Re: [tor-relays] Spam Emails Received From This Mailing List

[Mirimir <mirimir@xxxxxxxxxx>]

On 06/08/2018 04:06 PM, Keifer Bly wrote:
> I receive them whenever I send a note to this address, starting with the first time I participated in a conversation with this thread. Thank you.

Wow, that's bizarre! I thought that you meant occasionally, not after
every post. But still, someone could be watching for your posts, and
then sending spam to you with tor-relays@xxxxxxxxxxxxxxxxxxxx as a
spoofed from header.

I get that this is off-topic, and that most of you are rolling your
eyes. But if anyone else has seen this, I'd like to know.

And as I've said, I'm happy to review some source, and see if some
header could be used to block.

> From: Mirimir
> Sent: Friday, June 8, 2018 8:05 PM
> To: tor-relays@xxxxxxxxxxxxxxxxxxxx
> Subject: Re: [tor-relays] Spam Emails Received From This Mailing List
> 
> On 06/08/2018 03:48 PM, Keifer Bly wrote:
>> Yes, but the emails are saying that they are from the tor-relays@xxxxxxxxxxxxxxxxxxxx email address. They must be spoofing the email address it’s coming from somehow. I just thought that I’d say something as given that they are making their emails come from that email address could mean that these spammers could have somehow gotten who is subscribed to the relay mailing list as this is my personal email and not a school or company owned google account, no one else has access to this email account but me so not sure how they would have known I am subscribed. I would supply a copy of the email but that may be tough as they contain nudity and graphically intensive language.
> 
> How long have you been receiving them? I see that your first post to the
> list was on 2018-04-10. Anyone, whether subscribed or not, can get that
> from http://lists.torproject.org/pipermail/tor-relays/.
> 
> Please feel comfortable sending message source for one of them to me.
> Not just forwarding. Get the source text (in Thunderbird, it's just
> "View Source") and email as an attachment.
> 
>> Sent from my iPhone
>>
>>> On Jun 8, 2018, at 6:18 PM, Mirimir <mirimir@xxxxxxxxxx> wrote:
>>>
>>>> On 06/08/2018 01:24 PM, Keifer Bly wrote:
>>>> Hello fellow relay operators,
>>>>
>>>> My apologies as this is not related to tor relays, however, there seems to be several spammers subscribed to the relay list. Every time I am involved in a discussion on this list, I receive 3-5 emails supposedly from girls wanting to meet up (for sex). The emails in question claim they are sent from email address tor-relays@xxxxxxxxxxxxxxxxxxxx (and always have the same email subject of the discussion I was involved in).
>>>
>>> I don't recall seeing such messages. So they must be spoofing the from
>>> address.
>>>
>>>> I am somewhat in a trap as blocking them with spam filters would block all emails sent from the relay lists address. I am wondering what could be done about this (the email provider in question is Gmail).
>>>
>>> Maybe there's something in the headers that could be filtered on.
>>>
>>> Also, I recall reading that Gmail doesn't actually parse headers
>>> properly. If from address is spoofed to your address, it goes in your
>>> outbox :) So maybe you need to use an old-school email client.
>>>
>>>> Thank you.
>>>>
>>>>
>>>>
>>>> _______________________________________________
>>>> tor-relays mailing list
>>>> tor-relays@xxxxxxxxxxxxxxxxxxxx
>>>> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
>>>>
>>> _______________________________________________
>>> tor-relays mailing list
>>> tor-relays@xxxxxxxxxxxxxxxxxxxx
>>> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
>> _______________________________________________
>> tor-relays mailing list
>> tor-relays@xxxxxxxxxxxxxxxxxxxx
>> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
>>
> _______________________________________________
> tor-relays mailing list
> tor-relays@xxxxxxxxxxxxxxxxxxxx
> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
> 
> 
> 
> 
> _______________________________________________
> tor-relays mailing list
> tor-relays@xxxxxxxxxxxxxxxxxxxx
> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
> 
_______________________________________________
tor-relays mailing list
tor-relays@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays