[tor-relays] Spam Emails Received From This Mailing List

[Neel Chauhan]

I've gotten these emails as well. Since I have my own email server, I 
configured Postfix to block the spam address. For me, the address was 
consistently the same. I thought that it was just a problem with my spam 
filter, but looking here even Gmail users got these messages.

I also uploaded a few of these messages to SpamCop (and if you still 
have your emails, you should also).

IMHO we should just block emails from *.mexyst.com domains (it seems 
everyone got a different sending address), no matter what email we use. 
Gmail, Outlook, ProtonMail, Riseup, or even your own server if you're 
like me.

-Neel Chauhan

===

https://www.neelc.org/

On 2018-06-09 00:08, Mirimir wrote:
> On 06/08/2018 04:06 PM, Keifer Bly wrote:
>> I receive them whenever I send a note to this address, starting with 
>> the first time I participated in a conversation with this thread. 
>> Thank you.
> 
> Wow, that's bizarre! I thought that you meant occasionally, not after
> every post. But still, someone could be watching for your posts, and
> then sending spam to you with tor-relays at lists.torproject.org as a
> spoofed from header.
> 
> I get that this is off-topic, and that most of you are rolling your
> eyes. But if anyone else has seen this, I'd like to know.
> 
> And as I've said, I'm happy to review some source, and see if some
> header could be used to block.
> 
>> From: Mirimir
>> Sent: Friday, June 8, 2018 8:05 PM
>> To: tor-relays at lists.torproject.org
>> Subject: Re: [tor-relays] Spam Emails Received From This Mailing List
>> 
>> On 06/08/2018 03:48 PM, Keifer Bly wrote:
>>> Yes, but the emails are saying that they are from the 
>>> tor-relays at lists.tororoject.org email address. They must be spoofing 
>>> the email address it’s coming from somehow. I just thought that I’d 
>>> say something as given that they are making their emails come from 
>>> that email address could mean that these spammers could have somehow 
>>> gotten who is subscribed to the relay mailing list as this is my 
>>> personal email and not a school or company owned google account, no 
>>> one else has access to this email account but me so not sure how they 
>>> would have known I am subscribed. I would supply a copy of the email 
>>> but that may be tough as they contain nudity and graphically 
>>> intensive language.
>> 
>> How long have you been receiving them? I see that your first post to 
>> the
>> list was on 2018-04-10. Anyone, whether subscribed or not, can get 
>> that
>> from http://lists.torproject.org/pipermail/tor-relays/.
>> 
>> Please feel comfortable sending message source for one of them to me.
>> Not just forwarding. Get the source text (in Thunderbird, it's just
>> "View Source") and email as an attachment.
>> 
>>> Sent from my iPhone
>>> 
>>>> On Jun 8, 2018, at 6:18 PM, Mirimir <mirimir at riseup.net> wrote:
>>>> 
>>>>> On 06/08/2018 01:24 PM, Keifer Bly wrote:
>>>>> Hello fellow relay operators,
>>>>> 
>>>>> My apologies as this is not related to tor relays, however, there 
>>>>> seems to be several spammers subscribed to the relay list. Every 
>>>>> time I am involved in a discussion on this list, I receive 3-5 
>>>>> emails supposedly from girls wanting to meet up (for sex). The 
>>>>> emails in question claim they are sent from email address 
>>>>> tor-relays at lists.torproject.org (and always have the same email 
>>>>> subject of the discussion I was involved in).
>>>> 
>>>> I don't recall seeing such messages. So they must be spoofing the 
>>>> from
>>>> address.
>>>> 
>>>>> I am somewhat in a trap as blocking them with spam filters would 
>>>>> block all emails sent from the relay lists address. I am wondering 
>>>>> what could be done about this (the email provider in question is 
>>>>> Gmail).
>>>> 
>>>> Maybe there's something in the headers that could be filtered on.
>>>> 
>>>> Also, I recall reading that Gmail doesn't actually parse headers
>>>> properly. If from address is spoofed to your address, it goes in 
>>>> your
>>>> outbox :) So maybe you need to use an old-school email client.
>>>> 
>>>>> Thank you.
>>>>> 
>>>>> 
>>>>> 
>>>>> _______________________________________________
>>>>> tor-relays mailing list
>>>>> tor-relays at lists.torproject.org
>>>>> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
>>>>> 
>>>> _______________________________________________
>>>> tor-relays mailing list
>>>> tor-relays at lists.torproject.org
>>>> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
>>> _______________________________________________
>>> tor-relays mailing list
>>> tor-relays at lists.torproject.org
>>> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
>>> 
>> _______________________________________________
>> tor-relays mailing list
>> tor-relays at lists.torproject.org
>> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
>> 
>> 
>> 
>> 
>> _______________________________________________
>> tor-relays mailing list
>> tor-relays at lists.torproject.org
>> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays
>> 
> _______________________________________________
> tor-relays mailing list
> tor-relays at lists.torproject.org
> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays