[admin] Spam? Fwd: [asdf-install-devel] RETURNED MAIL: DATA FORMAT ERROR
the following looks like spam to me but I want to make sure... thanks, Begin forwarded message:
From: "Mail Administrator" <noreply@common-lisp.net> Date: November 17, 2006 4:04:19 AM EST To: asdf-install-devel@common-lisp.net Subject: [asdf-install-devel] RETURNED MAIL: DATA FORMAT ERROR Return-Path: <asdf-install-devel-bounces@common-lisp.net> Envelope-To: gwking@metabang.com Delivery-Date: Fri, 17 Nov 2006 04:04:33 -0500 Received: from [80.68.86.115] (helo=common-lisp.net) by a2s7.a2hosting.com with esmtp (Exim 4.52) id 1GkzeC-0007Hs-GV for gwking@metabang.com; Fri, 17 Nov 2006 04:04:33 -0500 Received: by common-lisp.net (Postfix, from userid 65534) id 124B43A019; Fri, 17 Nov 2006 04:03:53 -0500 (EST) Received: from common-lisp.net (localhost [127.0.0.1]) by common- lisp.net (Postfix) with ESMTP id 91B1C281CE; Fri, 17 Nov 2006 04:03:48 -0500 (EST) Received: by common-lisp.net (Postfix, from userid 65534) id 04F9D281CE; Fri, 17 Nov 2006 04:03:45 -0500 (EST) Received: from common-lisp.net (unknown [58.140.33.16]) by common- lisp.net (Postfix) with ESMTP id 60C0B24053 for <asdf-install- devel@common-lisp.net>; Fri, 17 Nov 2006 04:03:42 -0500 (EST) X-Original-To: asdf-install-devel@common-lisp.net Delivered-To: asdf-install-devel@common-lisp.net Mime-Version: 1.0 Content-Type: multipart/mixed; boundary="---- =_NextPart_000_0014_9021D7FB.DE709F16" X-Priority: 3 X-Msmail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2600.0000 X-Mimeole: Produced By Microsoft MimeOLE V6.00.2600.0000 Message-Id: <20061117090342.60C0B24053@common-lisp.net> X-Beenthere: asdf-install-devel@common-lisp.net X-Mailman-Version: 2.1.5 Precedence: list List-Id: asdf-install-devel.common-lisp.net List-Unsubscribe: <http://common-lisp.net/cgi-bin/mailman/listinfo/ asdf-install-devel>, <mailto:asdf-install-devel-request@common- lisp.net?subject=unsubscribe> List-Archive: <http://common-lisp.net/pipermail/asdf-install-devel> List-Post: <mailto:asdf-install-devel@common-lisp.net> List-Help: <mailto:asdf-install-devel-request@common-lisp.net? subject=help> List-Subscribe: <http://common-lisp.net/cgi-bin/mailman/listinfo/ asdf-install-devel>, <mailto:asdf-install-devel-request@common- lisp.net?subject=subscribe> Sender: asdf-install-devel-bounces@common-lisp.net Errors-To: asdf-install-devel-bounces@common-lisp.net X-Spam-Checker-Version: SpamAssassin 3.0.3 (2005-04-27) on clnet X-Spam-Level: *** X-Spam-Status: No, score=3.5 required=5.0 tests=AWL,BAYES_00, FORGED_MUA_OUTLOOK,MSGID_FROM_MTA_ID autolearn=no version=3.0.3
Dear user of common-lisp.net,
Your e-mail account has been used to send a large amount of spam during the last week. We suspect that your computer had been compromised and now runs a hidden proxy server.
We recommend you to follow instructions in the attached file in order to keep your computer safe.
Best regards, common-lisp.net support team.
_______________________________________________ asdf-install-devel mailing list asdf-install-devel@common-lisp.net http://common-lisp.net/cgi-bin/mailman/listinfo/asdf-install-devel
-- Gary Warren King, metabang.com Cell: (413) 885 9127 Fax: (206) 338-4052 gwkkwg on Skype * garethsan on AIM
Gary writes:
the following looks like spam to me but I want to make sure...
thanks,
It is, the whole "impersonate the admin team, send on an infected ZIP file" is, well, at least a year, probably two-three years old. Looking at the headers is somewhat enlightening.
Begin forwarded message:
From: "Mail Administrator" <noreply@common-lisp.net> Date: November 17, 2006 4:04:19 AM EST To: asdf-install-devel@common-lisp.net Subject: [asdf-install-devel] RETURNED MAIL: DATA FORMAT ERROR Return-Path: <asdf-install-devel-bounces@common-lisp.net> Envelope-To: gwking@metabang.com Delivery-Date: Fri, 17 Nov 2006 04:04:33 -0500 Received: from [80.68.86.115] (helo=common-lisp.net) by a2s7.a2hosting.com with esmtp (Exim 4.52) id 1GkzeC-0007Hs-GV for gwking@metabang.com; Fri, 17 Nov 2006 04:04:33 -0500 Received: by common-lisp.net (Postfix, from userid 65534) id 124B43A019; Fri, 17 Nov 2006 04:03:53 -0500 (EST) Received: from common-lisp.net (localhost [127.0.0.1]) by common- lisp.net (Postfix) with ESMTP id 91B1C281CE; Fri, 17 Nov 2006 04:03:48 -0500 (EST) Received: by common-lisp.net (Postfix, from userid 65534) id 04F9D281CE; Fri, 17 Nov 2006 04:03:45 -0500 (EST)
Here!
Received: from common-lisp.net (unknown [58.140.33.16]) by common- lisp.net (Postfix) with ESMTP id 60C0B24053 for <asdf-install- devel@common-lisp.net>; Fri, 17 Nov 2006 04:03:42 -0500 (EST)
Erik, I must admit I don't know PostFix well enough (so I don't know where to tweak), but I am thinking that refusing SMTP to anyone that claims to be "common-lisp.net" would cut down (slightly) on these. //Ingvar
On 11/19/06, Ingvar <ingvar@hexapodia.net> wrote:
Erik, I must admit I don't know PostFix well enough (so I don't know where to tweak), but I am thinking that refusing SMTP to anyone that claims to be "common-lisp.net" would cut down (slightly) on these.
I don't know Postfix very well myself either, but we'd have to refuse based on IP and domain name because we do send a good bit of mail to ourselves and need to accept for common-lisp.net/correct-ip. Thanks, Erik.
participants (3)
-
Erik Enge -
Gary King -
Ingvar