On Sun, 1 Nov 1998 [EMAIL PROTECTED] wrote:
> "Sanford" first subscribed his multiple email addresses to the
> list, then somehow managed to throw a loop
> into the list -- which is an annoucement list --
> so that it was, in essence, a digest.
> All messages sent to the listowner's email address -- including his
> spams -- were therefore
> sent to the entire list.
Bummer. Spamford Wallace is an infamous spammer with years of
experience in email trickery. What sort of software is used to serve
your mailing list (MajorDomo, Listproc, Listserv, Lyris, etc.)? Are
you sure he is sending this traffic through your list server? Does
you list server allow anyone to get the subscriber list?
It should not be easy to "hijack" the list server itself on a properly
set up announcement list. If your server admin did not take care with
the setup, it may be possible to for an outsider to get the subscriber
addresses . He could then send email directly to your subscribers
which looks like it came from your server. See if you can get a
full-headers copy of one of the spams. Have your local postmaster
look over the headers to confirm it's true origin. Have your serve
admin confirm that outsiders can NOT request a copy of your subscriber
list.
Please keep us posted as you learn more. This sort of attack could
affect us all depending on the technique Spamford used to compromise
your list.
- murr -
