It looks like the Received headers are filtered at the openssl listserv - it is impossible to tell where this spam really came from.
I almost just pasted it into spamcop and then I realized that the list was anonymizing the real origin of posts. Well, I expect that, as happened to bugtraq, enough people will make spamcop complaints that will end up in the list's lap (because the list anonymizes) that Spamcop's blacklist will kick in and cut off mail from 195.27.130.252. I suggest that you change your list configuration to not strip received lines - or at least to always record the IP address. "from localhost1127.com" means that you are only recording helo names and not even checking to see if they are real. At 06:30 PM 2002-04-23 -0400, you wrote: >X-Persona: <njs@squawk> >Return-Path: <[EMAIL PROTECTED]> >Delivered-To: [EMAIL PROTECTED] >Received: from mmx.engelschall.com (mmx.engelschall.com [195.27.130.252]) > by scifi.squawk.com (Postfix) with ESMTP id EAC5E3501B > for <[EMAIL PROTECTED]>; Tue, 23 Apr 2002 18:33:02 -0400 (EDT) >Received: by mmx.engelschall.com (Postfix) > id 42DFD194E5; Wed, 24 Apr 2002 00:30:18 +0200 (CEST) >Received: from opensource.ee.ethz.ch (opensource-01.ee.ethz.ch >[129.132.7.153]) > by mmx.engelschall.com (Postfix) with ESMTP id 97281194C3 > for <[EMAIL PROTECTED]>; Wed, 24 Apr 2002 > 00:30:17 +0200 (CEST) >Received: by en5.engelschall.com (Sendmail 8.9.2) for openssl-users-L > id AAA26982; Wed, 24 Apr 2002 00:29:23 +0200 (MET DST) >Received: by en5.engelschall.com (Sendmail 8.9.2) via SMTP > from localhost1127.com id AAA26960; Wed, 24 Apr 2002 00:28:20 > +0200 (MET DST) >Message-Id: <[EMAIL PROTECTED]> >From: "mark" <[EMAIL PROTECTED]> >To: [EMAIL PROTECTED] >Cc: [EMAIL PROTECTED], [EMAIL PROTECTED], > [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED], > [EMAIL PROTECTED], [EMAIL PROTECTED] >Date: Tue, 23 Apr 2002 18:30:09 -0400 >Subject: Important Message Concerning Your Membership Account. 4/23/2002 >6:30:09 PM >X-Mailer: Microsoft Outlook Express 5.00.2919.1990 >MIME-Version: 1.0 >X-Precedence-Ref: 12 >Content-Type: text/html; charset="us-ascii" >Sender: [EMAIL PROTECTED] >Precedence: bulk >Reply-To: [EMAIL PROTECTED] >X-Sender: "mark" <[EMAIL PROTECTED]> >X-List-Manager: OpenSSL Majordomo [version 1.94.4] >X-List-Name: openssl-users >Status: -- War is an ugly thing, but it is not the ugliest of things. The decayed and degraded state of moral and patriotic feeling which thinks that nothing is worth war is much worse. A man who has nothing for which he is willing to fight, nothing he cares about more than his own personal safety, is a miserable creature who has no chance of being free, unless made so by the exertions of better men than himself. -- John Stuart Mill Nick Simicich - [EMAIL PROTECTED] ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
