Re: [spam] Re: look what I've found [ignore]

Path	csiph.com!fu-berlin.de!uni-berlin.de!not-for-mail
From	Terry Reedy <tjreedy@udel.edu>
Newsgroups	comp.lang.python
Subject	Re: [spam] Re: look what I've found [ignore]
Date	Sun, 29 May 2016 21:31:39 -0400
Lines	32
Message-ID	<mailman.32.1464571909.1839.python-list@python.org> (permalink)
References	<00005ecf7ac2$8a060f36$415d221f$@volny.cz> <nifbhr$v5m$1@ger.gmane.org> <1464546207.1615617.622037953.2619BE40@webmail.messagingengine.com> <201605291610.41420.gheskett@wdtv.com> <nig55t$2m1$1@ger.gmane.org>
Mime-Version	1.0
Content-Type	text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding	7bit
X-Trace	news.uni-berlin.de T0MeSrWu5tw4ViS/KVtuSgTMRl+cAELwTVT8HjQ63uug==
Return-Path	<python-python-list@m.gmane.org>
X-Original-To	python-list@python.org
Delivered-To	python-list@mail.python.org
X-Spam-Status	OK 0.000
X-Spam-Evidence	'H': 1.00; 'S': 0.00; 'subject:: [': 0.03; 'source,': 0.04; 'subject:spam': 0.07; 'filter,': 0.09; 'received:80.91': 0.09; 'received:80.91.229': 0.09; 'received:gmane.org': 0.09; 'received:list': 0.09; 'subject:ignore': 0.09; 'python': 0.10; 'jan': 0.11; 'ignore': 0.14; 'missed': 0.15; 'headers': 0.15; 'blacklist': 0.16; 'disables': 0.16; 'headers,': 0.16; 'imo,': 0.16; 'invisible': 0.16; 'received:80.91.229.3': 0.16; 'received:io': 0.16; 'received:plane.gmane.org': 0.16; 'received:psf.io': 0.16; 'reedy': 0.16; 'w/o': 0.16; 'whois': 0.16; 'wrote:': 0.16; 'obviously': 0.16; 'subject:] ': 0.19; '>>>': 0.20; 'trying': 0.22; 'appears': 0.23; 'header:In-Reply-To:1': 0.24; 'header:User- Agent:1': 0.26; 'header:X-Complaints-To:1': 0.26; 'rest': 0.26; 'looks': 0.29; '(my': 0.29; 'subject: [': 0.29; 'subject:what': 0.29; 'thinks': 0.29; 'character': 0.29; "i'm": 0.30; 'too.': 0.30; 'normally': 0.30; 'at:': 0.31; 'included': 0.32; 'related': 0.32; 'class': 0.33; 'source': 0.33; 'extract': 0.33; 'lets': 0.33; 'running': 0.34; 'add': 0.34; 'behind': 0.35; 'lists.': 0.35; 'stopped': 0.35; 'but': 0.36; 'should': 0.36; 'to:addr :python-list': 0.36; 'pm,': 0.36; 'subject:: ': 0.37; 'received:org': 0.37; 'front': 0.38; 'skip:4 10': 0.38; "won't": 0.38; 'several': 0.38; 'sure': 0.39; 'does': 0.39; 'enough': 0.39; 'to:addr:python.org': 0.40; 'address': 0.61; 'received:96': 0.63; 'to,': 0.63; 'click': 0.76; 'received:fios.verizon.net': 0.91; 'subject:found': 0.93; 'tricky': 0.93
X-Injected-Via-Gmane	http://gmane.org/
X-Gmane-NNTP-Posting-Host	pool-96-227-207-81.phlapa.fios.verizon.net
User-Agent	Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.1.0
In-Reply-To	<201605291610.41420.gheskett@wdtv.com>
X-BeenThere	python-list@python.org
X-Mailman-Version	2.1.22
Precedence	list
List-Id	General discussion list for the Python programming language <python-list.python.org>
List-Unsubscribe	<https://mail.python.org/mailman/options/python-list>, <mailto:python-list-request@python.org?subject=unsubscribe>
List-Archive	<http://mail.python.org/pipermail/python-list/>
List-Post	<mailto:python-list@python.org>
List-Help	<mailto:python-list-request@python.org?subject=help>
List-Subscribe	<https://mail.python.org/mailman/listinfo/python-list>, <mailto:python-list-request@python.org?subject=subscribe>
X-Mailman-Original-Message-ID	<nig55t$2m1$1@ger.gmane.org>
X-Mailman-Original-References	<00005ecf7ac2$8a060f36$415d221f$@volny.cz> <nifbhr$v5m$1@ger.gmane.org> <1464546207.1615617.622037953.2619BE40@webmail.messagingengine.com> <201605291610.41420.gheskett@wdtv.com>
Xref	csiph.com comp.lang.python:109250

Show key headers only | View raw

On 5/29/2016 4:10 PM, Gene Heskett wrote:

>> On Sun, May 29, 2016, at 14:14, Terry Reedy wrote:
>>> Spam missed by the normally excellent spam filter.  Ignore it.

> Blasted directly to this, and several other python related lists.
> The source address is NOT in the email headers, and I'm sure that is not
> a mistake, so for those of you running a blacklist like mail filter, you
> can add volny.cz to the kill on site lists.  Whois also does not report
> the IP, but dig did extract it. 46.255.231.48, however since it is not
> in the message, it won't do a lot of good to look for it, even using my
> own rules, which I write to block the whole class D is it annoys me.

Verizon (my ISP) would not accept a response with the web url the 
malfactor was trying to send us to, so they obviously have it blacklisted.

> Up to you all as to what you do about it, but it looks as if it was to be
> stopped at the source, it would be up to CENTRUM-CZ to block it.  IMO,
> w/o a source ip, centrum should not have accepted it for transmission.
> But my oar in these matters is about the size of a toothpick.
>
> From the rest of that messages headers it appears to have originated at:
> stephen@organicfoodmarkets.com.au, with an invisible character in front
> of the s that disables a copy/paste if its included in the copy.
>
> Tricky little snake.  Lets see what clamscand thinks of it.   Not
> infected, but its database is falling seriously behind too.  And I sure
> don't trust it enough to click on it.

-- 
Terry Jan Reedy

Back to comp.lang.python | Previous | Next | Find similar | Unroll thread

Thread

Re: [spam] Re: look what I've found [ignore] Terry Reedy <tjreedy@udel.edu> - 2016-05-29 21:31 -0400

csiph-web