Hey Fabian,
Here's the headers for one of the spam responses I got from the list:
from:Tracy tracy12614@safeloves.comreply-to:tracy12614@safeloves.com to:Tim Dunphy bluethundr@gmail.com date:Fri, Aug 28, 2015 at 2:19 PMsubject:Re: [CentOS] apache mysterious 404 errormailed-by:safeloves.comsigned-by:safeloves.com:Important mainly because it was sent directly to you.
Please let me know if that's not what you're looking for!
Thanks, Tim
On Fri, Aug 28, 2015 at 5:18 PM, Fabian Arrotin arrfab@centos.org wrote:
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
On 28/08/15 22:24, John R Pierce wrote:
On 8/28/2015 1:21 PM, Robert Wolfe wrote:
I've been getting that intermittently during the day today.
I haven't seen any since I put the sending domain with a 'DISCARD' in my /etc/mail/access database (using sendmail here)
Well, is there another domain involved now ? It seems the previous spammer (using multiple VMs on DigitalOcean network) had been blocked. As nothing is sent through the mailman/centos.org server, I can't even look at logs, but if you have useful informations (like some headers), feel free to forward those to me (and not on the list).
Cheers,
Fabian Arrotin The CentOS Project | http://www.centos.org gpg key: 56BEC54E | twitter: @arrfab -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux)
iEYEARECAAYFAlXg0D4ACgkQnVkHo1a+xU5OnACggUMg3QikAFsgAAeHSGGGI5Q1 5MgAn2leYj3Wbflv1w8gHnNICEEOKOo3 =rEWD -----END PGP SIGNATURE----- _______________________________________________ CentOS mailing list CentOS@centos.org https://lists.centos.org/mailman/listinfo/centos