Spam on tomcat-user?

[Rhino <rh...@sympatico.ca>]

I mailed a note to tomcat-user a little while ago and got this reply within
a few minutes; it uses my subject line but the body of the note is some spam
about Harry Potter, in German.

My guess is that someone has a program monitoring the mailing list which
sends out a piece of spam every time someone sends a note to the list. I've
got a good firewall and I'm very careful about opening attachments so I'm
fairly sure this didn't originate with any virus at my end.

I don't know if there is anything the list administrators can do about this
but I'd like to let them know about this. What's the best way to do that?

Rhino

----- Original Message ----- 
From: <gr...@hp-fc.de>
To: <rh...@sympatico.ca>
Sent: Sunday, March 07, 2004 6:18 PM
Subject: Re: Automatic backups of Tomcat logs in Mandrake??


> Lieber Harry Potter Fan!
>
> Der Sprechende Hut hat entschieden, dass du nach Gryffindor gehst.
> Nun kannst du dein Zauberexamen machen.
> Dein Benutzername ist "Gryffindor" und
> dein Kennwort "troubadour" (achte darauf, den ersten Buchstaben beim
Benutzernamen groß zu schreiben und alles andere klein). Bitte behalte diese
Passwörter für dich (ansonsten sind wir gezwungen, dich von Hogwarts zu
verweisen).
>
> Weiterhin viel Spass auf der Harry Potter Site!
> Wünscht dir
> Professor McGonagall
>
> P.S.1: Bei ersten Schwierigkeiten, nicht verzagen - schaut einfach in die
FAQ's (Häufig gestellte Fragen), dort werden fast alle eure Fragen
beantwortet. Ansonsten wendet euch an die Klassensprecherin: fawkes@hp-fc.de
>


---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org

Re: Spam on tomcat-user?

[Rhino <rh...@sympatico.ca>]

I posted about 6:15 PM EST and got the spam about 6:30 PM EST.

Rhino

----- Original Message ----- 
From: "Parsons Technical Services" <pa...@earthlink.net>
To: "Tomcat Users List" <to...@jakarta.apache.org>
Sent: Sunday, March 07, 2004 9:37 PM
Subject: Re: Spam on tomcat-user?


> Rhino,
> 
> Looks like your right. It is coming from posts to the list.
> It only started recently.
> Who else has seen this?
> Maybe we can help narrow down the search for the offending address by
> finding a time window that they subscribed.
> 
> Just a thought.
> 
> Doug
> 
> ----- Original Message ----- 
> From: "Parsons Technical Services" <pa...@earthlink.net>
> To: "Tomcat Users List" <to...@jakarta.apache.org>
> Sent: Sunday, March 07, 2004 9:15 PM
> Subject: Re: Spam on tomcat-user?
> 
> 
> > Rhino,
> >
> > Got the same email you did. Now without any reference words to see the
> > results.
> >
> > Doug
> >
> >
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
> > For additional commands, e-mail: tomcat-user-help@jakarta.apache.org
> >
> >
> 
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: tomcat-user-help@jakarta.apache.org
> 

---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org

Re: Spam on tomcat-user?

[Parsons Technical Services <pa...@earthlink.net>]

Rhino,

Looks like your right. It is coming from posts to the list.
It only started recently.
Who else has seen this?
Maybe we can help narrow down the search for the offending address by
finding a time window that they subscribed.

Just a thought.

Doug

----- Original Message ----- 
From: "Parsons Technical Services" <pa...@earthlink.net>
To: "Tomcat Users List" <to...@jakarta.apache.org>
Sent: Sunday, March 07, 2004 9:15 PM
Subject: Re: Spam on tomcat-user?


> Rhino,
>
> Got the same email you did. Now without any reference words to see the
> results.
>
> Doug
>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: tomcat-user-help@jakarta.apache.org
>
>



---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org

Re: Spam on tomcat-user?

[Parsons Technical Services <pa...@earthlink.net>]

Rhino,

Got the same email you did. Now without any reference words to see the
results.

Doug



---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org

Re: Spam on tomcat-user?

[Parsons Technical Services <pa...@earthlink.net>]

Highlight the message in the list. Then right click and select properties.
Select the details tab. Then select view source (easier to work with). You
can then do a cut and paste.


----- Original Message ----- 
From: "Rhino" <rh...@sympatico.ca>
To: "Tomcat Users List" <to...@jakarta.apache.org>
Sent: Sunday, March 07, 2004 11:53 PM
Subject: Re: Spam on tomcat-user?


