[clug] Spam on list (was Re: Photo management?)
George at Clug
Clug at goproject.info
Wed Dec 23 23:42:08 UTC 2015
I agree with you, the last spam I received had the below details
(nr24.searhaik.com), and nothing to do with "CLUG List"
* but was sent directly to my email account.
Return-Path: Delivered-To: Clug at goproject.info Received-SPF: pass
(spomg.com: 220.127.116.11 is authorized to use 'JuliaRose4563 at spomg.com'
in 'mfrom' identity (mechanism 'ip4:18.104.22.168/25' matched))
envelope-from="JuliaRose4563 at spomg.com"; helo=nr24.searhaik.com;
client-ip=22.214.171.124 Received: from nr24.searhaik.com
(nr24.searhaik.com [126.96.36.199]) by mail.goproject.info (Postfix)
with ESMTP id BD1991420A7 for ; Thu, 24 Dec 2015 10:26:20 +1100 (AEDT)
Received: from ZTFrOPiLP2.com (unknown [188.8.131.52]) by
nr24.searhaik.com (Postfix) with ESMTPSA id 9B95A21B28 for ; Thu, 24
Dec 2015 07:26:06 +0000 (UTC) DMARC-Filter: OpenDMARC Filter v1.3.1
nr24.searhaik.com 9B95A21B28 Authentication-Results:
nr24.searhaik.com; dmarc=pass header.from=spomg.com
Authentication-Results: nr24.searhaik.com; spf=pass
smtp.mailfrom=JuliaRose4563 at spomg.com Date: Thu, 24 Dec 2015 05:26:17
+0600 To: Clug at goproject.info From: Julia Rose Reply-To:
JuliaRose4563 at spomg.com Subject: Re: Re: [clug] Photo management?
Mes"Neill Cox" , "Tim Potter" sage-ID: X-Priority: 3 X-Mailer:
PHPMailer 5.2.9 (https://github.com/PHPMailer/PHPMailer/) In-Reply-To:
6d7a58347bbe412e1ce3a2f45390ba34 at go.goproject.info MIME-Version: 1.0
Content-Transfer-Encoding: 8bit --b1_0876373af3960ebcdfd3fb0c56b6a025
--b2_0876373af3960ebcdfd3fb0c56b6a025 Content-Type: text/plain;
At Thursday, 24-12-2015 on 10:25 Neill Cox wrote:
I am (notionally) a list admin.
Having looked at the headers of one of these spam mail there is no
went through the list server.
I suspect someone has harvested emails and is pretending to send email
Perhaps we need to do some SPF / DKIM, but as we're currently on
samba.org infrastructure we'll need some help from their admin team.
Or, this might be another motivation for moving the CLUG list of
and onto a domain we control.
 I'm not suggesting that SPF / DKIM will completely solve this, but
would help some people at least.
On Thu, Dec 24, 2015 at 9:49 AM, Tim Potter
> > On 24 Dec 2015, at 8:52 am, steve jenkin
> > Same.
> > Reported it to the list admins, heard nothing.
> I'm not sure who is list admin these days, but it's possible that
> occurring outside
> of the list. Do the spam messages look like they are being sent
> I imagine that this could be someone harvesting active email
> from publicly
> available list archives and sending spam directly. I'm not seeing
> messages in
> my spam folder but they could be being filtered out upstream.
> >> On 23 Dec 2015, at 10:35 PM, Jeff NotTelling
> >> As an aside, is anyone else/everyone getting bombarded by Spam on
> >> thread? I've got 10 spam emails on this thread alone since
> >> Just a bit surprised as I rarely see spam. Just your typical
> >> Spam/Phishing, "I'm a hot girl, see my photo, all you need to do
> fill in
> >> this form with your credit card, address etc, not that it will be
> >> and so on.
> >> Cheers,
> >> Jeff.
> > --
> > Steve Jenkin, IT Systems and Design
> > 0412 786 915 (+61 412 786 915)
> > PO Box 48, Kippax ACT 2615, AUSTRALIA
> > mailto:sjenkin at canb.auug.org.au http://members.tip.net.au/~sjenkin
> > --
> > linux mailing list
> > linux at lists.samba.org
> > https://lists.samba.org/mailman/listinfo/linux
> linux mailing list
> linux at lists.samba.org
linux mailing list
linux at lists.samba.org
More information about the linux