[Xitami] List administrator?
Ewen McNeill
xitami@lists.xitami.org
Sat, 03 Aug 2002 11:48:17 +1200
In message <3D4AD971.4080506@earthlink.net>, Greg Wells writes:
>The subject lines look exactly like the messages from the list. In fact,
>they were sent to me as if they were continuations of subjects I saw on
>real e-mails from the list..
As others have noted, I haven't seen spam messages on the list; and I've
just checked my spam folder to see if any Xitami list messages have
turned up there (no).
When considering this, beware that the Klez virus picks "random" subject
lines and to/from addresses that it finds on: someone's hard drive, the
web, etc. The Xitami list is archived on the web, so it's entirely
possible that it may have been found and used as a source of subject
lines. (I've definitely had mail where the subject lines has been taken
from the Xitami documentation on the web.)
I suspect that some spammers have also started emulating the same
technique.
One thing that you can do to determine where the messages are most
likely to be coming from is do "view all headers" and look at the
"Received" lines to see which machines the mail has been through.
Messages that have been through the Xitami mailing list will mention
"sxpublic.nxrda.imatix.net" (the mailing list server machine) near the
middle of the list of "Received" lines (about half to get to the mailing
list server, and half to get out to you).
If the messages in question do not mention sxpublic.nxrda.imatix.net
then they definitely didn't come from the mailing list, but are instead
someone "imitating" the look of the mailing list messages to try to get
past spam filters.
(If someone does want to filter on this, I'd suggest not filtering
on that exact machine, because it's possible it could change at some
point in the future. But "imatix.net" should always be somewhere in
the Received headers.)
Ewen
--
Ewen McNeill, Technical Consultant, iMatix Corporation www.imatix.com