[Groff] Spam from list member addresses

groff

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Groff] Spam from list member addresses

From:	Peter Schaffter
Subject:	[Groff] Spam from list member addresses
Date:	Thu, 31 Mar 2005 12:39:48 -0500
User-agent:	Mutt/1.5.4i

Hi.

I got two pornographic-sounding spams today, one apparently from
Werner, the other apparently from Ted Harding.  Rather than wait to
see if these are isolated incidents, I'm cut 'n' pasting both
emails with full headers into this post.

I'm not an expert in mail header forensics, but someone else may
spot something useful.  I'm operating on the "an ounce of
prevention is worth a pound of cure" theory here.  I can deal with
spams like these easily myself, provided they remain sporadic.  But
in the event they become systematic and affect other list members,
these two messages may prove useful in isolating the source of the
problem.

==================Begin bogus email from address@hidden

>From address@hidden  Thu Mar 31 11:48:45 2005
Return-path: address@hidden
Envelope-to: address@hidden
Delivery-date: Thu, 31 Mar 2005 11:46:49 -0500
Received: from pop.golden.net [199.166.210.104]
        by localhost with POP3 (fetchmail-5.9.11)
        for address@hidden (single-drop); Thu, 31 Mar 2005
11:48:45 -0500 (EST)
Received: from exprod6mx30.postini.com ([64.18.1.170] helo=psmtp.com)
        by mail4.int.golden.net with smtp (Exim 4.12)
        id 1DH2oi-000Njt-00
        for address@hidden; Thu, 31 Mar 2005 11:46:48
-0500
Received: from source ([199.166.210.22]) (using TLSv1) by 
exprod6mx30.postini.com
+([64.18.5.10]) with SMTP;
        Thu, 31 Mar 2005 11:46:46 EST
Received: from lists.gnu.org ([199.232.76.165])
        by mail3.int.golden.net with esmtp (Exim 4.12)
        id 1DH2of-0004Pm-00
        for address@hidden; Thu, 31 Mar 2005 11:46:46 -0500
Received: from localhost ([127.0.0.1] helo=lists.gnu.org)
        by lists.gnu.org with esmtp (Exim 4.43)
        id 1DH34E-0003zD-Cn
        for address@hidden; Thu, 31 Mar 2005 12:02:50 -0500
Received: from mailman by lists.gnu.org with tmda-scanned (Exim 4.43)
        id 1DH30h-0001PN-62
        for address@hidden; Thu, 31 Mar 2005 11:59:11 -0500
Received: from exim by lists.gnu.org with spam-scanned (Exim 4.43)
        id 1DH30S-0001Hl-Vf
        for address@hidden; Thu, 31 Mar 2005 11:59:08 -0500
Received: from [199.232.76.173] (helo=monty-python.gnu.org)
        by lists.gnu.org with esmtp (Exim 4.43) id 1DH30S-0001E5-Bf
        for address@hidden; Thu, 31 Mar 2005 11:58:56 -0500
Received: from [194.2.232.250] (helo=199.232.76.166)
        by monty-python.gnu.org with smtp (Exim 4.34) id 1DH2ik-0007k9-Uq
        for address@hidden; Thu, 31 Mar 2005 11:40:39 -0500
From: wl <address@hidden>
To: address@hidden
Date: 31 Mar 2005 18:40:37 +0100
MIME-Version: 1.0
X-Mailer: OstroSoft SMTP Component (5.1.1)
Content-Type: multipart/mixed; boundary="--NextMimePart"
Message-Id: <address@hidden>
X-Content-Filtered-By: Mailman/MimeDel 2.1.5
Subject: [Groff] File - movie SuCkingPuSSy.mpeg
X-BeenThere: address@hidden
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: groff.gnu.org
List-Unsubscribe: <http://lists.gnu.org/mailman/listinfo/groff>,
        <mailto:address@hidden>
List-Archive: <http://lists.gnu.org/pipermail/groff>
List-Post: <mailto:address@hidden>
List-Help: <mailto:address@hidden>
List-Subscribe: <http://lists.gnu.org/mailman/listinfo/groff>,
        <mailto:address@hidden>
Sender: address@hidden
Errors-To: address@hidden
X-original-rcpt: address@hidden

[-- Attachment #1 --]
[-- Type: text/plain, Encoding: 7bit, Size: 0K --]
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit


[-- Attachment #2 --]
[-- Type: text/plain, Encoding: 7bit, Size: 0.1K --]
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Groff mailing list
address@hidden
http://lists.gnu.org/mailman/listinfo/groff

===================End bogus email from address@hidden

=========Begin bogus email from address@hidden

>From address@hidden  Thu Mar 31 12:08:58 2005
Return-path: address@hidden
Envelope-to: address@hidden
Delivery-date: Thu, 31 Mar 2005 12:08:35 -0500
Received: from pop.golden.net [199.166.210.104]
        by localhost with POP3 (fetchmail-5.9.11)
        for address@hidden (single-drop); Thu, 31 Mar 2005 12:08:58 -0500 (EST)
Received: from exprod6mx89.postini.com ([64.18.1.73] helo=psmtp.com)
        by mail1.int.golden.net with smtp (Exim 4.12)
        id 1DH39n-000ATb-00
        for address@hidden; Thu, 31 Mar 2005 12:08:35 -0500
Received: from source ([199.166.210.22]) (using TLSv1) by 
exprod6mx89.postini.com
+([64.18.5.10]) with SMTP;
        Thu, 31 Mar 2005 09:08:33 PST
Received: from lists.gnu.org ([199.232.76.165])
        by mail5.int.golden.net with esmtp (Exim 4.12)
        id 1DH39l-000JRo-00
        for address@hidden; Thu, 31 Mar 2005 12:08:33 -0500
Received: from localhost ([127.0.0.1] helo=lists.gnu.org)
        by lists.gnu.org with esmtp (Exim 4.43)
        id 1DH3PJ-0007Ci-U6
        for address@hidden; Thu, 31 Mar 2005 12:24:37 -0500
Received: from mailman by lists.gnu.org with tmda-scanned (Exim 4.43)
        id 1DH3Oq-0007AR-18
        for address@hidden; Thu, 31 Mar 2005 12:24:08 -0500
Received: from exim by lists.gnu.org with spam-scanned (Exim 4.43)
        id 1DH3Oh-00075C-Fx
        for address@hidden; Thu, 31 Mar 2005 12:24:00 -0500
Received: from [199.232.76.173] (helo=monty-python.gnu.org)
        by lists.gnu.org with esmtp (Exim 4.43) id 1DH3Oh-000752-9Z
        for address@hidden; Thu, 31 Mar 2005 12:23:59 -0500
Received: from [194.2.232.250] (helo=199.232.76.166)
        by monty-python.gnu.org with smtp (Exim 4.34) id
1DH38K-0001xV-QP
        for address@hidden; Thu, 31 Mar 2005 12:07:06 -0500
From: "Ted.Harding" <address@hidden>
To: address@hidden
Date: 31 Mar 2005 19:07:03 +0100
MIME-Version: 1.0
X-Mailer: OstroSoft SMTP Component (5.1.1)
Content-Type: multipart/mixed; boundary="--NextMimePart"
Message-Id: <address@hidden>
X-Content-Filtered-By: Mailman/MimeDel 2.1.5
Subject: [Groff] Asses Mpeg's
X-BeenThere: address@hidden
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: groff.gnu.org
List-Unsubscribe: <http://lists.gnu.org/mailman/listinfo/groff>,
        <mailto:address@hidden>
List-Archive: <http://lists.gnu.org/pipermail/groff>
List-Post: <mailto:address@hidden>
List-Help: <mailto:address@hidden>
List-Subscribe: <http://lists.gnu.org/mailman/listinfo/groff>,
        <mailto:address@hidden>
Sender: address@hidden
Errors-To: address@hidden
X-original-rcpt: address@hidden

[-- Attachment #1 --]
[-- Type: text/plain, Encoding: 7bit, Size: 0K --]
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit


[-- Attachment #2 --]
[-- Type: text/plain, Encoding: 7bit, Size: 0.1K --]
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Groff mailing list
address@hidden
http://lists.gnu.org/mailman/listinfo/groff

==========End bogus email from address@hidden

-- 
Peter Schaffter
  Author of _The Schumann Proof_ (RendezVous Press, Canada)
  http://www.golden.net/~ptpi/theschumannproof.html

[Prev in Thread]

Current Thread

[Next in Thread]

[Groff] Spam from list member addresses, Peter Schaffter <=
- RE: [Groff] Spam from list member addresses, Ted Harding, 2005/03/31
  - Re: [Groff] Spam from list member addresses, Peter Schaffter, 2005/03/31
- Re: [Groff] Spam from list member addresses, John Doe, 2005/03/31
- Re: [Groff] Spam from list member addresses, Larry Kollar, 2005/03/31
- Re: [Groff] Spam from list member addresses, Meg McRoberts, 2005/03/31

Prev by Date: [Groff] Asses Mpeg's
Next by Date: [Groff] Fw: `·.¸MPEG`·.¸
Previous by thread: [Groff] Asses Mpeg's
Next by thread: RE: [Groff] Spam from list member addresses
Index(es):
- Date
- Thread