[vox-tech] OT- cron - not at a different time

[Rod Roark]

On Wednesday 03 March 2004 10:21 am, Donald Childs wrote:
> 
> > Does anyone know what this is all about?
> 
> The attachment, "AttachedFile.zip", had the W32.Beagle.H@mm virus. At least
> the file I received did.
> 
> Here's the message header I got:
> 
> Return-Path: <vox-admin@lists.lugod.org>
> Received: from www.livepenguin.com ([66.218.54.136]) by tornado.he.net for
> <dchilds@sc?????.n0t>; Wed, 3 Mar 2004 04:33:32 -0800

Your mail server says it came from here.

> Received: from ns1.livepenguin.com (localhost [127.0.0.1])
> 	by www.livepenguin.com (Postfix) with ESMTP
> 	id 4F1794D039; Wed,  3 Mar 2004 04:33:02 -0800 (PST)

Presumably this is Mailman, running locally and sending you
a copy.

> Delivered-To: vox@livepenguin.com
> Received: from CINZIAFO (webpresid1.agr.unifi.it [150.217.27.33])
> 	by www.livepenguin.com (Postfix) with SMTP id 6A2FE4A403
> 	for <vox@livepenguin.com>; Wed,  3 Mar 2004 04:32:03 -0800 (PST)
> To: vox@livepenguin.com
> From: lugod@livepenguin.com

Here's the offending mail source.  Obviously the sender's
email address is forged.  A problem with mailing lists like
ours is that if the sending email address is in the list, it
is accepted; there is no other verification performed.

-- Rod