Re: spam sneaking into a closed list?

Hi,
Reference:
> From:		"Jim Huber" <[email protected]> 
> Date:		Fri, 13 Nov 2009 02:03:03 -0500 
> Message-id:	<[email protected]> 

"Jim Huber" wrote:
> I found a spam message that was sent out successfully to a closed mailing list, and I
> was wondering if anyone might recognize what's going on and have an answer.
> 
> A few details... According to the headers, it was sent by [email protected]
> (domain.com obviously substituting for the domain name) to [email protected]. The
> subject was "Majordomo results: Luxury handbags on sale now.  Buy her th". And nearly
> half way into the message it says "**** Command disabled."
> 
> Sound familiar or interesting? If you're willing to bite, let me know what additional
> info you need.
> 
> Thanks for your help - Jim

Perhaps the "Command disabled." suggests one of your addresses were
trawled by a robot found to be live responding so was spammed again.

Majordomo lists have certain addresses that are priveleged to write
to lists. If the spammer stumbles on one & masquerades as being that,
then he can spam your list. Happened to me some months back.

Most people on my lists are clueless Microsh.t users, regularly
they catch viruses, their PC mail archives get raped, addresses
harvested & reported back to spammers. Inevitably frequent posters
to lists get their addresss harvested, seen associated with list
names.

Spammers mainly blind attack linked names & some get through.  One
is more vulnerable - greater chance of matched by spammer, if one's
list owner & personal subscribed address etc have same domain as
list name, so if you have multiple domains available, use them.

Cheers,
Julian
-- 
Julian Stacey: BSD Unix Linux C Sys Eng Consultants Munich http://berklix.com
Mail plain text not quoted-printable, HTML or Base64:  http://asciiribbon.org