On Fri, 20 Oct 2006, Kevin Mark wrote: > On Sat, Oct 21, 2006 at 12:05:58AM +0200, Javier Fernández-Sanguino Peña > wrote: > > I'm not sure if anybody else is seeing this but I have seen (just today) 28 > > spam messages sent to the BTS. I've received them because they were all sent > > I've seen BTS spam before and ask the list admins about it. > > > to (at least) the 'www.debian.org' pseudo-package, and I have reported all > > of > > them in the BTS' spam interface [1] > > > > They also seem to share common carachteristics: > > > > a) Subject fits the regexp: ".* note|letter|message\. You .* read\." > > b) The MTA it claims to be: "X-Mailer: Microsoft Office Outlook, Build > > 11.0.*" > > I've seen this X-Mailer Header used with recent spam. Is this a 'real' > used mailer, if not, it maybe an easy regex to stop this spam.
Yes... this regex has already been added. > > c) The first two lines of the body fit these regexps: > > > > The great .* are .*\. > > The increase is up to 70%.* > > > > I'm pretty sure this spam has probably found a place in many other BTS > > entries, I was just wondering if the BTS admins have noticed and placed > > appropiate measures in place (I'm sure they have, but just in case). > > #101772, #102186, #101772, #101870, #180196, #180118 > > Does BTS mail have identifiable header and/or body characteristics > to determine what is legitimate? Does all mail to the bts come from: > debian.org mailers, reportbugs or some identifable sources that > would make legitimate email identifable? The messages which do have such identifiable characterestics already have them in place; messages sent to nnn-done@ and nnn@ have no such requirements, though. In general, just clicking on the report spam links are good enough; in cases like this where large amounts of spam have been crafted which beat the extant rules, Blars Blarson (and to a lesser degree the other BTS admins, including myself) generally rapidly notice it and deal appropriately. [When we haven't, just send a note to [EMAIL PROTECTED] and someone will deal with it.] Don Armstrong -- Unix, MS-DOS, and Windows NT (also known as the Good, the Bad, and the Ugly). -- Matt Welsh http://www.donarmstrong.com http://rzlab.ucr.edu
