Volunteers

John Newman jnn at synfin.org
Wed Sep 21 12:21:40 PDT 2016


Someone bounced it through mail05.parking.ru, probably using the interface at:

http://mail05.parking.ru/Login.aspx

trivial to forge envelope headers... the list server bitched about the invalid
SPF, and also seemed to greylist it, but it still came through

X-Greylist: delayed 905 seconds by postgrey-1.34 at mail;                                                                                                                                                                                                                    
        Wed, 21 Sep 2016 03:57:33 PDT                                                                                                                                                                                                                                        
Received-SPF: Softfail (domain owner discourages use of this host)                                                                                                                                                                                                           
        identity=mailfrom; client-ip=195.128.120.25; helo=mail05.parking.ru;                                                                                                                                                                                                 
        envelope-from=juan.g71 at gmail.com; receiver=cypherpunks at lists.cpunks.org                                                                                                                                                                                              
Received: from mail05.parking.ru (mail05.parking.ru [195.128.120.25])                                                                                                                                                                                                        
        by pglaf.org (Postfix) with ESMTP id A35D611C0539                                                                                                                                                                                                                    
        for <cypherpunks at lists.cpunks.org>; Wed, 21 Sep 2016 03:57:33 -0700 (PDT)                                                                                                                                                                                            
Received: from web38 [195.128.121.111] by mail05.parking.ru with SMTP;                                                                                                                                                                                                       
        Wed, 21 Sep 2016 13:41:59 +0300                                              


John

On Wed, Sep 21, 2016 at 04:10:59PM -0300, juan wrote:
> 
> 
> 	I didn't send the message quoted below, so I'm wondering how
> 	the spoofing was done this time...
> 
> --------------------------
> 
> 
> 
> On Wed, 21 Sep 2016 13:41:59 +0300
> "juan" <juan.g71 at gmail.com> wrote:
> 
> > 
> > 
> > 
> > ------------------------------------------------------------------------
> > --------------------------------
> > This email was sent via Anonymous email service for free.
> > YOU CAN REMOVE THIS TEXT MESSAGE BY BEING A PAID MEMBER FOR $19/year.
> > <http://bit.ly/k37rpz> 
> > CLICK HERE => <http://bit.ly/k37rpz> 
> > IP address of the sender:85.25.103.119
> > <http://www.maxmind.com/en/geoip_demo>  Message ID= 315861
> > ------------------------------------------------------------------------
> > --------------------------------
> > 
> > 
> > > Sean Lynch: > Of course, this is all unglamorous work > that's hard
> > to get volunteers to do > unless they're really passionate Or getting
> > paid, fucker.
> > 
> > 
> > ------------------------------------------------------------------------
> > --------------------------------
> > This email was sent via Anonymous email service for free.
> > YOU CAN REMOVE THIS TEXT MESSAGE BY BEING A PAID MEMBER FOR $19/year.
> > <http://bit.ly/k37rpz> 
> > CLICK HERE => <http://bit.ly/k37rpz> 
> > Message ID= 315861
> > ------------------------------------------------------------------------
> > --------------------------------
> > 
> 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 455 bytes
Desc: not available
URL: <https://lists.cpunks.org/pipermail/cypherpunks/attachments/20160921/ab95a45c/attachment-0002.sig>


More information about the cypherpunks mailing list