Re: [tlug] Sub: best thing on the internet

[Godwin Stewart <gstewart@example.com>]

On Fri, 27 Aug 2004 21:53:00 -0700, Jonathan Byrne <jq@example.com>
wrote:

> Someone please, please, please tell me that Smartlist can't be
> fooled into letting a post through by addressing it to listmaster.

What I assume happened is that the spammer used the From: address of someone
who *is* subscribed to the TLUG mailing list in order to jump over that
particular hurdle, and that the SMTP "RCPT TO:" address differed from the
DATA "To:" address. So, in effect, the mail *was* sent to tlug@example.com by
Bcc: (typical spammer trick, as you know).

Given that Smartlist strips out all the tracking headers inserted by relays
before the tlug.jp MX it's impossible to say exactly what happened short of
grepping through the MTA logs.

BTW, how about setting "slist" as a trusted user for sendmail? That would
avoid these headers:

X-Authentication-Warning: hikari.tlug.jp: slist set sender to tlug-request@example.com using -f

-- 
G. Stewart   --   gstewart@example.com -- gstewart@example.com
Registered Linux user #284683 (Slackware 9.0, Linux 2.6.8.1-em8300)
--------------------------------------------------------------
drug, n:
        A substance which, when injected into a rat, produces a
        scientific paper.

Attachment: pgp00022.pgp
Description: PGP signature