Re: [boost] Spamming through Boost mailing list

From: David Abrahams (dave_at_[hidden])
Date: 2006-09-23 16:02:00

"Keith MacDonald" <boost_at_[hidden]> writes:

> Personally, if this was my mailing list, I hope someone would make
> me aware of such issues, so I could check if my security had been
> breached.  However, if you'd rather blame the messenger ...

Can we leave the drama out of it, please?  OSL is aware of your
report.


attached mail follows:

Hi Dave -- I saw this on the Boost mailing list.  I expect that this  
individual was spammed by a dictionary attack and that nothing  
happened with the mail server or lists at OSL.

Cheers,
Andrew Lumsdaine

====

Message: 9
Date: Sat, 23 Sep 2006 12:27:45 +0100
From: "Keith MacDonald" <boost_at_[hidden]>
Subject: [boost] Spamming through Boost mailing list
To: boost_at_[hidden]
Message-ID: <ef35n9$2bn$1_at_[hidden]>

When I signed up to the Boost mailing lists, I used a unique email  
address
(boost@<mydomain>.com), so that I could detect if it was being misused.
Today I received the email below, which is obviously spam.  It seems  
likely
that your mailing list has been compromised, so suggest that you  
check what
went wrong with the Open Systems Lab at Indiana University.

Regards,
Keith MacDonald

===== Received email with headers =====
Return-Path: <ruhnzlpxd_at_[hidden]>
Received: from srv01.mydomain.com (root_at_localhost)
  by mydomain.com (8.12.11.20060308/8.12.11) with ESMTP id  
k8N899lG015081
  for <boost_at_[hidden]>; Sat, 23 Sep 2006 09:09:09 +0100
X-ClientAddr: 204.165.241.2
Received: from sea-virtual.idx.com (sea-virtual.idx.com [204.165.241.2])
  by srv01.mydomain.com (8.12.11.20060308/8.12.11) with ESMTP id
k8N898Tv015076
  for <boost_at_[hidden]>; Sat, 23 Sep 2006 09:09:08 +0100
From: "component" <ruhnzlpxd_at_[hidden]>
To: boost_at_[hidden]
Subject: Gallery
Date:  Sat, 23 Sep 2006 01:05:33 +0700

KGBC BECKONS
KGBC TRADING ALERT FOR MONDAY SEPTEMBER 25!
NOW IS YOUR CHANCE TO GET ON A MINERAL (GOLD AND SILVER) STOCK!

etc


-- 
Dave Abrahams
Boost Consulting
www.boost-consulting.com