged ;-) SPF *cough* Come up with the TXT record that actually blocks all forged addresses but allows all legit users to keep using their email address - and keep in mind that opensuse.org does not offer an smtp server.

SPF is pretty useless there.

SURELY, the question to be asked and answered here is WHY did the opensuse server pass on the virus document instead of quarantining those 2 e-mails? BC -- Using openSUSE 13.2, KDE 4.14.9 & kernel 4.4.1-4 on a system with- AMD FX 8-core 3.6/4.2GHz processor 16GB PC14900/1866MHz Quad Channel RAM Gigabyte AMD3+ m/board; Gigabyte nVidia GTX660 GPU -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org

On Sun, 2016-02-14 at 15:52 +0100, Carlos E. R. wrote:

On Saturday, 2016-02-13 at 15:13 +1100, Basil Chupin wrote:

...

On 12/02/16 08:22, Dominique Leuenberger wrote:

...

...

On 11 Feb 2016, at 22:05, Jan Engelhardt wrote:

...

From: scanner@opensuse.org To: marguerite [AT] opensuse.org

Needless to say that the "From" is forged ;-) SPF *cough* Come up with the TXT record that actually blocks all forged addresses but allows all legit users to keep using their email address - and keep in mind that opensuse.org does not offer an smtp server.

SPF is pretty useless there.

Not if SRS is implemented.

Still: SPF/SRS combo will only be effective for anything I send from my @opensuse.org address to any other @opensuse.org address where any openSUSE server even has the chance to see it. If I send using my @opensuse.org address to your telefonica.net address directly, with a strict SPF, my mail never ever passes any opensuse infra - as openSUSE does not offer SMTP Servers, I am forced to use my own infrastructure. Hence: SPF is useless for this kind of setup (or one ends up with the usual ~ALL record, which basically allows everything again, taking the full power of SPF away) But this entire discussion should not be here - as it really has nothing to do with Factory/Tumbleweed or ANY openSUSE distribution (released or planned). Cheers, Dominique -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org

Hi On Sat, 13 Feb 2016 15:13:54 +1100 Basil Chupin wrote:

SURELY, the question to be asked and answered here is WHY did the opensuse server pass on the virus document instead of quarantining those 2 e-mails?

Simple reason: the scanner did not detect that virus... :-( One of the reason why even the best infrastructure should not stop people from thinking before they click on something. With kind regards, Lars -- Lars Vogdt - OPS Engineering Services Team Lead - SUSE Linux GmbH, GF: Felix Imendörffer, Jane Smithard, Graham Norton, HRB 21284 (AG Nürnberg) -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org