Re: Funds / Award release scams poor scoring
Henrik K wrote:[color=blue]
> On Mon, Nov 10, 2008 at 08:49:00AM +0100, mouss wrote:[color=green]
>> Henrik K wrote:[color=darkred]
>>> On Mon, Nov 10, 2008 at 12:25:42PM +0530, ram wrote:
>>>> The number of DNSWL_LOW and DNSWL_MED misfires have gone up especially
>>>> in last two days. Even Marc's JMF_W misfires.
>>>> What it means is these are "good" mailservers who normally relay ham and
>>>> have some weak links ( weak password etc ) that just got exposed
>>> What method are they using to relay through master.debian.org? I can't
>>> figure out how these mail from yahoo etc can end up relaying through there
>>> in this case.
>> they simply post to the list. if the list is not open, they susbcribe
> Ah right, I was looking it a bit wrong.. it's silly that the original
> recipient is nowhere to be found in headers.
Now that you say it, I don't see any list headers! so it looks like a