[jira] [Created] (INFRA-6585) Influx of mailing list spam (spoofed?) from subscriber accounts

["Hoss Man (JIRA)" <ji...@apache.org>]

Hoss Man created INFRA-6585:
-------------------------------

             Summary: Influx of mailing list spam (spoofed?) from subscriber accounts
                 Key: INFRA-6585
                 URL: https://issues.apache.org/jira/browse/INFRA-6585
             Project: Infrastructure
          Issue Type: Bug
      Security Level: public (Regular issues)
            Reporter: Hoss Man


I'm not sure what if anything can be done about this, but i wanted to report this somewhere and get a trackable URL with the details.

In the last ~48 hours, we've seen a large spike in the amount of SPAM mail making it into lucene mailing lists which is making it arround the moderation queues because the identified "sender" is in fact a subscribed user....

http://apache.markmail.org/search/?q=from%3Aozguryilmazel%40gmail.com
http://apache.markmail.org/search/?q=from%3Amagawake%40gmail.com
http://apache.markmail.org/search/?q=from%3Avieri.emiliani%40gmail.com
http://apache.markmail.org/search/?q=from%3Achris.sleeman%40gmail.com
http://apache.markmail.org/search/?q=from%3Awiredkel%40yahoo.com
http://apache.markmail.org/search/?q=from%3Aaravind.treasurata%40gmail.com

...based purely on the CC list of these spam messages, and the results on other lists that show up from these few senders, it looks like the problem is not specific just to lucene lists, and is probably affecting other projects at a larger scale.

If anyone in INFRA has specific suggestions for how to deal with this influx of "subscribed user spam", either on hollisticly in the apache server/ezmlm configs, or via moderater action, please speak up.


--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira