From owner-freebsd-questions@FreeBSD.ORG Fri May 2 06:10:03 2014 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 1327C2C0 for ; Fri, 2 May 2014 06:10:03 +0000 (UTC) Received: from mx01.qsc.de (mx01.qsc.de [213.148.129.14]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id C9FE21CFB for ; Fri, 2 May 2014 06:10:02 +0000 (UTC) Received: from r56.edvax.de (port-92-195-108-40.dynamic.qsc.de [92.195.108.40]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mx01.qsc.de (Postfix) with ESMTPS id CC9833CEE0; Fri, 2 May 2014 08:10:00 +0200 (CEST) Received: from r56.edvax.de (localhost [127.0.0.1]) by r56.edvax.de (8.14.5/8.14.5) with SMTP id s426A0M9002257; Fri, 2 May 2014 08:10:00 +0200 (CEST) (envelope-from freebsd@edvax.de) Date: Fri, 2 May 2014 08:10:00 +0200 From: Polytropon To: Erich Dollansky Subject: Re: enough already .. Message-Id: <20140502081000.0105abd9.freebsd@edvax.de> In-Reply-To: <20140502090001.56f95c69@X220.alogt.com> References: <20140501192602.W11699@sola.nimnet.asn.au> <20140501212624.22bb00a2.freebsd@edvax.de> <20140502090001.56f95c69@X220.alogt.com> Organization: EDVAX X-Mailer: Sylpheed 3.1.1 (GTK+ 2.24.5; i386-portbld-freebsd8.2) Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Cc: freebsd-questions@freebsd.org X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list Reply-To: Polytropon List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 02 May 2014 06:10:03 -0000 On Fri, 2 May 2014 09:00:01 +0800, Erich Dollansky wrote: > Hi, > > On Thu, 1 May 2014 21:26:24 +0200 > Polytropon wrote: > [...] > > understand the situation correctly. The target addresses have > > been harvested from "outside the list", probably a "web copy" > > No, it must be from the list itself. I even have the impression that > the sending is triggered manually as only a very low percentage of > mails result in spam. The moment a thread is selected, I get for every > response to this threat a single spam-mail. With "outside the list" I meant that the spammer doesn't seem to have "entire access" such as a list server operator would have. What's strange is that some messages cause an immediate spam "reply", others don't. And if a "reply" is done, it happens quite quickly, so it's possible that the harvester is subscribed to the list (to receive messages), or he quickly scrapes new entries to the "web copy" of the list (the one of FreeBSD, or a mirror maintained by a 3rd party). This is what I meant by "outside of the list", in combination with the fact that the spammer does not send the messages _to_ the list. I haven't examined the topic very accurately so this is just a guess. Pressing DEL every few days is still sufficient here. ;-) -- Polytropon Magdeburg, Germany Happy FreeBSD user since 4.0 Andra moi ennepe, Mousa, ...