Launchpad itself

Spamming account

Asked by Andrea Corbellini

Hello,

There's an account on Launchpad that is sending spam messages to this team:

  https://launchpad.net/~a4-dev/+mailinglist-moderate

The "From" field shows the address of the mailing list, so I can't tell the name of the account. However, here are some useful information about the message:

  Date: 2010-09-16 20:51:26+00:00
  Message-ID: <email address hidden>

A side note: the user didn't use the "Contact this user" feature (the footer is missing in the body of the mail).

Question information

Language:
English Edit question
Status:
Solved
For:
Launchpad itself Edit question
Assignee:
No assignee Edit question
Solved by:
Curtis Hovey
Solved:
Last query:
Last reply:
Revision history for this message
Curtis Hovey (sinzui) said : 		#1

This will be fixed during this release. Mailman will automatically discard emails that claim to be from the list.

Revision history for this message
Andrea Corbellini (andrea.corbellini) said : 		#2

There's something that I can't understand: don't all messages sent to a mailing list need to be GPG-signed with a registered key? How is it possible that unregistered people/bots can send mails?

Revision history for this message
Best Curtis Hovey (sinzui) said : 		#3

These emails are not to launchpad, they are to mailman. Emails from list subscribers go directly to the list. Emails that are from registered addresses go to the Launchpad moderation queue. The team's list address is of course registered, but clearly lists.launchpad.net belongs to a team and the domain is launchpad. We know no user email should come from the list. (mailman does accept emails from itself, and it knows via the headers that if the email really is from itself.) So these emails (which I believe are 2/3 of all messages in moderation queues are spam) were not rejected outright because Launchpad automatically registered the list address.

Revision history for this message
Andrea Corbellini (andrea.corbellini) said : 		#4

Thanks Curtis Hovey, that solved my question.