Thanks for figuring this out, Razer. I was also surprised, but had a suspicion it was something like what you described. Having an incorrect "From: " header is a standard spammer technique, and also has legitimate uses. - Greg On Sat, Sep 10, 2016 at 08:25:40PM -0700, Razer wrote:
On 09/09/2016 08:44 PM, I wrote:
At your end, the listserv allowed an unsubscribed address to post.
Figured it out For some reason when I changed the From: line in "Edit as New" to just my nick, thunderbird assumed it was an account @pglaf.org, the sending domain of the original poster, and spoofed the email address while sending through riseup.net.
Sorry about the false alarm
At my end... Mystified.
Not so much anymore but I wonder if the Tbird crowd knows of this 'feature'?
Rr
On 09/09/2016 08:34 PM, Razer@pglaf.org...
Full header:
Return-Path: <cypherpunks-bounces@lists.cpunks.org> X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on spoonbill.riseup.net X-Spam-Level: * X-Spam-Pyzor: Reported 0 times. X-Spam-Status: No, score=1.9 required=5.0 tests=AM_TRUNCATED,BAYES_50, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,ENV_FROM_DIFF0,FORWARD_RELAY, HEADER_FROM_DIFFERENT_DOMAINS,HREF_PHISH2,HTML_MESSAGE,HYPE_CLAIM,KAM_LIVE, NO_REAL_NAME,RCVD_IN_DNSWL_NONE,SPF_HELO_PASS,SPF_PASS,UNPARSEABLE_RELAY shortcircuit=no autolearn=disabled version=3.4.0 Delivered-To: rayzer@riseup.net Received: from mx1.riseup.net (unknown [10.0.1.33]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "*.riseup.net", Issuer "COMODO RSA Domain Validation Secure Server CA" (verified OK)) by spoonbill.riseup.net (Postfix) with ESMTPS id 4F819B2; Sat, 10 Sep 2016 03:34:31 +0000 (UTC) Received: from pglaf.org (mail.pglaf.org [65.50.255.19]) by mx1.riseup.net (Postfix) with ESMTP id 5136D1A1D20; Sat, 10 Sep 2016 03:34:30 +0000 (UTC) Authentication-Results: mx1.riseup.net; dkim=permerror reason="verification error: multiple keys found; unprotected key" header.d=pglaf.org header.i=@pglaf.org header.b=Z9MNuW9j; dkim-adsp=temperror reason="multiple DNS replies for '_adsp._domainkey.pglaf.org'" (unprotected policy); dkim-atps=neutral Received: from localhost (localhost [127.0.0.1]) by pglaf.org (Postfix) with ESMTP id 8435811C3370; Fri, 9 Sep 2016 20:34:14 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=pglaf.org; s=201606; t=1473478454; bh=b7yYTusAAtujJs6G3fwrgAT2fpc3LtGkw65Yvpu8thU=; h=From:Subject:References:To:Date:In-Reply-To:List-Id: List-Unsubscribe:List-Archive:List-Post:List-Help:List-Subscribe: From; b=Z9MNuW9ji2dg8RUrWOSvB1zfduS1gzVQbiMTlR0KGiW4ofDIYQVZ07i5w4nX0Nvi9 Y7ZqGTjuG6x8M1fIU0i43JFofIrAYSZjrjYkyJVwryGFn8L/xf4MR5UPBzCifFdHSP vGzwECWv8YD/JBN+mjhNhpLq9yRSe+MU3A1zDzTX5X4VuV0VWrbMzEy9wdlg0sZoVn fxPMWPZSGnwam78TVXFWKFhgSkhSdSk6Zp5vZtZhp0e89+4RA5mdl4vgebELGf1TWK etSjbliRfIVY5TIM7rIShkrsbTrp+ruvEHDFOGzJbmD8NLGiewBlRgyaGkznKT1IQ5 AXfS8ZxWUqn1Q== X-Virus-Scanned: Debian amavisd-new at pglaf.org Received: from pglaf.org ([127.0.0.1]) by localhost (mail.pglaf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GbjU-o9UtB4d; Fri, 9 Sep 2016 20:34:11 -0700 (PDT) Received: from mail.pglaf.org (localhost [127.0.0.1]) by pglaf.org (Postfix) with ESMTP id DE83A11C0299; Fri, 9 Sep 2016 20:34:08 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=pglaf.org; s=201606; t=1473478448; bh=b7yYTusAAtujJs6G3fwrgAT2fpc3LtGkw65Yvpu8thU=; h=From:Subject:References:To:Date:In-Reply-To:List-Id: List-Unsubscribe:List-Archive:List-Post:List-Help:List-Subscribe: From; b=IBLTYEzfU7rmTgi83jAMXv2dsRnrYWG4tfzlAJ9bKPQCdLGfNZgVxkequ2KhF2tbm qV7sYtK+/YM+wrs7DkZWHLk6ZpO6tJSPUElio/JcUrKxfw7vlPejJWMb1Fz5ryACDV 