Fwd: Mail refused: SPAM

Fwd: Mail refused: SPAM

[Geoffrey Keating]

Someone at luxik.cdi.cz has a misconfigured spam-filter which is using 
a nonfunctional RBL that appears to have gcc.gnu.org listed and they 
are sending responses back to people sending mail to the gcc lists.  
This might already have been dealt with, but if not, could someone 
unsubscribe this person?

(The list was gcc@gcc.gnu.org.  They've helpfully removed the CC that 
would have told me which one it was, but fortunately I have a record of 
the original mail.)

Begin forwarded message:

> From: mail@luxik.cdi.cz
> Date: Fri Sep 5, 2003  1:05:07  PM US/Pacific
> To: Geoffrey Keating <geoffk@apple.com>
> Subject: Mail refused: SPAM
> Return-Path: <>
> Received: from anise.apple.com (anise.apple.com [17.128.115.141]) by 
> mail2.apple.com (iPlanet Messaging Server 5.2 HotFix 1.12 (built Feb 
> 13 2003)) with ESMTP id <0HKR006TPBSN4B@mail2.apple.com> for 
> gkeating@ims-ms-daemon; Fri, 05 Sep 2003 13:05:11 -0700 (PDT)
> Received: from scv1.apple.com (scv1.apple.com [17.128.100.139]) by 
> anise.apple.com (iPlanet Messaging Server 5.2 HotFix 1.14 (built Mar 
> 18 2003)) with ESMTP id <0HKR0047FBSNG5@anise.apple.com> for 
> geoffk@apple.com (ORCPT geoffk@apple.com); Fri, 05 Sep 2003 13:05:11 
> -0700 (PDT)
> Received: from angeles.apple.com (mail-in4.apple.com [17.254.13.7]) by 
> scv1.apple.com (8.12.9/8.12.9) with ESMTP id h85K4qsH006422	for 
> <geoffk@apple.com>; Fri, 05 Sep 2003 13:04:52 -0700 (PDT)
> Received: from luxik.cdi.cz (inway106.cdi.cz [213.151.81.106]) by 
> angeles.apple.com (8.12.9/8.12.9) with ESMTP id h85K6RsB008626	for 
> <geoffk@apple.com>; Fri, 05 Sep 2003 20:06:28 +0000 (GMT)
> Received: from mail by luxik.cdi.cz with local (Exim 3.34 #3) id 
> 19vMpP-0006dA-00	for geoffk@apple.com; Fri, 05 Sep 2003 22:05:07 +0200
> In-Reply-To: <25AB6FBA-DFDC-11D7-B1E2-0030657EA24A@apple.com>
> Message-Id: <E19vMpP-0006dA-00@luxik.cdi.cz>
> Original-Recipient: rfc822;geoffk@apple.com
>
> Recipient does not accept e-mails from your domain due to the
> lot of spam received from this domain.
> To really send us mail add word "nospam" to your subject.
>
> From: Geoffrey Keating <geoffk@apple.com>
> To: Mark Mitchell <mark@codesourcery.com>
> Subject: Re: Patch to decl2.c
> and you are on the RBL: (relays.osirusoft.com) Please stop using 
> relays.osirusoft.com
>
-- 
Geoff Keating <geoffk@apple.com>

Re: Fwd: Mail refused: SPAM

[Christopher Faylor]

On Fri, Sep 05, 2003 at 02:15:28PM -0700, Geoffrey Keating wrote:
>Someone at luxik.cdi.cz has a misconfigured spam-filter which is using 
>a nonfunctional RBL that appears to have gcc.gnu.org listed and they 
>are sending responses back to people sending mail to the gcc lists.  
>This might already have been dealt with, but if not, could someone 
>unsubscribe this person?

I blocked subjects with "nospam" in them earlier today and unsubscribed
what I think is the offending party.  I let him know about this in the
off chance that I was wrong.

cgf

Re: Fwd: Mail refused: SPAM

[Phil Edwards]

On Fri, Sep 05, 2003 at 05:17:41PM -0400, Christopher Faylor wrote:
> On Fri, Sep 05, 2003 at 02:15:28PM -0700, Geoffrey Keating wrote:
> >Someone at luxik.cdi.cz has a misconfigured spam-filter which is using 
> >a nonfunctional RBL that appears to have gcc.gnu.org listed and they 
> >are sending responses back to people sending mail to the gcc lists.  
> >This might already have been dealt with, but if not, could someone 
> >unsubscribe this person?
> 
> I blocked subjects with "nospam" in them earlier today and unsubscribed
> what I think is the offending party.  I let him know about this in the
> off chance that I was wrong.

I think they've resubscribed.  I've just sent a message to gcc@
and gcc-regression@, and received the same bounce.  Complaining to
postmaster@luxik.cdi.cz bounces with "no such user", which IMNSHO means
they should simply be banned from talking to anything else on the net.

