I'm getting a spamassassin party here

[Cameron Simpson]

On 26Jun2018 07:44, Richard Damon <Richard at Damon-Family.org> wrote:
>On 6/26/18 2:50 AM, Cameron Simpson wrote:
>> On 24Jun2018 17:03, Gene Heskett <gheskett at shentel.net> wrote:
>>> Generally spamassassin only gets picky about this occasionally, but for
>>> the past several hours its working overtime on python list messages,
>>> with the major problem being the servers time stamp, a day or more in
>>> the past. Anyboy ever hear of ntpd?
>>> -- Cheers, Gene Heskett
>>
>> Could you eyeball some of these problematic messages please?
>>
>> I've been noticing a swathe of messages in the past few days with
>> From: headers like this:
>>
>>  From: "Steven D'Aprano" <steven.d'aprano at 1:261/38.remove-ij1-this>
>>
>> where the From: has been badly mangled, I think by a usenet->list
>> gateway. The Path: on these messages looks like this (give or take):
>>
>>  Path:
>> uni-berlin.de!fu-berlin.de!news.linkpendium.com!news.linkpendium.com!news.snarked.org!news.bbs.nz!.POSTED.184-155-113-241.cpe.cableone.net!not-for-mail
>>
>> I'd be interested to know if there is significant overlap between my
>> problematic messages and yours.
>>
>> Cheers,
>> Cameron Simpson <cs at cskk.id.au>
>
>I am seeing similarly mangled messages, From is mangled, but the
>original added to the body, References are removed (so they don't
>thread), a day or two old.
>
>It looks like it was relayed to the list by news.bbs.nz

On closer inspection it looks like a FIDONET gateway may be the cause.

I've made enquiries of abuse at news.bbs.nz and newsmaster at news.bbs.nz, and am 
awaiting a response.

Cheers,
Cameron Simpson <cs at cskk.id.au>