[Admin note] Re: First you have to admit there's a box before you can think outside it...

Greg Newby gbnewby at pglaf.org
Sun Sep 11 07:44:57 PDT 2016


Thanks for figuring this out, Razer.   I was also surprised, but had a suspicion it was something like what you described.  Having an incorrect "From: " header is a standard spammer technique, and also has legitimate uses.
  - Greg

On Sat, Sep 10, 2016 at 08:25:40PM -0700, Razer wrote:
> 
> 
> On 09/09/2016 08:44 PM, I wrote:
> >
> > At your end, the listserv allowed an unsubscribed address to post.
> >
> 
> Figured it out For some reason when I changed the From: line in "Edit as
> New" to just my nick, thunderbird assumed it was an account @pglaf.org,
> the sending domain of the original poster, and spoofed the email address
> while sending through riseup.net.
> 
> Sorry about the false alarm
> 
> 
> > 
> > At my end... Mystified.
> >
> 
> Not so much anymore but I wonder if the Tbird crowd knows of this 'feature'?
> 
> Rr
> 
> > 
> > On 09/09/2016 08:34 PM, Razer at pglaf.org...
> > 
> > 
> > 
> > Full header:
> > 
> > 
> > Return-Path: <cypherpunks-bounces at lists.cpunks.org>
> > X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
> > spoonbill.riseup.net
> > X-Spam-Level: *
> > X-Spam-Pyzor: Reported 0 times.
> > X-Spam-Status: No, score=1.9 required=5.0 tests=AM_TRUNCATED,BAYES_50,
> > 	DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,ENV_FROM_DIFF0,FORWARD_RELAY,
> > 	HEADER_FROM_DIFFERENT_DOMAINS,HREF_PHISH2,HTML_MESSAGE,HYPE_CLAIM,KAM_LIVE,
> > 	NO_REAL_NAME,RCVD_IN_DNSWL_NONE,SPF_HELO_PASS,SPF_PASS,UNPARSEABLE_RELAY
> > 	shortcircuit=no autolearn=disabled version=3.4.0
> > Delivered-To: rayzer at riseup.net
> > Received: from mx1.riseup.net (unknown [10.0.1.33])
> > 	(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
> > 	(Client CN "*.riseup.net", Issuer "COMODO RSA Domain Validation Secure
> > Server CA" (verified OK))
> > 	by spoonbill.riseup.net (Postfix) with ESMTPS id 4F819B2;
> > 	Sat, 10 Sep 2016 03:34:31 +0000 (UTC)
> > Received: from pglaf.org (mail.pglaf.org [65.50.255.19])
> > 	by mx1.riseup.net (Postfix) with ESMTP id 5136D1A1D20;
> > 	Sat, 10 Sep 2016 03:34:30 +0000 (UTC)
> > Authentication-Results: mx1.riseup.net; dkim=permerror
> > 	reason="verification error: multiple keys found; unprotected key"
> > 	header.d=pglaf.org header.i=@pglaf.org header.b=Z9MNuW9j;
> > 	dkim-adsp=temperror reason="multiple DNS replies for
> > '_adsp._domainkey.pglaf.org'" (unprotected policy);
> > 	dkim-atps=neutral
> > Received: from localhost (localhost [127.0.0.1])
> > 	by pglaf.org (Postfix) with ESMTP id 8435811C3370;
> > 	Fri,  9 Sep 2016 20:34:14 -0700 (PDT)
> > DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=pglaf.org; s=201606;