Re: Fwd: Mail refused: SPAM

[Christopher Faylor]

On Sun, Sep 07, 2003 at 02:41:42PM -0400, Phil Edwards wrote:
>On Fri, Sep 05, 2003 at 05:17:41PM -0400, Christopher Faylor wrote:
>> On Fri, Sep 05, 2003 at 02:15:28PM -0700, Geoffrey Keating wrote:
>> >Someone at luxik.cdi.cz has a misconfigured spam-filter which is using 
>> >a nonfunctional RBL that appears to have gcc.gnu.org listed and they 
>> >are sending responses back to people sending mail to the gcc lists.  
>> >This might already have been dealt with, but if not, could someone 
>> >unsubscribe this person?
>> 
>> I blocked subjects with "nospam" in them earlier today and unsubscribed
>> what I think is the offending party.  I let him know about this in the
>> off chance that I was wrong.
>
>I think they've resubscribed.  I've just sent a message to gcc@
>and gcc-regression@, and received the same bounce.  Complaining to
>postmaster@luxik.cdi.cz bounces with "no such user", which IMNSHO means
>they should simply be banned from talking to anything else on the net.

Hmm.  Sorry.  Maybe I hallucinated unsubscribing them or maybe I only
unsubscribed them from gcc-help or gcc-bugs.  They were still subscribed
to the gcc mailing list.  I didn't seem them on the gcc-regression
mailing list, though.

I've unsubscribed this person from every mailing list on the system and
added them to the global 'deny-subscribe' mailing list.  That's not
fully functional (I'm only testing it in the cygwin mailing list) but
eventually it will block specified addresses from unsubscribing.

cgf

Re: Fwd: Mail refused: SPAM

[Christopher Faylor]

On Wed, Mar 12, 2003 at 10:35:13AM -0800, Angela Marie Thomas wrote:
>
>> Curious, the gcc machine is on the spam block lists...  Hum...  The 
>> cause seems to be the spam on the cygwin list.  :-(
>
>This is not uncommon.  Note that SpamCop says it should not be used
>in production:
>
>   This  blocking list is somewhat experimental and should not be used in
>   a  production environment where legitimate email must be delivered. It
>   is  growing  more stable and is used by many large sites now. However,
>   SpamCop  is  aggressive  and often errs on the side of blocking mail ...
>
>There's little we can do if end-users block sourceware based on
>faulty data.

Actually, I had an agreement with spamcop owing to this very user who
can't get it into his thick skull that spam "from cygwin.com" isn't
really originating there.  Probably the IP address change confused things,
though.  I've sent another message asking to be put back on whatever list
we need to be on to avoid this type of thing in the future.

It's a little strange that I didn't see any email to postmaster about
this, though.  Usually they notify the site when they institute a block.

>Perhaps we should unsubscribe list members who forward mailing list
>spam to rbl sites.

I've just done that.

>We do the best we can to block spam, but some of it is just going to
>get through and adding sourceware to the rbl sites doesn't help anyone.

Yeah, we are on one obscure list, though.  Apparently the guy doesn't
like Red Hat or something.  That's a good reason for a block right?

cgf

Re: Fwd: Mail refused: SPAM

[Angela Marie Thomas]

> Curious, the gcc machine is on the spam block lists...  Hum...  The 
> cause seems to be the spam on the cygwin list.  :-(

This is not uncommon.  Note that SpamCop says it should not be used
in production:

   This  blocking list is somewhat experimental and should not be used in
   a  production environment where legitimate email must be delivered. It
   is  growing  more stable and is used by many large sites now. However,
   SpamCop  is  aggressive  and often errs on the side of blocking mail ...

There's little we can do if end-users block sourceware based on
faulty data.

Perhaps we should unsubscribe list members who forward mailing list
spam to rbl sites.  We do the best we can to block spam, but some
of it is just going to get through and adding sourceware to the
rbl sites doesn't help anyone.

--Angela

Fwd: Mail refused: SPAM

[Mike Stump]

Curious, the gcc machine is on the spam block lists...  Hum...  The 
cause seems to be the spam on the cygwin list.  :-(

Of the two spam samples they have, one is not on the spam lists, the 
other one is:

kithrup bash[17] rblcheck 207.188.235.194
207.188.235.194 RBL filtered by bl.spamcop.net
207.188.235.194 RBL filtered by list.dsbl.org
207.188.235.194 RBL filtered by dnsbl.njabl.org

Thought you'd be interested.

Begin forwarded message:

> From: mail@luxik.cdi.cz
> Date: Wed Mar 12, 2003  10:13:59 AM US/Pacific
> To: Mike Stump <mrs@apple.com>
> Subject: Mail refused: SPAM
>
> Recipient does not accept e-mails from your domain due to the
> lot of spam received from this domain
>
> From: Mike Stump <mrs@apple.com>
> To: Lars Segerlund <lars.segerlund@comsys.se>
> Subject: Re: the bugs database ...
> and you are on the RBL: (bl.spamcop.net) Blocked - see 
> http://spamcop.net/bl.shtml?66.187.233.205