Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.user > #185121

Re: [OT] Valid DKIM signature (Was: Re: I want to rejoice like a queen. Pauline)

From <tomas@tuxteam.de>
Newsgroups linux.debian.user
Subject Re: [OT] Valid DKIM signature (Was: Re: I want to rejoice like a queen. Pauline)
Date 2017-08-13 17:00 +0200
Message-ID <ue2wW-8qw-9@gated-at.bofh.it> (permalink)
References <ue0EO-7iL-19@gated-at.bofh.it> <ue0EO-7iL-17@gated-at.bofh.it> <ue23T-8gD-1@gated-at.bofh.it> <ue2nf-8n0-1@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Sun, Aug 13, 2017 at 02:44:56PM +0000, Andy Smith wrote:
> Hi,
> 
> On Sun, Aug 13, 2017 at 11:21:04PM +0900, Byung-Hee HWANG (황병희, 黃炳熙) wrote:
> 
> [snipped spam]
> 
> > By the way the mail got valid DKIM signature.
> 
> It came from a real person so why wouldn't it? DKIM says nothing of
> content.
> 
> > Please explain to me why the mail is here. It's odd. Please Please Please ...
> 
> A spammer sent out a spam run (this "would you be my king?" then URL
> to questionable site nonsense) using the debian-user address as the
> from address. Some of the hapless confused recipients replied to it,
> thus their reply ends up on the mailing list.

I have the hunch that it's a (faked, in the sense that the copy hasn't
been sent to debian-user) Cc: -- a From: might trigger the spam filter
at the victim's site (bad SPF and/or DKIM). But then, maybe not...

> It would be best not to reply to it (unless you feel like replying
> off-list to the person explaining that they are replying to spam),
> as the sender won't see your reply and no one on this list can do
> anything about it.

I do that from time to time, when I have a whiff of evidence that the
victim might understand what's going on. Never got a reply so far
(still curious :)

Cheers
- -- tomás
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)

iEYEARECAAYFAlmQaBIACgkQBcgs9XrR2kY1JACdGN/Y4cw5gP3RZ3zyufaMoOYS
TvsAnjZCeCQVFsii/3J68udK2cRkoDuK
=IChh
-----END PGP SIGNATURE-----

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

Re: I want to rejoice like a queen. Pauline Robert Villeneuve <robino583056@yahoo.ca> - 2017-08-13 15:00 +0200
  [OT] Valid DKIM signature (Was: Re: I want to rejoice like a queen. Pauline) "Byung-Hee HWANG (황병희, 黃炳熙)" <soyeomul@doraji.xyz> - 2017-08-13 16:30 +0200
    Re: [OT] Valid DKIM signature (Was: Re: I want to rejoice like a  queen. Pauline) Andy Smith <andy@strugglers.net> - 2017-08-13 16:50 +0200
      Re: [OT] Valid DKIM signature (Was: Re: I want to rejoice like a  queen. Pauline) <tomas@tuxteam.de> - 2017-08-13 17:00 +0200
      Re: [OT] Valid DKIM signature "Byung-Hee HWANG (황병희, 黃炳熙)" <soyeomul@doraji.xyz> - 2017-08-14 04:30 +0200
    Re: [OT] Valid DKIM signature Teemu Likonen <tlikonen@iki.fi> - 2017-08-13 17:30 +0200
      Re: [OT] Valid DKIM signature "Byung-Hee HWANG (황병희, 黃炳熙)" <soyeomul@doraji.xyz> - 2017-08-14 04:10 +0200
    Re: [OT] Valid DKIM signature (Was: Re: I want to rejoice like a  queen. Pauline) Eduardo M KALINOWSKI <eduardo@kalinowski.com.br> - 2017-08-14 16:20 +0200
      Re: [OT] Valid DKIM signature (Was: Re: I want to rejoice like a queen. Pauline) deloptes <deloptes@gmail.com> - 2017-08-14 16:40 +0200

csiph-web