Spammer Direct Replying To Those Posting On The Users List

Home » Asterisk Users » Spammer Direct Replying To Those Posting On The Users List
Asterisk Users 4 Comments

We apparently have a spam bot subscribed to the list and replying
*directly* to anyone who posts on the list.

The E-mails, generally use the name Alyssa or a Katie in the mail and have images attached. They come from a variety of addresses that so far don’t appear subscribed to the list. However spammers don’t typically subscribe to lists at the addresses they send from or appear to send from.

This is just a notice that we are working on it and doing what we can.

4 thoughts on - Spammer Direct Replying To Those Posting On The Users List

  • The e-mail address I use for this mailing list is asterisk_list@earthshod.co.uk ; so I used the following procmail recipe. This filters out anything being sent to that address *without* a Received: header mentioning lists.digium.com:

    :0
    * ^To.*asterisk_list
    * !^Received.*lists.digium.com asterisk_unwanted

    (when I am satisfied that it does not lose anything legitimate, I probably will change the last line to /dev/null .)

  • [Intentionally ignoring the Reply-to header in this reply. And yes, this is on-list]

    What if I wanted to reply to one of your messages off-list?

    My message would end up in asterisk_unwanted.

    Or even worse.

  • And it did — which is why I have added a special note in my .signature file
    (and why I didn’t dump rejected messages straight into /dev/null/ from the beginning; the first rule of procmail seems to be, you probably missed something). A spammer probably isn’t going to go to that sort of trouble.

    But if you can think of anything else I can pick up on that will improve the reliability of identifying legitimate off-list mail, I’m open to suggestions.