[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [oc] Strange mailing list behaviour



Miha,

This means we'll have to identify range of IP addresses from the logs that
this abuser used and resubscribe all that were removed in this way. Miha,
can you figure out from the logs where did he come from (also assume he/she
might used different IP addresses since this might went through several day/
weeks?) and resubscribe back again those that he/she unsubscribed?

First of all we need to figure out whether he/she used mail to send
unsubscribe commands or he/she used web form to do this. I think we have all
the logs to do this.

regards,
Damjan

----- Original Message -----
From: Miha Lampret <mlampret@opencores.org>
To: <cores@opencores.org>
Sent: Sunday, August 19, 2001 4:40 PM
Subject: Re: [oc] Strange mailing list behaviour


> It is not auto removal problem because program didn't run at that time you
> were unsubscribed. Probably it is problem in our unsubscribe policy which
> is set to open. That means you can unsubscribe yourself without sending
> confirmation.. It seems that somebody sends unsubscribe command to
> majordomo with faked email's 'From' header. I am setting up new Majordomo
> which has 'confirm unsubscribe' option..
>
> regards,
> Miha
>
> On Sun, 19 Aug 2001, Damjan Lampret wrote:
>
> > Hi John,
> >
> > I also received notification about your unsubscribe request on Aug 15th.
In
> > fact I was quite surprised but figured that you might have gone to
change
> > your email address or something. Message below looks pretty standard (I
get
> > them several a day as people subscribe or unsubscribe). So now the only
> > question is who and how sent your unsubscribe request to majordomo - one
> > possibility is that software for automatic removal of dead emails has a
bug
> > and it removed you accidently. Miha, can you please check if this is the
> > case.
> > I doubt that anyone hijacked your email in order to send unsubscribe
request
> > and later confirmation (obviusly the hard part is to send confirmation).
> >
> > regards,
> > Damjan
> >
> > Message that I received from majordomo on aug 15th:
> > >>
> > Received: (from majordom@localhost)
> >  by iza.mr2.si (8.9.1/8.9.1) id KAA14528;
> >  Wed, 15 Aug 2001 10:02:26 +0200
> > Date: Wed, 15 Aug 2001 10:02:26 +0200
> > Message-Id: <200108150802.KAA14528@iza.mr2.si>
> > X-Authentication-Warning: iza.mr2.si: majordom set sender to
> > majordomo-Owner@opencores.org using -f
> > To: cores-approval@opencores.org
> > From: majordomo@opencores.org
> > Subject: UNSUBSCRIBE cores jdalton@asiaonline.net.au
> > Reply-To: majordomo@opencores.org
> >
> > --
> >
> > jdalton@asiaonline.net.au has unsubscribed from cores.
> > No action is required on your part.
> > <<
> >
> > ----- Original Message -----
> > From: John William Dalton <jdalton@asiaonline.net.au>
> > To: <cores@opencores.org>
> > Sent: Sunday, August 19, 2001 6:47 AM
> > Subject: [oc] Strange mailing list behaviour
> >
> >
> > >
> > > Last Wednesday, I received the following
> > > message from majordome@opencores.org
> > >
> > > # >>>> unsubscribe cores jdalton@asiaonline.net.au
> > > # Succeeded.
> > >
> > > The message arrived at 15 Aug 2001 08:02:33 GMT
> > >
> > > This seemed quite strange, as I was not
> > > aware of sending an unsubscribe request
> > > I waited for a while, and I was indeed
> > > unsubscribed, as e-mails from cores stopped.
> > >
> > > Has anyone else had a similar thing happen
> > > to them?
> > >
> > > Some explanations I can think of (in order
> > > of decreasing probability) are:
> > >
> > > 1) The unsubscription was somehow
> > > triggered by the last message I sent
> > > to cores:
> > > # Slashdot is reporting that
> > > # AMD are discontinuing some
> > > # of their embedded processors
> > > # (486, 586, K6).
> > > #
> > > # Perhaps a chance for an opencore
> > > # to fill a niche?
> > >
> > > sent at Wed, 15 Aug 2001 00:38:39 local
> > > time (14 Aug 2001 014:38:39 GMT)
> > >
> > > 2) I have gone senile, and forgotten
> > > about an unsubscribe request I sent.
> > > (The men in white coats are coming now.)
> > >
> > > 3) There is a bug in majordomo, which caused
> > > an unsubscribe.
> > >
> > > 4) There has been a breach of security, and
> > > someone is sending unauthorised majordomo
> > > commands.
> > >
> > >
> > > >From my end, I have resubscribed, but I figured
> > > I should make people aware of the possibility
> > > of misconfiguration, bugs or security breaches.
> > > (I'm sure I didn't request to be unsubscribed!)
> > >
> > > Regards
> > > John
> > > --
> > > To unsubscribe from cores mailing list please visit
> > http://www.opencores.org/mailinglists.shtml
> > >
> >
> > --
> > To unsubscribe from cores mailing list please visit
http://www.opencores.org/mailinglists.shtml
> >
>
> --
> To unsubscribe from cores mailing list please visit
http://www.opencores.org/mailinglists.shtml
>

--
To unsubscribe from cores mailing list please visit http://www.opencores.org/mailinglists.shtml