SPAM from unsubscribed users on pgfoundry

From: Joe Conway <mail(at)joeconway(dot)com>
To: PostgreSQL WWW Mailing List <pgsql-www(at)postgresql(dot)org>
Subject: SPAM from unsubscribed users on pgfoundry
Date: 2013-09-08 15:24:37
Message-ID: 522C96B5.7040208@joeconway.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-www

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

The past few days SPAM has been coming through the plr-general list on
pgfoundry. As far as I can tell the sender is not subscribed -- any idea
how this can happen or how to stop it?

Thanks,

Joe

p.s. example email and copy of mail headers below...

- -------- Original Message --------
Subject: [Plr-general] (no subject)
Date: Fri, 06 Sep 2013 03:02:26 +0300
From: Агентство интернет-рекламы <sKiDnowq(at)yahoo(dot)com>
To: plr-general(at)pgfoundry(dot)org

Реклама рекламы в интернете.

Возможные базы данных:
- - Москва и Санкт-Петербург;
- - Любые города РФ;
- - Организации любых сфер бизнеса;
- - Страны мира.

Любые формы оплаты.
Быстрый эффект.
Самые минимальные расценки на рынке.
Подробный отчет в личном кабинете.

7( Ч 9 5) 5 45 ~ 1Ч - 92
_______________________________________________
Plr-general mailing list
Plr-general(at)lists(dot)pgfoundry(dot)org
http://lists.pgfoundry.org/mailman/listinfo/plr-general

