Hi all, Is anybody getting these after posting to this list? <quote> Subject:Thank you for your inquiry. From:"maillist@promotionfactory.net" <maillist@promotionfactory.net> To:<suse-security@nergenshuizen.nl> Please reply to this e-mail to receive our current specials. If others should get this, include their e-mail also. <unquote>
On Thu, Dec 11, 2003 at 09:20:37PM +0100, Richard wrote:
Hi all, Is anybody getting these after posting to this list?
<quote> Subject:Thank you for your inquiry. From:"maillist@promotionfactory.net" <maillist@promotionfactory.net> To:<suse-security@nergenshuizen.nl>
Please reply to this e-mail to receive our current specials. If others should get this, include their e-mail also. <unquote>
Yes, I have been getting those mails. I've never linked them to this list though. This will serve as a testmessage then :-) -- Erik Hensema (erik@hensema.net)
On Thu, Dec 11, 2003 at 09:20:37PM +0100, Richard wrote:
Hi all, Is anybody getting these after posting to this list?
<quote> Subject:Thank you for your inquiry. From:"maillist@promotionfactory.net" <maillist@promotionfactory.net> To:<suse-security@nergenshuizen.nl>
Please reply to this e-mail to receive our current specials. If others should get this, include their e-mail also. <unquote>
My spam filter says: Yes, this is in my spam pool, but I don't know whether it is related to this list. Robert -- Robert Schiele Tel.: +49-621-181-2517 Dipl.-Wirtsch.informatiker mailto:rschiele@uni-mannheim.de
My spam filter says: Yes, this is in my spam pool, but I don't know whether it is related to this list. My <suse-security@nergenshuizen.nl> emailaddress is used only for this list and is published nowhere else. That's why I asked here.
Cheers, Richard
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Richard wrote: |>My spam filter says: Yes, this is in my spam pool, but I don't know |>whether it is related to this list. | | My <suse-security@nergenshuizen.nl> emailaddress is used only for this | list and is published nowhere else. That's why I asked here. | | Cheers, | Richard Funny, I noticed the same thing earlier today; within seconds of posting to this list, I received that very same email. I sent this email to all possible admin contacts just to sound a bit threatening and to see if I get a reply: - ---SNIP--- ~ Dear List Administrator; ~ I hereby demand (on behalf of maginetworks.com) the ~ IP address of the computer that has registered the ~ email address "administrator@maginetworks.com" to ~ your mailing list as well as the date and time that ~ this was done. Furthermore, I wish for the above ~ mentioned address to be removed from any such ~ mailing lists you operate. - ---SNIP--- Their administrative contact seems to be LD3695 (NIC Handle), perhaps I should write a more appropriate letter to him to see if I can get a reply. Also, I am sending this email from a "virgin" account... Perhaps not, SuSE doesn't seem to accept that... J. Theriault administrator@maginetworks.com -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.2 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQE/2OcU0lOMuR0OVK0RAoy2AKCKak4WUZaf1z8Ps68uYPxyG9+y2ACeMTl1 CkZ7seiL/RHHu0vBMeqVtpw= =B+MM -----END PGP SIGNATURE-----
On Thursday 11 December 2003 21:41, Richard wrote:
My spam filter says: Yes, this is in my spam pool, but I don't know whether it is related to this list.
My <suse-security@nergenshuizen.nl> emailaddress is used only for this list and is published nowhere else. That's why I asked here.
That's one of the reasons why I post to this list without revealing my email-address, previously I also used an separate email-address only for this list, spammers are still trying to deliver spam to it. -- GertJan Email address is invalid, so don't reply directly, I'm on the list.
Why doesn't SuSE just strip the sender's email address from all the emails that are posted to this list, AFTER mailing the subscribers list first, and BEFORE archiving them on the SuSE server for reference purposes. Then only list members would have access to each other's email addresses, and they would not be available from the archives on the net for the whole world to see (and harvest). (Do a Google search with your own email address and see what happens)! If anyone reads the archives on the webserver, and wants to reply to the sender, then they will have to join the list like the rest of us, and post to the list (if they are not already on mailing list). Off-list discussions could continue on the understanding that PRIVATE email addresses are not included in any further emails to the public mailing list. HTH - Kind Regards Keith Roberts On Thu, 11 Dec 2003, GertJan Spoelman wrote:
To: suse-security@suse.com From: GertJan Spoelman <nobody@localhost.invalid> Subject: Re: [suse-security] Curious response
On Thursday 11 December 2003 21:41, Richard wrote:
My spam filter says: Yes, this is in my spam pool, but I don't know whether it is related to this list.