> > 	t=1473478454; bh=b7yYTusAAtujJs6G3fwrgAT2fpc3LtGkw65Yvpu8thU=;
> > 	h=From:Subject:References:To:Date:In-Reply-To:List-Id:
> > 	 List-Unsubscribe:List-Archive:List-Post:List-Help:List-Subscribe:
> > 	 From;
> > 	b=Z9MNuW9ji2dg8RUrWOSvB1zfduS1gzVQbiMTlR0KGiW4ofDIYQVZ07i5w4nX0Nvi9
> > 	 Y7ZqGTjuG6x8M1fIU0i43JFofIrAYSZjrjYkyJVwryGFn8L/xf4MR5UPBzCifFdHSP
> > 	 vGzwECWv8YD/JBN+mjhNhpLq9yRSe+MU3A1zDzTX5X4VuV0VWrbMzEy9wdlg0sZoVn
> > 	 fxPMWPZSGnwam78TVXFWKFhgSkhSdSk6Zp5vZtZhp0e89+4RA5mdl4vgebELGf1TWK
> > 	 etSjbliRfIVY5TIM7rIShkrsbTrp+ruvEHDFOGzJbmD8NLGiewBlRgyaGkznKT1IQ5
> > 	 AXfS8ZxWUqn1Q==
> > X-Virus-Scanned: Debian amavisd-new at pglaf.org
> > Received: from pglaf.org ([127.0.0.1])
> > 	by localhost (mail.pglaf.org [127.0.0.1]) (amavisd-new, port 10024)
> > 	with ESMTP id GbjU-o9UtB4d; Fri,  9 Sep 2016 20:34:11 -0700 (PDT)
> > Received: from mail.pglaf.org (localhost [127.0.0.1])
> > 	by pglaf.org (Postfix) with ESMTP id DE83A11C0299;
> > 	Fri,  9 Sep 2016 20:34:08 -0700 (PDT)
> > DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=pglaf.org; s=201606;
> > 	t=1473478448; bh=b7yYTusAAtujJs6G3fwrgAT2fpc3LtGkw65Yvpu8thU=;
> > 	h=From:Subject:References:To:Date:In-Reply-To:List-Id:
> > 	 List-Unsubscribe:List-Archive:List-Post:List-Help:List-Subscribe:
> > 	 From;
> > 	b=IBLTYEzfU7rmTgi83jAMXv2dsRnrYWG4tfzlAJ9bKPQCdLGfNZgVxkequ2KhF2tbm
> > 	 qV7sYtK+/YM+wrs7DkZWHLk6ZpO6tJSPUElio/JcUrKxfw7vlPejJWMb1Fz5ryACDV
> > 	 7OYHiybAOadR2HdXYM8eDXXuIJ5vtqZZVU9MlievrFV/eR0ZohoFTiRHZGnppPcMQu
> > 	 pP2gAqsfvDQCCb6qob33Q+cEpceuYrYpFGtQqyTzHAljrlegbIu2+kBlK4ZtwQQ/FC
> > 	 R2is9xhSaoO1ljf5KAshuKCRHUdu2alPiejv6voYyuXJG4oAI/S2sItQsCip8rxJfz
> > 	 yoV2SD66UEoCg==
> > X-Original-To: cypherpunks at lists.cpunks.org
> > Delivered-To: cypherpunks at lists.cpunks.org
> > Received: from localhost (localhost [127.0.0.1])
> >  by pglaf.org (Postfix) with ESMTP id 7022411C0299
> >  for <cypherpunks at lists.cpunks.org>; Fri,  9 Sep 2016 20:34:07 -0700 (PDT)
> > DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=pglaf.org; s=201606;
> >  t=1473478447; bh=b7yYTusAAtujJs6G3fwrgAT2fpc3LtGkw65Yvpu8thU=;
> >  h=From:Subject:References:To:Date:In-Reply-To:From;
> >  b=phOziTZ2g0Fyl7/iukXvYolFYTZTEVU+AHFbG0lKHsYVvkeCfPuGY5BH0qmbYE5uZ
> >  Cwg3P26ZuFcY0HaE6XCigWWnBVVLCDghyq8wlyMTgRzAmsvx3/eZnIbrpaScStHXgr
> >  PencChxiHs+VklMAws05N/gS45Da1DWjbjDdtsPr7sja+U+QJ1gQLh43bD+nf6VxB+
> >  GE7zhU1Ym6Kr1iah3wQjwgujn0kuSu7k/mJaGUkoHMCuI9nE1wgBfFOdEYIVSUAo9u
> >  As4PPXAs6ga+Y4GS4eaippKH4sdX+wvh0UBkzqHelSUX9eYfR8Rf2HJPcs++Xae7SU
> >  yNV5HdVKMcyBw==
> > X-Virus-Scanned: Debian amavisd-new at pglaf.org
> > Received: from pglaf.org ([127.0.0.1])
> >  by localhost (mail.pglaf.org [127.0.0.1]) (amavisd-new, port 10024)
> >  with ESMTP id C5t6sv6eyMVY for <cypherpunks at lists.cpunks.org>;
