Thanks. I decided to block the IPv6 ranges responsible for most of the spam, so the spam should have stopped or at least significantly toned down by now. Note that qq.com is not the real source of these mails. The sender can use any source email address.
Levente
On Thu, 20 Jul 2017, David T. Lewis wrote:
On Thu, Jul 20, 2017 at 04:58:07PM +0200, Levente Uzonyi wrote:
Hi Dave,
Can you post all the headers of one such email?
Levente
Attached is a gzipped copy of one of the emails.
My guess would be that this is some kind of attempt to hack into the mailing list as a means of spamming the list.
The qq.com domain does not narrow it down much, apparently this is a very large email and social media site in China, so blocking qq.com would be like blocking google mail.
Dave
On Thu, 20 Jul 2017, David T. Lewis wrote:
Just FYI, the vm-dev-owner at lists dot squeakfoundation dot org address, which redirects to my personal mail, is currently under attack by someone (something) using a qq.com related spoof address. I am getting a couple of messages per minute, so it is somewhat annoying.
- Dave
A typical message:
X-Original-To: vm-dev-owner@lists.squeakfoundation.org Delivered-To: vm-dev-owner@mail.squeak.org Date: Thu, 20 Jul 2017 21:33:39 +0800 Subject: =?utf-8?Q?=E7=8B=AC=E5=AE=B6=E6=B3=A8=E5=86=8C=E7=B3=BB=E7=BB=9F=EF=BC=8C=E8=BF=8E=E6=96=B0=E7=89=B9=E6=83=A0=EF=BC=8C=E7=A7=92=E9=80=8188=EF=BC=8C7771584.com=20, ?= ????????????????????????Q???2946128527????????????????????????????????????????????? To: vm-dev-owner@lists.squeakfoundation.org From: 418111563@qq.com Errors-To: mailman-bounces@lists.squeak.org
[-- text/html is unsupported (use 'v' to view this part) --]