Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on lipkowski.org X-Spam-Level: X-Spam-Status: No, score=-2.3 required=5.0 tests=HEADER_FROM_DIFFERENT_DOMAINS, HTML_MESSAGE,RCVD_IN_DNSWL_MED,SPF_PASS,T_DKIM_INVALID autolearn=ham autolearn_force=no version=3.4.0 X-Spam-DCC: : mailn 1480; Body=2 Fuz1=2 Fuz2=2 Received: from post.thorcom.com (post.thorcom.com [195.171.43.25]) by lipkowski.org (8.14.4/8.14.4/Debian-8+deb8u1) with ESMTP id uBOG40x3013300 for ; Sat, 24 Dec 2016 17:04:01 +0100 Received: from majordom by post.thorcom.com with local (Exim 4.14) id 1cKokQ-0005uh-2L for rs_out_1@blacksheep.org; Sat, 24 Dec 2016 16:00:38 +0000 Received: from [195.171.43.32] (helo=relay1.thorcom.net) by post.thorcom.com with esmtp (Exim 4.14) id 1cKokN-0005uL-4D for rsgb_lf_group@blacksheep.org; Sat, 24 Dec 2016 16:00:35 +0000 Received: from rgout04.bt.lon5.cpcloud.co.uk ([65.20.0.181]) by relay1.thorcom.net with esmtp (Exim 4.87) (envelope-from ) id 1cKokK-0007kV-0j for rsgb_lf_group@blacksheep.org; Sat, 24 Dec 2016 16:00:33 +0000 X-OWM-Source-IP: 86.140.22.31 (GB) X-OWM-Env-Sender: alan.melia@btinternet.com X-Junkmail-Premium-Raw: score=8/50,refid=2.7.2:2016.12.19.90316:17:8.707,ip=,rules=NO_URI_FOUND, NO_CTA_URI_FOUND, NO_MESSAGE_ID, TO_MALFORMED, NO_URI_HTTPS Received: from gnat (86.140.22.31) by rgout04.bt.lon5.cpcloud.co.uk (9.0.019.13-1) (authenticated as alan.melia@btinternet.com) id 58482DA20186A092 for rsgb_lf_group@blacksheep.org; Sat, 24 Dec 2016 16:00:31 +0000 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=btinternet.com; s=btcpcloud; t=1482595232; bh=6aSPH9MGkzr3mygyy0G+xa/UeiTX2UyVa6QsyuCuxHU=; h=Message-ID:From:To:References:Subject:Date:MIME-Version:X-Mailer; b=RHeYAhTdJw+TiUFTphgwxXS+Se+3H0AevMIkyVbRSDZIkftANGvUAHF5Szc051Z+w2QW6L0dAx4kf36qK1TfreCUHy3ea+fPhmASvCMVPnwSUcr9KIl2I1vGJfqScFt3YJydcwlssql4pZnTpmdOagLGXRXL2cz7YDNfikAkkqk= Message-ID: <31ACE33135C641B4AF7A030FC51F0770@gnat> From: "Alan Melia" To: References: <41BBF7DF23F7D96AB6B3FA44300840CB@yahoo.com> <304156fd-30b8-702c-ea09-88fecfa74fd2@orange.fr> <8ECABEC57B644B4D8C4440CBBC9F8F62@gnat> Date: Sat, 24 Dec 2016 15:54:59 -0000 MIME-Version: 1.0 X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2900.5931 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.6157 X-Scan-Signature: 310131a5e532565f108a820138314750 Subject: Re: LF: Re: Coil problem....Spam alert! Content-Type: multipart/alternative; boundary="----=_NextPart_000_0006_01D25DFE.14D4C350" X-SA-Exim-Scanned: Yes Sender: owner-rsgb_lf_group@blacksheep.org Precedence: bulk Reply-To: rsgb_lf_group@blacksheep.org X-Listname: rsgb_lf_group X-SA-Exim-Rcpt-To: rs_out_1@blacksheep.org X-SA-Exim-Scanned: No; SAEximRunCond expanded to false X-Scanned-By: MIMEDefang 2.75 Status: O X-Status: X-Keywords: X-UID: 9934 This is a multi-part message in MIME format. ------=_NextPart_000_0006_01D25DFE.14D4C350 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Hi yes Eddie, well spotted .....note also messages actually "reflected" = by the real s/w have an LF: in the subject line even if no subject is = posted, so these were messages posted direct to the group address list, = which is not generally available,as individual mails. There is a command = for it but it is only available to the administrator. Sadly the majordomo software is a bit ancient now and our version has = not been updated for many years so someone may have found a = vulnarability to get at the memers list.=20 Plus point...... genuine distribution is still clean !!. look for the = "LF" Best Wishes for Christmas Alan G3NYK ----- Original Message -----=20 From: g3zjo=20 To: rsgb_lf_group@blacksheep.org=20 Sent: Saturday, December 24, 2016 3:17 PM Subject: Re: LF: Re: Coil problem....Spam alert! Hi Alan I was going to post a warning I had one today, quite convincing and a = current topic too "Re: LF: SAQ Testing" with a suspicious link "qrss = doc. It went to a wrong e-mail account for this group. Eddie G3ZJO On 24/12/2016 14:59, Alan Melia wrote: Hi Jeff and all members. Someone is forging the address of the = group. I dont think they are distributed to the group through the = reflector (from my scan of the header data) .....just to individual = members. So we cannot delete it, and anyway there is no admin access. So.... Be cautious of incorrectly addresses mails .....it should have the = senders name. Also beware of messages with a blank subject line.....a = common occurance with spam I received one with what looks like a message with a title ot = subject quoted inside the message from several years ago. I am guessing = they have farmed one of the archives......and not very well.=20 Do not access the URL under any circumstances, for someone to bother = doing all this can only be a pointer to nasty contents. Otherwise a Happy Christmas to all Alan G3NYK ----- Original Message -----=20 From: F6CWN=20 To: rsgb_lf_group@blacksheep.org=20 Sent: Saturday, December 24, 2016 2:07 PM Subject: Re: LF: Re: Coil problem Please KILL this message (not from me!) HNY & 73: Jeff Le 24/12/2016 =C3=A0 08:34, rsgb_lf_group@blacksheep.org a = =C3=A9crit : "LF: Re: Coil problem"=20 F6CWN doc=20 ------=_NextPart_000_0006_01D25DFE.14D4C350 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable =EF=BB=BF
Hi yes Eddie, well spotted .....note = also messages=20 actually "reflected" by the real s/w have an LF: in the subject line = even if no=20 subject is posted, so these were messages posted direct to the group = address=20 list, which is not generally available,as individual mails. There is a = command=20 for it but it is only available to the administrator.
 
