Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > comp.lang.python > #109250

Re: [spam] Re: look what I've found [ignore]

From Terry Reedy <tjreedy@udel.edu>
Newsgroups comp.lang.python
Subject Re: [spam] Re: look what I've found [ignore]
Date 2016-05-29 21:31 -0400
Message-ID <mailman.32.1464571909.1839.python-list@python.org> (permalink)
References <00005ecf7ac2$8a060f36$415d221f$@volny.cz> <nifbhr$v5m$1@ger.gmane.org> <1464546207.1615617.622037953.2619BE40@webmail.messagingengine.com> <201605291610.41420.gheskett@wdtv.com> <nig55t$2m1$1@ger.gmane.org>

Show all headers | View raw


On 5/29/2016 4:10 PM, Gene Heskett wrote:

>> On Sun, May 29, 2016, at 14:14, Terry Reedy wrote:
>>> Spam missed by the normally excellent spam filter.  Ignore it.

> Blasted directly to this, and several other python related lists.
> The source address is NOT in the email headers, and I'm sure that is not
> a mistake, so for those of you running a blacklist like mail filter, you
> can add volny.cz to the kill on site lists.  Whois also does not report
> the IP, but dig did extract it. 46.255.231.48, however since it is not
> in the message, it won't do a lot of good to look for it, even using my
> own rules, which I write to block the whole class D is it annoys me.

Verizon (my ISP) would not accept a response with the web url the 
malfactor was trying to send us to, so they obviously have it blacklisted.

> Up to you all as to what you do about it, but it looks as if it was to be
> stopped at the source, it would be up to CENTRUM-CZ to block it.  IMO,
> w/o a source ip, centrum should not have accepted it for transmission.
> But my oar in these matters is about the size of a toothpick.
>
> From the rest of that messages headers it appears to have originated at:
> stephen@organicfoodmarkets.com.au, with an invisible character in front
> of the s that disables a copy/paste if its included in the copy.
>
> Tricky little snake.  Lets see what clamscand thinks of it.   Not
> infected, but its database is falling seriously behind too.  And I sure
> don't trust it enough to click on it.

-- 
Terry Jan Reedy

Back to comp.lang.python | Previous | Next | Find similar | Unroll thread


Thread

Re: [spam] Re: look what I've found [ignore] Terry Reedy <tjreedy@udel.edu> - 2016-05-29 21:31 -0400

csiph-web