On Sat, 14 Dec 2002 19:11:52 +0200, Or Botton wrote: > I've just received a spam letter.
> Normally i'd just end it by filing the usual Abuse report and trashing the > thing, but this time I noticed something intresting in the headers: > Received: from amailsender.com (dsl-65-189-152-17.telocity.com [65.189.152.17]) > by ns.arachne.cz (8.12.6/8.12.6) with SMTP id gBD1IDtu032729 for > <[EMAIL PROTECTED]>; Fri, 13 Dec 2002 02:18:15 +0100 > Date: Thu, 12 Dec 2002 17:20:54 +0000 > From: [EMAIL PROTECTED] > .... Either the spammer is sending the spam TROUGH the Arachne mailing list, or > the bastard just grabbed the list of E-Mail addresses from the members listing. > Any way to prevent this? How about hiding a portion of the members' E-Mail > address in the viewable list? > I've also noticed that the letters I send to the list are saved in a publicly > viewable database. Thats fine by me... whats NOT fine is the fact my address can > be picked up from Google, which archives the database. That makes my E-Mail > address - and yours - a very nice and big Spam Bait. > Anyone? Yep.. I got that one too. Most likely, we all did. It seems to have been sent via the Arachne server using the "arachne-list" function. Michael, If you're reading this.... that's another reason why "arachne-list" needs to be disabled. Anyone at-all seems to be able to use your server to send ANYTHING they want to this entire list by simply addressing the message to "arachne-list at arachne.cz" Please everyone. Do not type the correct format if you use those above quoted words in a message. The spammers will grab any correctly formatted email address from anywhere on the net and try sending a spam to it. I'll bet that's why we got his spam. Myself and several others used the correct format in some of our messages. :((( -- Glenn http://arachne.cz/ http://www.delorie.com/listserv/mime/ http://www.angelfire.com/id/glenndoom/download.htm http://www.thispagecannotbedisplayed.com/
