On Mon, 27 Apr 1998, Mark A. Bialik <mbialik@infinityhealthcare.com> wrote:
>Obviously a spammer set his reply-to to be my majordomo user. I guess
>I'm not completely sure what they're trying to accomplish... It doesn't
>appear they are trying to mail any of my lists, and I have the latest
>sendmail with anti-spam filters in place. Is this a fairly common thing?
I don't think they are setting their return address to Majordomo or
Majordomo-Owner. What is probably happening is:
* Spammer sends mail to majordomo (not majordmom-owner) and uses an
invalid envelope Return-Path, From, Sender, and/or Reply-To, so a
direct response to the spammer is impossible.
* Majordomo tries to interpret the spam as commands.
* Majordomo tries to reply to the spammer, setting the sender to
Majordomo-Owner.
* This reply can't be delivered to the spammer's invalid address, so
the MTA (e.g. sendmail) returns it to the sender (Majordomo-Owner),
with the message body included (which you forwarded). This bounced
message will have Majordomo-Owner properly set as the Return-Path.
I see this type of thing on a regular basis, even with the anti-spam
measures that we have in place.
--
John Van Essen <vanes002@tc.umn.edu> <jve@gamers.org>
Gamers.Org Majordomo Support <majordomo-owner@gamers.org>
|
|
