[Mailman-Users] Spam from Mailman

[Stephen J. Turnbull]

>>>>> "Ken" == Ken Carter <KCarter at shelbyed.k12.al.us> writes:

    Ken> Our lists do not accept posting from members at all.  They
    Ken> are info only lists and only the list admin has the ability
    Ken> to post. This is why we were puzzled that one receiver would
    Ken> get a different message than anyone else on that list.

I would guess that somebody else on that list has both the list and
the recipient in their addressbook.  The third party got infected by a
To/From randomizing virus or worm whose payload is distributing spam
by mail, and the malware randomly picked the mailing list to spoof as
the author of the spam.

Non-list members probably wouldn't report, since the list is just an
unknown author on the spam.

Unless you can get your hands on the message as received to check for
the signs of delivery via mailman, there's no way to verify that
hypothesis, though.

If the recipient is moderately skilled with their mail program they
may be able to tell you whether Mailman's List-* headers are present.
If absent (and you have Mailman configured to add the List-* headers,
as is strongly encouraged), then Mailman didn't send it.  If present,
you have to worry about Mailman, but that's no proof---a sufficiently
nasty virus might add those headers.

-- 
School of Systems and Information Engineering http://turnbull.sk.tsukuba.ac.jp
University of Tsukuba                    Tennodai 1-1-1 Tsukuba 305-8573 JAPAN
               Ask not how you can "do" free software business;
              ask what your business can "do for" free software.