From owner-freebsd-hackers@FreeBSD.ORG  Thu Jan  1 12:02:53 2004
Return-Path: <owner-freebsd-hackers@FreeBSD.ORG>
Delivered-To: freebsd-hackers@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id E5CBD16A4CE
	for <hackers@FreeBSD.org>; Thu,  1 Jan 2004 12:02:53 -0800 (PST)
Received: from gw.catspoiler.org (217-ip-163.nccn.net [209.79.217.163])
	by mx1.FreeBSD.org (Postfix) with ESMTP id BD3EC43D3F
	for <hackers@FreeBSD.org>; Thu,  1 Jan 2004 12:02:52 -0800 (PST)
	(envelope-from truckman@FreeBSD.org)
Received: from FreeBSD.org (mousie.catspoiler.org [192.168.101.2])
	by gw.catspoiler.org (8.12.9p2/8.12.9) with ESMTP id i01K2i7E000314;
	Thu, 1 Jan 2004 12:02:48 -0800 (PST)
	(envelope-from truckman@FreeBSD.org)
Message-Id: <200401012002.i01K2i7E000314@gw.catspoiler.org>
Date: Thu, 1 Jan 2004 12:02:43 -0800 (PST)
From: Don Lewis <truckman@FreeBSD.org>
To: raistlin@tacorp.net
In-Reply-To: <20031229112508.V49908@mail.tacorp.net>
MIME-Version: 1.0
Content-Type: TEXT/plain; charset=us-ascii
cc: hackers@FreeBSD.org
cc: wgrim@siue.edu
Subject: Re: Update: PR bin/60636
X-BeenThere: freebsd-hackers@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Technical Discussions relating to FreeBSD
	<freebsd-hackers.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-hackers>,
	<mailto:freebsd-hackers-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-hackers>
List-Post: <mailto:freebsd-hackers@freebsd.org>
List-Help: <mailto:freebsd-hackers-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-hackers>,
	<mailto:freebsd-hackers-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 01 Jan 2004 20:02:54 -0000

On 29 Dec, Jason Slagle wrote:
> 
> So I'm not the only one?
> 
> After submitting a single PR, I started getting innudated with klez
> emails.  12+ a day, to an account that had never received one.
> 
> Me thinks it's time to obscure the emails somehow.

That might not help.  I would think that it is more likely that an
infected host is subscribed to the freebsd-bugs@ list and is harvesting
email addresses from the From: header instead of something doing
periodic sweeps of the PR database.  I'd be even more suspicious that
this is the case if the spewage started very shortly after the PR was
filed.