7OYHiybAOadR2HdXYM8eDXXuIJ5vtqZZVU9MlievrFV/eR0ZohoFTiRHZGnppPcMQu pP2gAqsfvDQCCb6qob33Q+cEpceuYrYpFGtQqyTzHAljrlegbIu2+kBlK4ZtwQQ/FC R2is9xhSaoO1ljf5KAshuKCRHUdu2alPiejv6voYyuXJG4oAI/S2sItQsCip8rxJfz yoV2SD66UEoCg== X-Original-To: cypherpunks@lists.cpunks.org Delivered-To: cypherpunks@lists.cpunks.org Received: from localhost (localhost [127.0.0.1]) by pglaf.org (Postfix) with ESMTP id 7022411C0299 for <cypherpunks@lists.cpunks.org>; Fri, 9 Sep 2016 20:34:07 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=pglaf.org; s=201606; t=1473478447; bh=b7yYTusAAtujJs6G3fwrgAT2fpc3LtGkw65Yvpu8thU=; h=From:Subject:References:To:Date:In-Reply-To:From; b=phOziTZ2g0Fyl7/iukXvYolFYTZTEVU+AHFbG0lKHsYVvkeCfPuGY5BH0qmbYE5uZ Cwg3P26ZuFcY0HaE6XCigWWnBVVLCDghyq8wlyMTgRzAmsvx3/eZnIbrpaScStHXgr PencChxiHs+VklMAws05N/gS45Da1DWjbjDdtsPr7sja+U+QJ1gQLh43bD+nf6VxB+ GE7zhU1Ym6Kr1iah3wQjwgujn0kuSu7k/mJaGUkoHMCuI9nE1wgBfFOdEYIVSUAo9u As4PPXAs6ga+Y4GS4eaippKH4sdX+wvh0UBkzqHelSUX9eYfR8Rf2HJPcs++Xae7SU yNV5HdVKMcyBw== X-Virus-Scanned: Debian amavisd-new at pglaf.org Received: from pglaf.org ([127.0.0.1]) by localhost (mail.pglaf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id C5t6sv6eyMVY for <cypherpunks@lists.cpunks.org>; Fri, 9 Sep 2016 20:34:04 -0700 (PDT) Received-SPF: Pass (sender SPF authorized) identity=mailfrom; client-ip=198.252.153.129; helo=mx1.riseup.net; envelope-from=rayzer@riseup.net; receiver=cypherpunks@lists.cpunks.org Authentication-Results: pglaf.org; dkim=permerror (bad message/signature format) Received: from mx1.riseup.net (mx1.riseup.net [198.252.153.129]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by pglaf.org (Postfix) with ESMTPS id 1CE0011C0244 for <cypherpunks@lists.cpunks.org>; Fri, 9 Sep 2016 20:34:03 -0700 (PDT) Received: from piha.riseup.net (unknown [10.0.1.163]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (Client CN "*.riseup.net", Issuer "COMODO RSA Domain Validation Secure Server CA" (verified OK)) by mx1.riseup.net (Postfix) with ESMTPS id 9EC711A1B56 for <cypherpunks@lists.cpunks.org>; Sat, 10 Sep 2016 03:34:17 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (Authenticated sender: rayzer) with ESMTPSA id 4F7801C035A From: Razer@pglaf.org Subject: First you have to admit there's a box before you can think outside it... References: <19627032.24648.0@wordpress.com> To: cypherpunks <cypherpunks@lists.cpunks.org> X-Enigmail-Draft-Status: N1110 Message-ID: <383808bf-73fe-535d-cd11-998ffb6a1d70@riseup.net> Date: Fri, 9 Sep 2016 20:34:16 -0700 MIME-Version: 1.0 In-Reply-To: <19627032.24648.0@wordpress.com> Content-Type: multipart/alternative; boundary="------------6750965B17E17E41B01BBAAC" X-BeenThere: cypherpunks@lists.cpunks.org X-Mailman-Version: 2.1.16 Precedence: list List-Id: The Cypherpunks Mailing List <cypherpunks.lists.cpunks.org> List-Unsubscribe: <https://lists.cpunks.org/mailman/options/cypherpunks>, <mailto:cypherpunks-request@lists.cpunks.org?subject=unsubscribe> List-Archive: <http://lists.cpunks.org/pipermail/cypherpunks/> List-Post: <mailto:cypherpunks@lists.cpunks.org> List-Help: <mailto:cypherpunks-request@lists.cpunks.org?subject=help> List-Subscribe: <https://lists.cpunks.org/mailman/listinfo/cypherpunks>, <mailto:cypherpunks-request@lists.cpunks.org?subject=subscribe> Errors-To: cypherpunks-bounces@lists.cpunks.org Sender: "cypherpunks" <cypherpunks-bounces@lists.cpunks.org>
This is a multi-part message in MIME format. --------------6750965B17E17E41B01BBAAC Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 7bit
From a post to another list (political) a few years ago: