From owner-freebsd-questions@FreeBSD.ORG  Wed Apr 30 00:11:13 2014
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by hub.freebsd.org (Postfix) with ESMTPS id 7178CC96
 for <freebsd-questions@freebsd.org>; Wed, 30 Apr 2014 00:11:13 +0000 (UTC)
Received: from mx01.qsc.de (mx01.qsc.de [213.148.129.14])
 (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
 (Client did not present a certificate)
 by mx1.freebsd.org (Postfix) with ESMTPS id 33139BBD
 for <freebsd-questions@freebsd.org>; Wed, 30 Apr 2014 00:11:13 +0000 (UTC)
Received: from r56.edvax.de (port-92-195-108-40.dynamic.qsc.de [92.195.108.40])
 (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by mx01.qsc.de (Postfix) with ESMTPS id 9991D3CDCC;
 Wed, 30 Apr 2014 02:11:04 +0200 (CEST)
Received: from r56.edvax.de (localhost [127.0.0.1])
 by r56.edvax.de (8.14.5/8.14.5) with SMTP id s3U0B3f8002253;
 Wed, 30 Apr 2014 02:11:03 +0200 (CEST)
 (envelope-from freebsd@edvax.de)
Date: Wed, 30 Apr 2014 02:11:03 +0200
From: Polytropon <freebsd@edvax.de>
To: Mike Sanders <tmp1@freebsd.hypermart.net>
Subject: Re: Spam to list participants (from openhosting.com & softcom.com)
Message-Id: <20140430021103.7606e6de.freebsd@edvax.de>
In-Reply-To: <20140429140123.GA910@taco-shack.cow>
References: <73354.1398734218@server1.tristatelogic.com>
 <535F1667.1050406@soliddataservices.com>
 <20140429114019.0eb3ce48@X220.alogt.com>
 <20140429124618.06d708ba@gumby.homeunix.com>
 <20140429204204.2e561935@X220.alogt.com>
 <20140429140123.GA910@taco-shack.cow>
Organization: EDVAX
X-Mailer: Sylpheed 3.1.1 (GTK+ 2.24.5; i386-portbld-freebsd8.2)
Mime-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Cc: freebsd-questions@freebsd.org
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.17
Precedence: list
Reply-To: Polytropon <freebsd@edvax.de>
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions/>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 30 Apr 2014 00:11:13 -0000

On Tue, 29 Apr 2014 09:01:23 -0500, Mike Sanders wrote:
> If a policy were implemented whereby (say) the first
> two messages of new subscribers where approved/denied
> by the list-owner, this problem would end.

Sadly, the target addresses are being harvested quickly,
and the spam is sent individually (not by the list).
The spam is sent directly to the list members with a
subject from the list, with varying From: and Reply-To:
addresses. This is nothing the list maintainers can stop.
This could happen from a mailing list web mirror, the
one run by FreeBSD or some _other_ one (also possible).
Probably the ISP in whose range the hijacked "Windows"
PC botnet (which is sending the spam) are located could
help. The only thing _you_ can do is to blacklist IPs... :-(


-- 
Polytropon
Magdeburg, Germany
Happy FreeBSD user since 4.0
Andra moi ennepe, Mousa, ...