Someone bounced it through mail05.parking.ru, probably using the interface at: http://mail05.parking.ru/Login.aspx trivial to forge envelope headers... the list server bitched about the invalid SPF, and also seemed to greylist it, but it still came through X-Greylist: delayed 905 seconds by postgrey-1.34 at mail; Wed, 21 Sep 2016 03:57:33 PDT Received-SPF: Softfail (domain owner discourages use of this host) identity=mailfrom; client-ip=195.128.120.25; helo=mail05.parking.ru; envelope-from=juan.g71@gmail.com; receiver=cypherpunks@lists.cpunks.org Received: from mail05.parking.ru (mail05.parking.ru [195.128.120.25]) by pglaf.org (Postfix) with ESMTP id A35D611C0539 for <cypherpunks@lists.cpunks.org>; Wed, 21 Sep 2016 03:57:33 -0700 (PDT) Received: from web38 [195.128.121.111] by mail05.parking.ru with SMTP; Wed, 21 Sep 2016 13:41:59 +0300 John On Wed, Sep 21, 2016 at 04:10:59PM -0300, juan wrote:
I didn't send the message quoted below, so I'm wondering how the spoofing was done this time...
--------------------------
On Wed, 21 Sep 2016 13:41:59 +0300 "juan" <juan.g71@gmail.com> wrote:
------------------------------------------------------------------------ -------------------------------- This email was sent via Anonymous email service for free. YOU CAN REMOVE THIS TEXT MESSAGE BY BEING A PAID MEMBER FOR $19/year. <http://bit.ly/k37rpz> CLICK HERE => <http://bit.ly/k37rpz> IP address of the sender:85.25.103.119 <http://www.maxmind.com/en/geoip_demo> Message ID= 315861 ------------------------------------------------------------------------ --------------------------------
Sean Lynch: > Of course, this is all unglamorous work > that's hard to get volunteers to do > unless they're really passionate Or getting paid, fucker.
------------------------------------------------------------------------ -------------------------------- This email was sent via Anonymous email service for free. YOU CAN REMOVE THIS TEXT MESSAGE BY BEING A PAID MEMBER FOR $19/year. <http://bit.ly/k37rpz> CLICK HERE => <http://bit.ly/k37rpz> Message ID= 315861 ------------------------------------------------------------------------ --------------------------------