From owner-freebsd-questions@FreeBSD.ORG Sun Jun 14 23:34:19 2015 Return-Path: Delivered-To: freebsd-questions@hub.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 33459A64 for ; Sun, 14 Jun 2015 23:34:19 +0000 (UTC) (envelope-from jekillen@prodigy.net) Received: from nm24.access.bullet.mail.gq1.yahoo.com (nm24.access.bullet.mail.gq1.yahoo.com [216.39.62.55]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id F3A8E21F for ; Sun, 14 Jun 2015 23:34:18 +0000 (UTC) (envelope-from jekillen@prodigy.net) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=prodigy.net; s=s2048; t=1434324698; bh=xD+hAqIyDvO6nZakFPkZEvdwKVGX4rlxhgz0GRH5EPk=; h=Cc:From:To:In-Reply-To:Subject:Date:References:From:Subject; b=p7Vcz0xQRYWRvTohoHRTsY3q26L8pW9ZjMIRiRuDmfoJvRThjO9Q0NttAmpYAfg7Bbdx8Oum5aI9TmP38DiOgn2R9u2hVz9BqMBwFZLP0AYKq5DP1mtZ2A3pCFwFzs2pd+q3yA0LfvzDSx0pfri2q9u2qIDftMqxhe3PWOK0z9kIZSd/dBrqX9E54b6OpDN1wkAlTSHPuhNiYKX0cmRIXbKYD1ulxtd+VKs1RYBqH+SIIIwiQatUW9UlMXhDacoHTUBbyOeoEur90zVsbLPoE4CaehsV12cKG9vsmHFYi9oWGjF1xcCyKhV6lBFazItKVdUyKuapTQZSNXWcZZWrMA== Received: from [216.39.60.167] by nm24.access.bullet.mail.gq1.yahoo.com with NNFMP; 14 Jun 2015 23:31:38 -0000 Received: from [67.195.22.118] by tm3.access.bullet.mail.gq1.yahoo.com with NNFMP; 14 Jun 2015 23:31:38 -0000 Received: from [127.0.0.1] by smtp113.sbc.mail.gq1.yahoo.com with NNFMP; 14 Jun 2015 23:31:38 -0000 X-Yahoo-Newman-Id: 159747.80741.bm@smtp113.sbc.mail.gq1.yahoo.com X-Yahoo-Newman-Property: ymail-3 X-YMail-OSG: rw3wBrUVM1kp7c.ujQXBCCTvUllwgFVBGnRXRiv8scl4zzy t.KSTWFOs2SqWclKgL_9QO49Onb3KeAVXg5KkeUOtqFw6gP1v2P15RJQQTTP 6WHtgvGRxACoyqgCdjj6BQt.Vx5jJ9KQ2aD7EXmn.l1VuRZV9ZvuI3XwDQ9m 5GiIdhnq0Pz_ho_EDZ4.kF9LI6PJTtpoGzIprkq3TqEnyckTxmc7xnZNlpVY qwgoP5W5G_QeBjADHLhsET3fbb8Cb.HnlCPRj0eEKipEUgMRj_72DqcFvfMO M.QBKh9GR15tgWARmzDYBeUN5XJMPomJU1e6r4g9zof8mqFRrxvEegN2H7GN IvPn9Hy9JbjrM8rjI3Asy7GE5QflZDZh6ci_a7SPBPM68DdXIyKSrGgk_OnD HVf1uOYc4VnJplEU8YVc3piUOLP7U8lgGJ8d.5o0tpTxq2zEFZV1y5MtLUU6 hsDqjMyzSL0M..a2z5iw6yabogGDM7SGegXnlveB24QdDOqvyGpJmQr9U_kr IPd.yDjD.Votd0piIDvRuT27vIDf9i51DovpQ33JoHywLiA-- X-Yahoo-SMTP: 46rcWa.swBDnY9zvhIrsU2awgPSTQgUKFFrFJjEU8wwG Cc: Yass Amed , freebsd-questions Message-Id: <363CACB8-49C3-4760-A769-68452DDD5D38@prodigy.net> From: Jeffry Killen To: Chris Stankevitz In-Reply-To: Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes Content-Transfer-Encoding: 7bit Mime-Version: 1.0 (Apple Message framework v936) Subject: Re: freebsd-questions generated spams! Date: Sun, 14 Jun 2015 16:31:36 -0700 References: X-Mailer: Apple Mail (2.936) X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 14 Jun 2015 23:34:19 -0000 On Jun 14, 2015, at 2:56 PM, Chris Stankevitz wrote: > On Sun, Jun 14, 2015 at 10:04 AM, Yass Amed > wrote: >> Hello, >> >> I replied to a topic on this mailing list and immediately started >> getting >> Chinese spam emails. Is there a breach in the server? Does the server >> (un)intentionally forward mail? I'm puzzled?! > > > Yass, > > I get the same thing. Presumably since (1) the list is visible to > anyone and (2) your email address is posted to the list, then (3) any > enterprising person could harvest the email addresses of contributors > and send them spam. A breach of the server is not needed to > accomplish this. To add a bit to this discussion: Could also a relay proxy mail server that is been monitored for trafic to this list and generating auto responses. I put some html in a publicly available site with a textarea element that was not screened. When I contacted the site to look at it myself There was the spinning ball (Mac OSX0) for a second or so. Then a bunch of oriental text appeared in the field. I did not do anything to cause that as the site administrator. So my suspicion is that a proxy was injecting text into the html in transit over the network. I also have had e-mails intercepted and responded to by agencies other than the intended recipient. JK