My <suse-security@nergenshuizen.nl> emailaddress is used only for this list and is published nowhere else. That's why I asked here.
That's one of the reasons why I post to this list without revealing my email-address, previously I also used an separate email-address only for this list, spammers are still trying to deliver spam to it. --
GertJan
Email address is invalid, so don't reply directly, I'm on the list.
Why doesn't SuSE just strip the sender's email address from all the emails that are posted to this list, AFTER mailing the subscribers list first, and BEFORE archiving them on the SuSE server for reference purposes. I don't think that would have helped in this particular case. Judging from the mere SECONDS between my mailing the list and my receiving this spam I'd say this is done by a subscriber to the list. -- Het begint met margarine, en het eindigt met de teloorgang van alle menselijke waarden! -- De Volkskeuken, 28 oktober 2003
On Friday 12 December 2003 12:48, Richard wrote:
I don't think that would have helped in this particular case. Judging from the mere SECONDS between my mailing the list and my receiving this spam I'd say this is done by a subscriber to the list.
Here is what I assume: Somebody has subscribed to this list with an address that is used to subscribe to another list. E.g., if I would subscribe to the list suse-security by using the address suse-security-announce@suse.com then everybody who sends a message to suse-security@suse.com would get a message from the ezmlm programme managing the suse-security-announce@suse.com mailing list. /Sven
I don't think that would have helped in this particular case. Judging from the mere SECONDS between my mailing the list and my receiving this spam I'd say this is done by a subscriber to the list.
Possibly - because I have just received this email from promotions factory. All the other spam seems to have built up gradually since subscribing to this list. Regards - Keith Roberts
Why doesn't SuSE just strip the sender's email address from all the emails that are posted to this list, AFTER mailing the subscribers list first, and BEFORE archiving them on the SuSE server for reference purposes. YES PLEASE!!!
There's of course various things that we can do ourselves but I feel that including the real sender-address is not desirable anymore. Peter
On Friday 12 December 2003 12:51, Peter van den Heuvel wrote:
YES PLEASE!!!
There's of course various things that we can do ourselves but I feel that including the real sender-address is not desirable anymore.
Hm, I remember that we had this discussion before on another list. I recall that we would all be out of the wood if we used one of these `geek' mail clients like mutt. ;-) As far as I remember, the thing is: ezmlm doesn't (necessarily) check the FROM address in the header of an e-mail sent to the list in order to verify if you are subscribed or not. The thing that matters is the envelope address header, which is not included when ezmlm forwards a message to all list members. So, you could have a fake address in the FROM field as long as the envelope address is set to the address used for subscription. (Please correct me, if I'm wrong!) /Sven
On Thursday 11 December 2003 21:37, Sven Wahl wrote:
Yep! I've submitted this to spamcop twice already ;-)
And here it comes again: Return-Path: <maillist@promotionfactory.net> Received: from PromotionFactory.Net ([66.193.15.252]) by webmail.stud.slu.se (8.12.10/8.12.10) with ESMTP id hBBKc001004525 for <x1svewah@stud.slu.se>; Thu, 11 Dec 2003 21:38:03 +0100 (MET) Received: from [66.193.15.252] by PFN1 (ArGoSoft Mail Server Pro for WinNT/2000/XP, Version 1.8 (1.8.4.3)); Thu, 11 Dec 2003 15:44:48 -0500 From: "maillist@promotionfactory.net" <maillist@promotionfactory.net> To: Sven Wahl <x1svewah@stud.slu.se> X-ArGoMail-Auto-Response: Yes Subject: Thank you for your inquiry. Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Message-ID: <af8fm2556akwgrj.111220031544@PromotionFactory.Net> Date: Thu, 11 Dec 2003 15:44:48 -0500 Content-Length: 116 X-UID: 80 Please reply to this e-mail to receive our current specials. If others should get this, include their e-mail also. -- They must be directly harvesting this list. That's rude!!!
participants (8)
-
Erik Hensema -
GertJan Spoelman -
J. Theriault -
Keith Roberts -
Peter van den Heuvel -
Richard -
Robert Schiele -
Sven Wahl