[Box-Admins] The vm-dev-owner mail address is currently under spam bot attack

[David T. Lewis]

Excellent, thank you very much Levente.

Dave


On Fri, Jul 21, 2017 at 01:45:35AM +0200, Levente Uzonyi wrote:
> Thanks. I decided to block the IPv6 ranges responsible for most of the 
> spam, so the spam should have stopped or at least significantly toned down
> by now.
> Note that qq.com is not the real source of these mails. The sender can 
> use any source email address.
> 
> Levente
> 
> On Thu, 20 Jul 2017, David T. Lewis wrote:
> 
> >On Thu, Jul 20, 2017 at 04:58:07PM +0200, Levente Uzonyi wrote:
> >>Hi Dave,
> >>
> >>Can you post all the headers of one such email?
> >>
> >>Levente
> >
> >Attached is a gzipped copy of one of the emails.
> >
> >My guess would be that this is some kind of attempt to hack into the
> >mailing list as a means of spamming the list.
> >
> >The qq.com domain does not narrow it down much, apparently this is a
> >very large email and social media site in China, so blocking qq.com would
> >be like blocking google mail.
> >
> >Dave
> >
> >
> >
> >
> >>
> >>On Thu, 20 Jul 2017, David T. Lewis wrote:
> >>
> >>>Just FYI, the vm-dev-owner at lists dot squeakfoundation dot org address,
> >>>which
> >>>redirects to my personal mail, is currently under attack by someone
> >>>(something)
> >>>using a qq.com related spoof address. I am getting a couple of messages
> >>>per minute,
> >>>so it is somewhat annoying.
> >>>
> >>>- Dave
> >>>
> >>>
> >>>A typical message:
> >>>
> >>>X-Original-To: vm-dev-owner at lists.squeakfoundation.org
> >>>Delivered-To: vm-dev-owner at mail.squeak.org
> >>>Date: Thu, 20 Jul 2017 21:33:39 +0800
> >>>Subject:
> >>>=?utf-8?Q?=E7=8B=AC=E5=AE=B6=E6=B3=A8=E5=86=8C=E7=B3=BB=E7=BB=9F=EF=BC=8C=E8=BF=8E=E6=96=B0=E7=89=B9=E6=83=A0=EF=BC=8C=E7=A7=92=E9=80=8188=EF=BC=8C7771584.com=20,
> >>>?=
> >>>????????????????????????Q???2946128527?????????????????????????????????????????????
> >>>To: vm-dev-owner at lists.squeakfoundation.org
> >>>From: 418111563 at qq.com
> >>>Errors-To: mailman-bounces at lists.squeak.org
> >>>
> >>>[-- text/html is unsupported (use 'v' to view this part) --]
> >>>
> >>>
> >>>
> >>>
> >>>
> >>>
> >