> Hmm, how do I get the full headers? I'm using Outlook Express 6.0 on
Windows
> XP. I just checked the Help and their idea of seeing the full headers is
> displaying the From address, the Date, Subject and the To address. I've
seen
> the headers you mean in the past when I had Netscape installed but don't
> know how to get them in Outlook Express....
>
> By the way, I got the same piece of spam when I posted my note about the
> spam and expect to get it again when I hit Send on this note.
>
> Rhino
>
> ----- Original Message ----- 
> From: "Parsons Technical Services" <pa...@earthlink.net>
> To: "Tomcat Users List" <to...@jakarta.apache.org>
> Sent: Sunday, March 07, 2004 7:41 PM
> Subject: Re: Spam on tomcat-user?
>
>
> > Rhino,
> >
> > Thought I would test your theory here as well as throw in my own.
Mandrake
> > is a root that was used in the Harry Potter series. It may be that your
> > email was harvested because of the relation. Unless someone has just set
> > this up I haven't had any issues in the past, other than some virus
junk.
> >
> > Also it helps if you pull the header info from the email so if this is
> true,
> > it will give the list admin a better shot at finding a match. The only
> thing
> > you can trust in the header to be accurate is the IP. Everything else
can
> be
> > forged.
> >
> > My $.02
> >
> > Doug
> >
> > ----- Original Message ----- 
> > From: "Rhino" <rh...@sympatico.ca>
> > To: "tomcat-user" <to...@jakarta.apache.org>
> > Sent: Sunday, March 07, 2004 6:56 PM
> > Subject: Spam on tomcat-user?
> >
> >
> > > I mailed a note to tomcat-user a little while ago and got this reply
> > within
> > > a few minutes; it uses my subject line but the body of the note is
some
> > spam
> > > about Harry Potter, in German.
> > >
> > > My guess is that someone has a program monitoring the mailing list
which
> > > sends out a piece of spam every time someone sends a note to the list.
> > I've
> > > got a good firewall and I'm very careful about opening attachments so
> I'm
> > > fairly sure this didn't originate with any virus at my end.
> > >
> > > I don't know if there is anything the list administrators can do about
> > this
> > > but I'd like to let them know about this. What's the best way to do
> that?
> > >
> > > Rhino
> > >
> > > ----- Original Message ----- 
> > > From: <gr...@hp-fc.de>
> > > To: <rh...@sympatico.ca>
> > > Sent: Sunday, March 07, 2004 6:18 PM
> > > Subject: Re: Automatic backups of Tomcat logs in Mandrake??
> > >
> > >
> > > > Lieber Harry Potter Fan!
> > > >
> > > > Der Sprechende Hut hat entschieden, dass du nach Gryffindor gehst.
> > > > Nun kannst du dein Zauberexamen machen.
> > > > Dein Benutzername ist "Gryffindor" und
> > > > dein Kennwort "troubadour" (achte darauf, den ersten Buchstaben beim
> > > Benutzernamen groß zu schreiben und alles andere klein). Bitte behalte
> > diese
> > > Passwörter für dich (ansonsten sind wir gezwungen, dich von Hogwarts
zu
> > > verweisen).
> > > >
> > > > Weiterhin viel Spass auf der Harry Potter Site!
> > > > Wünscht dir
> > > > Professor McGonagall
> > > >
> > > > P.S.1: Bei ersten Schwierigkeiten, nicht verzagen - schaut einfach
in
> > die
> > > FAQ's (Häufig gestellte Fragen), dort werden fast alle eure Fragen
> > > beantwortet. Ansonsten wendet euch an die Klassensprecherin:
> > fawkes@hp-fc.de
> > > >
> > >
> > >
> > > ---------------------------------------------------------------------
> > > To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
> > > For additional commands, e-mail: tomcat-user-help@jakarta.apache.org
> > >
> > >
> >
> >
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
> > For additional commands, e-mail: tomcat-user-help@jakarta.apache.org
> >
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: tomcat-user-help@jakarta.apache.org
>
>



---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org

Re: Spam on tomcat-user?

[Rhino <rh...@sympatico.ca>]

Hmm, how do I get the full headers? I'm using Outlook Express 6.0 on Windows
XP. I just checked the Help and their idea of seeing the full headers is
displaying the From address, the Date, Subject and the To address. I've seen
the headers you mean in the past when I had Netscape installed but don't
know how to get them in Outlook Express....

By the way, I got the same piece of spam when I posted my note about the
spam and expect to get it again when I hit Send on this note.

Rhino

----- Original Message ----- 
From: "Parsons Technical Services" <pa...@earthlink.net>
To: "Tomcat Users List" <to...@jakarta.apache.org>
Sent: Sunday, March 07, 2004 7:41 PM
Subject: Re: Spam on tomcat-user?


> Rhino,
>
> Thought I would test your theory here as well as throw in my own. Mandrake
> is a root that was used in the Harry Potter series. It may be that your
> email was harvested because of the relation. Unless someone has just set
> this up I haven't had any issues in the past, other than some virus junk.
>
> Also it helps if you pull the header info from the email so if this is
true,
> it will give the list admin a better shot at finding a match. The only
thing
> you can trust in the header to be accurate is the IP. Everything else can
be
> forged.
>
> My $.02
>
> Doug
>
> ----- Original Message ----- 
> From: "Rhino" <rh...@sympatico.ca>
> To: "tomcat-user" <to...@jakarta.apache.org>
> Sent: Sunday, March 07, 2004 6:56 PM
> Subject: Spam on tomcat-user?
>
>
> > I mailed a note to tomcat-user a little while ago and got this reply
> within
> > a few minutes; it uses my subject line but the body of the note is some
> spam
> > about Harry Potter, in German.
> >
> > My guess is that someone has a program monitoring the mailing list which
> > sends out a piece of spam every time someone sends a note to the list.
> I've
> > got a good firewall and I'm very careful about opening attachments so
I'm
> > fairly sure this didn't originate with any virus at my end.
> >
> > I don't know if there is anything the list administrators can do about
> this
> > but I'd like to let them know about this. What's the best way to do
that?
> >
> > Rhino
> >
> > ----- Original Message ----- 
> > From: <gr...@hp-fc.de>
> > To: <rh...@sympatico.ca>
> > Sent: Sunday, March 07, 2004 6:18 PM
> > Subject: Re: Automatic backups of Tomcat logs in Mandrake??
> >
> >
> > > Lieber Harry Potter Fan!
> > >
> > > Der Sprechende Hut hat entschieden, dass du nach Gryffindor gehst.
> > > Nun kannst du dein Zauberexamen machen.
> > > Dein Benutzername ist "Gryffindor" und
> > > dein Kennwort "troubadour" (achte darauf, den ersten Buchstaben beim
> > Benutzernamen groß zu schreiben und alles andere klein). Bitte behalte
> diese
> > Passwörter für dich (ansonsten sind wir gezwungen, dich von Hogwarts zu
> > verweisen).
> > >
> > > Weiterhin viel Spass auf der Harry Potter Site!
> > > Wünscht dir
> > > Professor McGonagall
> > >
> > > P.S.1: Bei ersten Schwierigkeiten, nicht verzagen - schaut einfach in
> die
> > FAQ's (Häufig gestellte Fragen), dort werden fast alle eure Fragen
> > beantwortet. Ansonsten wendet euch an die Klassensprecherin:
> fawkes@hp-fc.de
> > >
> >
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
> > For additional commands, e-mail: tomcat-user-help@jakarta.apache.org
> >
> >
>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: tomcat-user-help@jakarta.apache.org
>


---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org

Re: Spam on tomcat-user?

[Parsons Technical Services <pa...@earthlink.net>]

Rhino,

Thought I would test your theory here as well as throw in my own. Mandrake
is a root that was used in the Harry Potter series. It may be that your
email was harvested because of the relation. Unless someone has just set
this up I haven't had any issues in the past, other than some virus junk.

Also it helps if you pull the header info from the email so if this is true,
it will give the list admin a better shot at finding a match. The only thing
you can trust in the header to be accurate is the IP. Everything else can be
forged.

My $.02

Doug

----- Original Message ----- 
From: "Rhino" <rh...@sympatico.ca>
To: "tomcat-user" <to...@jakarta.apache.org>
Sent: Sunday, March 07, 2004 6:56 PM
Subject: Spam on tomcat-user?


> I mailed a note to tomcat-user a little while ago and got this reply
within
> a few minutes; it uses my subject line but the body of the note is some
spam
> about Harry Potter, in German.
>
> My guess is that someone has a program monitoring the mailing list which
> sends out a piece of spam every time someone sends a note to the list.
I've
> got a good firewall and I'm very careful about opening attachments so I'm
> fairly sure this didn't originate with any virus at my end.
>
> I don't know if there is anything the list administrators can do about
this
> but I'd like to let them know about this. What's the best way to do that?
>
> Rhino
>
> ----- Original Message ----- 
> From: <gr...@hp-fc.de>
> To: <rh...@sympatico.ca>
> Sent: Sunday, March 07, 2004 6:18 PM
> Subject: Re: Automatic backups of Tomcat logs in Mandrake??
>
>
> > Lieber Harry Potter Fan!
> >
> > Der Sprechende Hut hat entschieden, dass du nach Gryffindor gehst.
> > Nun kannst du dein Zauberexamen machen.
> > Dein Benutzername ist "Gryffindor" und
> > dein Kennwort "troubadour" (achte darauf, den ersten Buchstaben beim
> Benutzernamen groß zu schreiben und alles andere klein). Bitte behalte
diese
> Passwörter für dich (ansonsten sind wir gezwungen, dich von Hogwarts zu
> verweisen).
> >
> > Weiterhin viel Spass auf der Harry Potter Site!
> > Wünscht dir
> > Professor McGonagall
> >
> > P.S.1: Bei ersten Schwierigkeiten, nicht verzagen - schaut einfach in
die
> FAQ's (Häufig gestellte Fragen), dort werden fast alle eure Fragen
> beantwortet. Ansonsten wendet euch an die Klassensprecherin:
fawkes@hp-fc.de
> >
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
> For additional commands, e-mail: tomcat-user-help@jakarta.apache.org
>
>



---------------------------------------------------------------------
To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tomcat-user-help@jakarta.apache.org