> >  Fri,  9 Sep 2016 20:34:04 -0700 (PDT)
> > Received-SPF: Pass (sender SPF authorized) identity=mailfrom;
> >  client-ip=198.252.153.129; helo=mx1.riseup.net;
> >  envelope-from=rayzer at riseup.net; receiver=cypherpunks at lists.cpunks.org
> > Authentication-Results: pglaf.org;
> >  dkim=permerror (bad message/signature format)
> > Received: from mx1.riseup.net (mx1.riseup.net [198.252.153.129])
> >  (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
> >  (No client certificate requested)
> >  by pglaf.org (Postfix) with ESMTPS id 1CE0011C0244
> >  for <cypherpunks at lists.cpunks.org>; Fri,  9 Sep 2016 20:34:03 -0700 (PDT)
> > Received: from piha.riseup.net (unknown [10.0.1.163])
> >  (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits))
> >  (Client CN "*.riseup.net",
> >  Issuer "COMODO RSA Domain Validation Secure Server CA" (verified OK))
> >  by mx1.riseup.net (Postfix) with ESMTPS id 9EC711A1B56
> >  for <cypherpunks at lists.cpunks.org>; Sat, 10 Sep 2016 03:34:17 +0000 (UTC)
> > Received: from [127.0.0.1] (localhost [127.0.0.1])
> >  (Authenticated sender: rayzer) with ESMTPSA id 4F7801C035A
> > From: Razer at pglaf.org
> > Subject: First you have to admit there's a box before you can think outside
> >  it...
> > References: <19627032.24648.0 at wordpress.com>
> > To: cypherpunks <cypherpunks at lists.cpunks.org>
> > X-Enigmail-Draft-Status: N1110
> > Message-ID: <383808bf-73fe-535d-cd11-998ffb6a1d70 at riseup.net>
> > Date: Fri, 9 Sep 2016 20:34:16 -0700
> > MIME-Version: 1.0
> > In-Reply-To: <19627032.24648.0 at wordpress.com>
> > Content-Type: multipart/alternative;
> >  boundary="------------6750965B17E17E41B01BBAAC"
> > X-BeenThere: cypherpunks at lists.cpunks.org
> > X-Mailman-Version: 2.1.16
> > Precedence: list
> > List-Id: The Cypherpunks Mailing List <cypherpunks.lists.cpunks.org>
> > List-Unsubscribe: <https://lists.cpunks.org/mailman/options/cypherpunks>,
> >  <mailto:cypherpunks-request at lists.cpunks.org?subject=unsubscribe>
> > List-Archive: <http://lists.cpunks.org/pipermail/cypherpunks/>
> > List-Post: <mailto:cypherpunks at lists.cpunks.org>
> > List-Help: <mailto:cypherpunks-request at lists.cpunks.org?subject=help>
> > List-Subscribe: <https://lists.cpunks.org/mailman/listinfo/cypherpunks>,
> >  <mailto:cypherpunks-request at lists.cpunks.org?subject=subscribe>
> > Errors-To: cypherpunks-bounces at lists.cpunks.org
> > Sender: "cypherpunks" <cypherpunks-bounces at lists.cpunks.org>
> > 
> > This is a multi-part message in MIME format.
> > --------------6750965B17E17E41B01BBAAC
> > Content-Type: text/plain; charset=windows-1252
> > Content-Transfer-Encoding: 7bit
> > 
> > From a post to another list (political) a few years ago:
> > 


More information about the cypherpunks mailing list