=================================================
Return-Path: <plr-general-bounces(at)lists(dot)pgfoundry(dot)org>
Received: by joeconway.com (CommuniGate Pro PIPE 4.1.8)
with PIPE id 13338261; Sat, 07 Sep 2013 23:11:36 -0700
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on
mail.joeconway.com
X-Spam-Level: *
X-Spam-Status: No, score=1.3 required=2.1
tests=BAYES_20,DKIM_ADSP_CUSTOM_MED,
FORGED_YAHOO_RCVD,FREEMAIL_FROM,INVALID_MSGID,RCVD_IN_BL_SPAMCOP_NET,
RCVD_IN_DNSWL_MED,T_TO_NO_BRKTS_FREEMAIL autolearn=no version=3.3.1
Received: from pgfoundry.org ([200.46.204.130] verified)
by joeconway.com (CommuniGate Pro SMTP 4.1.8)
with ESMTP id 13338259 for mail(at)joeconway(dot)com; Sat, 07 Sep 2013
23:11:19 -0700
Received: from maia.hub.org (unknown [200.46.151.188])
by pgfoundry.org (Postfix) with ESMTP id 91D91B37460;
Sun, 8 Sep 2013 06:01:04 +0000 (UTC)
Received: from pgfoundry.org ([200.46.204.130])
by maia.hub.org (mx1.hub.org [200.46.151.188]) (amavisd-maia, port 10024)
with ESMTP id 60249-09; Sun, 8 Sep 2013 06:01:03 +0000 (UTC)
Received: from pgfoundry.org (pgfoundry.org [200.46.204.130])
by pgfoundry.org (Postfix) with ESMTP id 95803B37461;
Sun, 8 Sep 2013 06:01:03 +0000 (UTC)
X-Original-To: plr-general(at)pgfoundry(dot)org
Delivered-To: plr-general(at)pgfoundry(dot)org
Received: from maia.hub.org (unknown [200.46.151.189])
by pgfoundry.org (Postfix) with ESMTP id 79D1BB37460
for <plr-general(at)pgfoundry(dot)org>; Sun, 8 Sep 2013 06:00:45 +0000 (UTC)
Received: from pgfoundry.org ([200.46.204.130])
by maia.hub.org (mx1.hub.org [200.46.151.189]) (amavisd-maia, port 10024)
with ESMTP id 62950-03 for <plr-general(at)pgfoundry(dot)org>;
Sun, 8 Sep 2013 06:00:38 +0000 (UTC)
X-Greylist: delayed 18:11:37.149374 by SQLgrey-1.8.0
Received: from cp-uon.kenet.or.ke (cp-uon.kenet.or.ke [41.204.161.16])
by pgfoundry.org (Postfix) with ESMTP id C37F0B3745F
for <plr-general(at)pgfoundry(dot)org>; Sun, 8 Sep 2013 06:00:37 +0000 (UTC)
Received: from mmust by cp-uon.kenet.or.ke with local (Exim 4.80.1)
(envelope-from <mmust(at)cp-uon(dot)kenet(dot)or(dot)ke>) id 1VHjVK-0003Uk-KW
for plr-general(at)pgfoundry(dot)org; Fri, 06 Sep 2013 03:02:26 +0300
To: plr-general(at)pgfoundry(dot)org
X-PHP-Script: www.mmust.ac.ke/modules/backuper.php for 218.2.129.53
From:
=?utf-8?B?0JDQs9C10L3RgtGB0YLQstC+INC40L3RgtC10YDQvdC10YIt0YDQtdC60LvQsNC80Ys=?=
<sKiDnowq(at)yahoo(dot)com>
Message-ID: <2013-09-06 03:02:26(dot)00304184(at)localhost>
MIME-Version: 1.0
Date: Fri, 06 Sep 2013 03:02:26 +0300
X-AntiAbuse: This header was added to track abuse,
please include it with any abuse report
X-AntiAbuse: Primary Hostname - cp-uon.kenet.or.ke
X-AntiAbuse: Original Domain - pgfoundry.org
X-AntiAbuse: Originator/Caller UID/GID - [504 505] / [47 12]
X-AntiAbuse: Sender Address Domain - cp-uon.kenet.or.ke
X-Get-Message-Sender-Via: cp-uon.kenet.or.ke: authenticated_id: mmust/only
user confirmed/virtual account not confirmed
X-Virus-Scanned: Maia Mailguard 1.0.1
Subject: [Plr-general] (no subject)
X-BeenThere: plr-general(at)lists(dot)pgfoundry(dot)org
X-Mailman-Version: 2.1.14
Precedence: list
List-Id: <plr-general.lists.pgfoundry.org>
List-Unsubscribe: <http://lists.pgfoundry.org/mailman/options/plr-general>,
<mailto:plr-general-request(at)lists(dot)pgfoundry(dot)org?subject=unsubscribe>
List-Archive: <http://lists.pgfoundry.org/pipermail/plr-general>
List-Post: <mailto:plr-general(at)lists(dot)pgfoundry(dot)org>
List-Help: <mailto:plr-general-request(at)lists(dot)pgfoundry(dot)org?subject=help>
List-Subscribe: <http://lists.pgfoundry.org/mailman/listinfo/plr-general>,
<mailto:plr-general-request(at)lists(dot)pgfoundry(dot)org?subject=subscribe>
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
Errors-To: plr-general-bounces(at)lists(dot)pgfoundry(dot)org
Sender: plr-general-bounces(at)lists(dot)pgfoundry(dot)org
X-TFF-CGPSA-Version: 1.4
X-TFF-CGPSA-Filter: Scanned
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iQIcBAEBAgAGBQJSLJa1AAoJEDfy90M199hlAToP/0NmBxBXOqvgWNpws8AbRlyc
fRT15rL+iitLwdFiyE/BGtm/c4sxVBL14hk4DrxVv2o/yk6VPgLXphzbhth3P2Kc
/ZT3AuwuMzwI4miCqVhinke5wMNY5cPBb1uoF4XBqiXx8V/9kAIzt5kytYFtYLsm
vvre0yH05pMuQ0Q8SwvA+53ZvjRpt1QwqANqddVhglbGQ2lTM3l0B2tbyQ/rRbJk
2m7gNv/hHeVvjUTG3VBp2stql1BkrxbhY0AuKfsqmGEybqnF/6onkU36gLHvX/wx
V2vUPQ/Eaa/nOj4s3A3Fn5C3CRxbm6GqWfzuoqcbEFaLzK3x4Ln/m4YESfkXuJHx
lGEU0PGNZkUaLwLLQD6Avuk8nuZPC4eQPnQI3WU5RIBxq7QbnDAr3YSHDQWeRTjO
7PDMDqy7Vo5vpg1MRe3p73jBYxiQeF5dXlLEimYvHU/MEMrY3U+PBbiRI0MpffBR
dW/IT/O+goFFXqlsnxwaHfzygpHhuxn2Gn+p9wFYcPqTvfzcl0/pEWtCMcyF2UzD
7bfgw5kZ8PDbJomI3bePpk0fxgqq9xibJuOGBYRO+04FMnGJfdafBOH7s5xsXlzc
alqrAEiMDHIDWjasEnG0EPV9Cw4gfozLaeF+cawl8VUa9gDtMZvwiJiSoeXW9NsO
fGFcf7mYRbz807hIb7HT
=nMx8
-----END PGP SIGNATURE-----

Responses

Browse pgsql-www by date

  From Date Subject
Next Message Alvaro Herrera 2013-09-08 16:14:25 Re: SPAM from unsubscribed users on pgfoundry
Previous Message Noah Misch 2013-09-07 22:07:45 Header unfolding in archived mail