[rhelv6-list] RH lists munging From: header

Red Hat Enterprise Linux 6 (Santiago) discussion mailing-list rhelv6-list at redhat.com
Mon Feb 25 13:54:54 UTC 2013


Hi all,

> >> > There were several "bots" on the RH list, harvesting e-mail addresses
> >> > from senders to the list, and then sending rather inappropriate pictures
> >> > to those senders on the list from a huge inventory of e-mail addresses.
> >> > I believe that RH made the change at that time in order to stop this
> >> > behavior.  I know because I received those messages for quite some time!
> >>
> >> That may work, but *your* address is still in the "Received" headers,
> >> jas at ...
> >> so a more clever bot would still get your address from there.

I don't think that's the case, since as far as I understand, your
email address only appears in the email that was actually sent to you,
so I don't think that bots will ever see that -- unless your account 
is already hacked and a bot is going through your email, or unless 
the email you received gets posted with full headers somewhere, which 
I don't think should normally happen. That said, though, see below ...

> > I've had addresses harvested from all over the place, not just the From:
> > header.   The more amusing ones are MIME boundaries and message-ids.
> >
> > I notice that the list is still marking everything as from itself rather
> > than the author and with the announcement of 6.4 this has changed from a
> > "meh" to a real annoyance.
> >
> > Can we have the normal behaviour back please and let the harvesters get on
> > with culling messages from the archives like they always do.
> >
> > jch
>
> I totally agree. Right now, I have no idea who is posting, and there
> is no way to respond to the poster personally when that is a desirable
> action.
>
> (no name here)

I also agree that it would be much more useful to know who's posting what.
I've had this email address -- which you can't see :) -- for over 15 years
now, so it's pointless to try to hide it from people now. 

My 2c,

	Horst




More information about the rhelv6-list mailing list