I've seen this before. In that case, it was a newbie "accidental spammer", who'd been fooled into buying a scraped list which they imported into a normal Mailman system -- they *intended* to operate a clean mass-mailing system.
Generally they clean up once you point out the error of their ways; if they don't, you at least have clear source-identifying audit trail thanks to Mailman's lack of forgery abilities. ;) --j. Thomas Bolioli writes: > I have included the mailing in it's entirety below. Is this an old trick > I just have not seen or is this something new using mailman to send > spam. I assure you I neither signed up nor confirmed a submission for > this mailing list. Is this just a poorly configured mailman install? > Tom > > > Return-Path: <[EMAIL PROTECTED]> > X-Original-To: [EMAIL PROTECTED] > Delivered-To: [EMAIL PROTECTED] > Received: from permemail02.alumniconnections.com > (permemail02.alumniconnections.com [198.212.10.117]) > by nova.terranovum.com (Postfix) with ESMTP id E7AD93567E3 > for <[EMAIL PROTECTED]>; Wed, 31 May 2006 20:07:55 -0400 (EDT) > Received: from brandy.adelphi.edu (brandy.adelphi.edu [192.147.12.5]) > by permemail02.alumniconnections.com (8.13.4/8.13.4) with ESMTP id > k5107sOG012089 > for <[EMAIL PROTECTED]>; Wed, 31 May 2006 20:07:54 > -0400 (EDT) > Received: from brandy.adelphi.edu (127.0.0.1) by brandy.adelphi.edu > (MlfMTA v3.1r24) id hfoths0171sd for > <[EMAIL PROTECTED]>; Wed, 31 May 2006 20:55:46 -0400 > (envelope-from <[EMAIL PROTECTED]>) > Received: from sodiconmx.org.mx ([206.225.91.17]) > by brandy.adelphi.edu (Adelphi University) > with ESMTP; Wed, 31 May 2006 20:55:46 -0400 > Received: (qmail 29676 invoked from network); 31 May 2006 20:07:53 -0500 > Received: from localhost (HELO sodiconmx.org.mx) (127.0.0.1) > by localhost with SMTP; 31 May 2006 20:07:53 -0500 > MIME-Version: 1.0 > Content-Type: text/plain; charset="us-ascii" > Content-Transfer-Encoding: 7bit > Subject: Welcome to the "Newsl2" mailing list > From: [EMAIL PROTECTED] > To: [EMAIL PROTECTED] > X-No-Archive: yes > Message-ID: <[EMAIL PROTECTED]> > Date: Wed, 31 May 2006 18:08:54 -0500 > Precedence: bulk > X-BeenThere: [EMAIL PROTECTED] > X-Mailman-Version: 2.1.5 > List-Id: newsl2.nueva-alianza.org.mx > X-List-Administrivia: yes > Sender: [EMAIL PROTECTED] > Errors-To: [EMAIL PROTECTED] > X-Mlf-Threat: nothreat > X-Mlf-Threat-Detailed: nothreat;none;none;none > X-Mlf-UniqueId: 200606010055460009014 > X-Virus-Scanned: ClamAV 0.88/1504/Wed May 31 15:59:14 2006 on permemail02 > X-Virus-Status: Clean > X-Spam-Checker-Version: SpamAssassin 3.0.4 (2005-06-05) on > nova.terranovum.com > X-Spam-Level: > X-Spam-Status: No, score=0.2 required=4.0 > tests=FORGED_RCVD_HELO,NO_REAL_NAME > autolearn=disabled version=3.0.4 > > Welcome to the [EMAIL PROTECTED] mailing list! > > To post to this list, send your email to: > > [EMAIL PROTECTED] > > General information about the mailing list is at: > > http://lists.nueva-alianza.org.mx/mailman/listinfo/newsl2 > > If you ever want to unsubscribe or change your options (eg, switch to > or from digest mode, change your password, etc.), visit your > subscription page at: > > > http://lists.nueva-alianza.org.mx/mailman/options/newsl2/thomas_bolioli%40alumni.adelphi.edu > > > You can also make such adjustments via email by sending a message to: > > [EMAIL PROTECTED] > > with the word `help' in the subject or body (don't include the > quotes), and you will get back a message with instructions. > > You must know your password to change your options (including changing > the password, itself) or to unsubscribe. It is: > > ekhuku > > Normally, Mailman will remind you of your nueva-alianza.org.mx mailing > list passwords once every month, although you can disable this if you > prefer. This reminder will also include instructions on how to > unsubscribe or change your account options. There is also a button on > your options page that will email your current password to you.