Sadly the majordomo software is a bit = ancient now=20 and our version has not been updated for many years so someone may have = found a=20 vulnarability to get at the memers list.
 
Plus point...... genuine distribution = is still=20 clean !!. look for the "LF"
 
Best Wishes for Christmas
Alan
G3NYK
----- Original Message -----
From:=20 g3zjo=20
Sent: Saturday, December 24, = 2016 3:17=20 PM
Subject: Re: LF: Re: Coil = problem....Spam=20 alert!

Hi Alan

I was going to post a warning I had one today, quite convincing and = a=20 current topic too "Re: LF: SAQ Testing" with a suspicious link "qrss = doc. It=20 went to a wrong e-mail account for this group.

Eddie G3ZJO


On 24/12/2016 14:59, Alan Melia = wrote:
Hi Jeff and all members. Someone is = forging the=20 address of the group. I dont think they are distributed to the=20 group through the reflector (from my scan of the header data) = .....just=20 to individual members. So we cannot delete it, and anyway there is = no admin=20 access.
 
So....
Be cautious of incorrectly = addresses mails=20 .....it should have the senders name. Also beware of messages with a = blank=20 subject line.....a common occurance with spam
 
I received one with what looks like = a message=20 with a title ot subject quoted inside the message from several = years=20 ago. I am guessing they have farmed one of the archives......and not = very=20 well.
 
Do not access the URL under any = circumstances,=20 for someone to bother doing all this can only be a pointer to nasty=20 contents.
 
Otherwise a Happy Christmas to = all
Alan
G3NYK
 
----- Original Message ----- =
From:=20 F6CWN
To: rsgb_lf_group@blacksheep.org
Sent: Saturday, December = 24, 2016=20 2:07 PM
Subject: Re: LF: Re: Coil=20 problem

Please KILL this message (not from me!)

HNY & 73:  Jeff





Le 24/12/2016 =C3=A0 08:34, rsgb_lf_group@blacksheep.org a=20 =C3=A9crit :
"LF: Re: Coil problem"

F6CWN doc=20 =


------=_NextPart_000_0006_01D25DFE.14D4C350--