On Sat, 14 Dec 2002 19:11:52 +0200, Or Botton wrote:

> I've just received a spam letter.

> Normally i'd just end it by filing the usual Abuse report and trashing the
> thing, but this time I noticed something intresting in the headers:

> Received: from amailsender.com (dsl-65-189-152-17.telocity.com 
[65.189.152.17])
>       by ns.arachne.cz (8.12.6/8.12.6) with SMTP id gBD1IDtu032729    for
> <[EMAIL PROTECTED]>; Fri, 13 Dec 2002 02:18:15 +0100
> Date: Thu, 12 Dec 2002 17:20:54 +0000
> From: [EMAIL PROTECTED]

> .... Either the spammer is sending the spam TROUGH the Arachne mailing list, or
> the bastard just grabbed the list of E-Mail addresses from the members listing.

> Any way to prevent this? How about hiding a portion of the members' E-Mail
> address in the viewable list?

> I've also noticed that the letters I send to the list are saved in a publicly
> viewable database. Thats fine by me... whats NOT fine is the fact my address can
> be picked up from Google, which archives the database. That makes my E-Mail
> address - and yours - a very nice and big Spam Bait.

> Anyone?

Yep.. I got that one too. Most likely, we all did.

It seems to have been sent via the Arachne server
using the "arachne-list" function.

Michael,

If you're reading this.... that's another reason why "arachne-list"
needs to be disabled.

Anyone at-all seems to be able to use your server to send ANYTHING they
want to this entire list by simply addressing the message to
"arachne-list at arachne.cz"

Please everyone.

Do not type the correct format if you use those above quoted words
in a message.

The spammers will grab any correctly formatted email address from
anywhere on the net and try sending a spam to it.

I'll bet that's why we got his spam. Myself and several others used the
correct format in some of our messages. :(((

-- 
 Glenn
 http://arachne.cz/
 http://www.delorie.com/listserv/mime/
 http://www.angelfire.com/id/glenndoom/download.htm
 http://www.thispagecannotbedisplayed.com/

Reply via email to