[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Spam u don't like
From: |
David Kastrup |
Subject: |
Re: Spam u don't like |
Date: |
Fri, 04 Mar 2016 11:44:35 +0100 |
User-agent: |
Gnus/5.13 (Gnus v5.13) Emacs/25.1.50 (gnu/linux) |
"Peter Gentry" <address@hidden> writes:
> How did potential malware links get into the list, it hasn't happend
> before? If its not spam then the poster should be less cryptic
> or he won't get anyone interested.
Spam sent with a spoofed address from a list participant.
The headers indicate
Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim
4.71)
(envelope-from <address@hidden>) id 1abl63-0001w5-GC
for address@hidden; Fri, 04 Mar 2016 03:28:30 -0500
Original-Received: from mbob.nabble.com ([162.253.133.15]:52587)
by eggs.gnu.org with esmtp (Exim 4.71)
(envelope-from <address@hidden>) id 1abl63-0001uG-8E
for address@hidden; Fri, 04 Mar 2016 03:28:27 -0500
Original-Received: from msam.nabble.com (unknown [162.253.133.85])
by mbob.nabble.com (Postfix) with ESMTP id A4078222658C
for <address@hidden>; Fri, 4 Mar 2016 00:20:03 -0800 (PST)
X-detected-operating-system: by eggs.gnu.org: iOS iPhone or iPad
X-Received-From: 162.253.133.15
Which seems like an injection via Nabble.com. Rather than a spoofed
mail address, this would rather look like a hacked account at
Nabble.com. Much less likely, a hacked iPad (but what kind of
virus/worm would try going through a Nabble account next?).
Marc? Any ideas?
--
David Kastrup