[Dragaera] spam

[David Dyer-Bennet]

On Wed, August 12, 2009 15:28, David Dyer-Bennet wrote:
>
> On Tue, August 11, 2009 19:53, Philip Hart wrote:
>> Dear PTB, on occasion I get spam just after writing to the list from
> [addresses removed]
>> The subject line is "vacation reply" and the url being advertised is the
>> amusingly-named happyhome666.com.  Maybe you could quash this?
>
> That's not enough information to figure out what's happening in enough
> detail to stop it.  If the message is in fact going through the list, then
> the full headers would tell me what membership it was sent from, and that
> membership could be canceled.

I found a copy of that spam in my trash (SpamAssassin had done it in).  So
I was able to look at the headers.  It did not come through the list;
there's no List-ID: header, or any of a bunch of List-*: headers that
Mailman adds to messages it distributes.  Also there isn't the [Dragaera]
tag on the subject line or the signature at the bottom.  All that is added
by mailman when it redistributes a message.  Mailman handles it AFTER the
subscriber does, so there's no chance to strip it off before it's
distributed.

Given how widely spammers distribute their trash, it's not THAT weird that
we both got a copy of the same spam.  However, it's entirely possible
they're spamming based on people who have posted to the list, for example.
 They could subscribe and accumulate addresses from every message that
goes by, and periodically send to them.  That seems rather small-scale for
spam, though (list has about 300 people, and not all of them post).

-- 
David Dyer-Bennet, dd-b at dd-b.net; http://dd-b.net/
Snapshots: http://dd-b.net/dd-b/SnapshotAlbum/data/
Photos: http://dd-b.net/photography/gallery/
Dragaera: http://dragaera.info