Chris Muir

What's with the attachments on the mailing list traffic?

I'm getting lots of copies of a file called GWAVADAT.TXT

Chris Muir | "There are many futures and only one status quo.

cbm@well.com | This is why conservatives mostly agree,

 | and radicals always argue." - Brian Eno

-- 
Chris Muir           | "There are many futures and only one status quo.
cbm@well.com         |  This is why conservatives mostly agree,
http://www.xfade.com |  and radicals always argue." - Brian Eno


mailing-list-attachments

I'm looking into it. It appears they're originating from the mailing list somehow, possibly some subscriber's client is looping back and echoing messages to the list. In the meantime, I'm going to turn off the mailing list, use the forum if you need to.

> I'm looking into it. It appears they're originating from the mailing list somehow, possibly some 

> subscriber's client is looping back and echoing messages to the list. In the meantime, I'm going 

> to turn off the mailing list, use the forum if you need to.

This appears to be the issue. If mailing list subscribers want to look

at the headers of those messages with the attachments, they'll notice

something common about all of them - they have an X-Mailer value of

"GWAVA Archive Mailer" and the first Received: header contains "from

Ina-Admin (ina.hfmdd.de [172.28.74.95])".

What I'm guessing happened is that a subscriber was using a spam filter

called GWAVA, and that it started misbehaving and echoing messages back

to the list. If you google for "GWAVA Archive Mailer", you'll see that

Legitimate posts to the list will not have these headers or attachment,

so I suggest deleting any messages with this attachment. I'll be

blocking this X-Mailer value to avoid this in the future.

The subscriber whose mailer this problem originated with has since been

unsubscribed, I'll keep monitoring the list for duplicate posts, but in

the meantime, if you notice something wrong with the list, I'm going to

see an email sent to me personally much more quickly than something sent

wallace winfrey wrote:
> I'm looking into it. It appears they're originating from the mailing list somehow, possibly some 
> subscriber's client is looping back and echoing messages to the list. In the meantime, I'm going 
> to turn off the mailing list, use the forum if you need to.

This appears to be the issue. If mailing list subscribers want to look
at the headers of those messages with the attachments, they'll notice
something common about all of them - they have an X-Mailer value of
"GWAVA Archive Mailer" and the first Received: header contains "from
Ina-Admin (ina.hfmdd.de [172.28.74.95])".

What I'm guessing happened is that a subscriber was using a spam filter
called GWAVA, and that it started misbehaving and echoing messages back
to the list. If you google for "GWAVA Archive Mailer", you'll see that
this seems to happen from time to time.

Legitimate posts to the list will not have these headers or attachment,
so I suggest deleting any messages with this attachment. I'll be
blocking this X-Mailer value to avoid this in the future.

The subscriber whose mailer this problem originated with has since been
unsubscribed, I'll keep monitoring the list for duplicate posts, but in
the meantime, if you notice something wrong with the list, I'm going to
see an email sent to me personally much more quickly than something sent
to the list itself.

Mailing list attachments?