Has anyone else been getting these forged viruses?
Received-SPF: softfail (dumbo.pobox.com: transitioning domain of
spf-discuss(_at_)v2(_dot_)listbox(_dot_)com does not designate 82.77.64.5 as
permitted sender)
Received: from Schiopu.com (unknown [82.77.64.5])
by dumbo.pobox.com (Postfix) with SMTP id DE7694AC
for <mengwong(_at_)dumbo(_dot_)pobox(_dot_)com>; Mon, 12 Jul 2004
01:40:09 -0400 (EDT)
Date: Sat, 19 Jun 2004 20:43:04 +0200
To: "Mengwong" <mengwong(_at_)dumbo(_dot_)pobox(_dot_)com>
From: "Spf-discuss" <spf-discuss(_at_)v2(_dot_)listbox(_dot_)com>
They're forging spf-discuss(_at_)v2(_dot_)listbox(_dot_)com, which is pretty
annoying. Fortunately, we can do something about it!
I've just set up per-user records for v2.listbox.com, and
I'm going to set spf-discuss to -all. Previously the site
default for listbox.com was ~all.
This means that anybody who:
- subscribed to spf-discuss using a forwarding alias
which does not perform SRS/SUBMITTER/SenderID-prepending
- and checks incoming mail using SPF
will reject messages due to SPF fail.
If you don't get any more messages after this one, that's
probably what happened :)
Any comments before I pull the trigger? Here's the full virus:
Received-SPF: softfail (dumbo.pobox.com: transitioning domain of
spf-discuss(_at_)v2(_dot_)listbox(_dot_)com does not designate 82.77.64.5 as
permitted sender)
Received: from Schiopu.com (unknown [82.77.64.5])
by dumbo.pobox.com (Postfix) with SMTP id DE7694AC
for <mengwong(_at_)dumbo(_dot_)pobox(_dot_)com>; Mon, 12 Jul 2004
01:40:09 -0400 (EDT)
Date: Sat, 19 Jun 2004 20:43:04 +0200
To: "Mengwong" <mengwong(_at_)dumbo(_dot_)pobox(_dot_)com>
From: "Spf-discuss" <spf-discuss(_at_)v2(_dot_)listbox(_dot_)com>
Subject: Notification
Message-ID: <whfjozptnraadeduvbc(_at_)dumbo(_dot_)pobox(_dot_)com>
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="--------ryccdfxqlrzqaoadmrub"
[-- Attachment #1 --]
[-- Type: text/html, Encoding: 7bit, Size: 0.1K --]
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: 7bit
[-- text/html is unsupported (use 'v' to view this part) --]
[-- Attachment #2: Details.scr --]
[-- Type: application/octet-stream, Encoding: base64, Size: 27K --]
Content-Type: application/octet-stream; name="Details.scr"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="Details.scr"
[-- application/octet-stream is unsupported (use 'v' to view this part) --]