[clug] Spam on list (was Re: Photo management?)

[George at Clug]

    Neil,

I agree with you, the last spam I received had the below details
(nr24.searhaik.com), and nothing to do with "CLUG List" 
	*  but was sent directly to my email account.

Return-Path:  Delivered-To: Clug at goproject.info Received-SPF: pass
(spomg.com: 45.35.84.21 is authorized to use 'JuliaRose4563 at spomg.com'
in 'mfrom' identity (mechanism 'ip4:45.35.84.0/25' matched))
receiver=deb6.goproject.info; identity=mailfrom;
envelope-from="JuliaRose4563 at spomg.com"; helo=nr24.searhaik.com;
client-ip=45.35.84.21 Received: from nr24.searhaik.com
(nr24.searhaik.com [45.35.84.21]) by mail.goproject.info (Postfix)
with ESMTP id BD1991420A7 for ; Thu, 24 Dec 2015 10:26:20 +1100 (AEDT)
Received: from ZTFrOPiLP2.com (unknown [45.35.84.104]) by
nr24.searhaik.com (Postfix) with ESMTPSA id 9B95A21B28 for ; Thu, 24
Dec 2015 07:26:06 +0000 (UTC) DMARC-Filter: OpenDMARC Filter v1.3.1
nr24.searhaik.com 9B95A21B28 Authentication-Results:
nr24.searhaik.com; dmarc=pass header.from=spomg.com
Authentication-Results: nr24.searhaik.com; spf=pass
smtp.mailfrom=JuliaRose4563 at spomg.com Date: Thu, 24 Dec 2015 05:26:17
+0600 To: Clug at goproject.info From: Julia Rose  Reply-To:
JuliaRose4563 at spomg.com Subject: Re: Re: [clug] Photo management?
Mes"Neill Cox" , "Tim Potter" sage-ID:  X-Priority: 3 X-Mailer:
PHPMailer 5.2.9 (https://github.com/PHPMailer/PHPMailer/) In-Reply-To:
6d7a58347bbe412e1ce3a2f45390ba34 at go.goproject.info MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="b1_0876373af3960ebcdfd3fb0c56b6a025"
Content-Transfer-Encoding: 8bit --b1_0876373af3960ebcdfd3fb0c56b6a025
Content-Type: multipart/alternative;
boundary="b2_0876373af3960ebcdfd3fb0c56b6a025"
--b2_0876373af3960ebcdfd3fb0c56b6a025 Content-Type: text/plain;
charset=us-ascii 

At Thursday, 24-12-2015 on 10:25 Neill Cox wrote:


I am (notionally) a list admin.

Having looked at the headers of one of these spam mail there is no
sign it
went through the list server.

I suspect someone has harvested emails and is pretending to send email
from
the list.

Perhaps we need to do some SPF / DKIM[0], but as we're currently on
the
samba.org infrastructure we'll need some help from their admin team.

Or, this might be another motivation for moving the CLUG list of
samba.org
and onto a domain we control.

Cheers,
Neill

[0] I'm not suggesting that SPF / DKIM will completely solve this, but
it
would help some people at least.

On Thu, Dec 24, 2015 at 9:49 AM, Tim Potter 
wrote:

> > On 24 Dec 2015, at 8:52 am, steve jenkin 
> wrote:
> >
> > Same.
> > Reported it to the list admins, heard nothing.
>
> I'm not sure who is list admin these days, but it's possible that
this is
> occurring outside
> of the list.  Do the spam messages look like they are being sent
by
> lists.samba.org?
>
> I imagine that this could be someone harvesting active email
addresses
> from publicly
> available list archives and sending spam directly.  I'm not seeing
any
> messages in
> my spam folder but they could be being filtered out upstream.
>
>
> Tim.
>
> >
> >> On 23 Dec 2015, at 10:35 PM, Jeff NotTelling 
> wrote:
> >>
> >> As an aside, is anyone else/everyone getting bombarded by Spam on
this
> >> thread?  I've got 10 spam emails on this thread alone since
yesterday.
> >> Just a bit surprised as I rarely see spam.  Just your typical
> >> Spam/Phishing, "I'm a hot girl, see my photo, all you need to do
is
> fill in
> >> this form with your credit card, address etc, not that it will be
> charged"
> >> and so on.
> >>
> >> Cheers,
> >> Jeff.
> >
> > --
> > Steve Jenkin, IT Systems and Design
> > 0412 786 915 (+61 412 786 915)
> > PO Box 48, Kippax ACT 2615, AUSTRALIA
> >
> > mailto:sjenkin at canb.auug.org.au http://members.tip.net.au/~sjenkin
> >
> >
> > --
> > linux mailing list
> > linux at lists.samba.org
> > https://lists.samba.org/mailman/listinfo/linux
> >
>
>
> --
> linux mailing list
> linux at lists.samba.org
> https://lists.samba.org/mailman/listinfo/linux
>



-- 
Neill Cox
Software Developer
Rackspace Australia
-- 
linux mailing list
linux at lists.samba.org
https://lists.samba.org/mailman/listinfo/linux