Yes Yes Yes...and this spam wasn't sent deliberately. It is the result of an account being hacked/compromised -- the list admin should put the address on moderated status and initiate removal of the spam from the list archives and also request removal of the LO post that quoted the spam. Then after completing the removal of their own post (responding to the email notice) the HelpDesk should be notified to complete removal of the original spam message from that list's archives. Joan In a message dated 4/1/2012 11:29:11 A.M. Eastern Daylight Time, popsjackson@charter.net writes: Please let this be a reminder to DELETE the offending links before sending a message to this or any list.
Please let this be a reminder to DELETE the offending links before sending a message to this or any list. -----Original Message----- From: listowners-bounces@rootsweb.com [mailto:listowners-bounces@rootsweb.com] On Behalf Of John Halsey Flannery Sent: Sunday, April 01, 2012 11:23 AM To: LISTOWNERS@rootsweb.com Subject: [LO] A new spammer? Hi Folks: Is this a new spammer? I'm the listowner for the FLANARY & FLANNERY Mailing Lists. The poster of the message below is subscribed to both of these lists. I've tried unsubbing the poster, but the poster simply resubs. I tried moderating the poster, but the message below went directly to the FLANARY list. How do I add the poster to the Ban list? Halsey [message] From: llrich1144@aol.com Precedence: list Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit To: cashcraft@potawatomi.org, drich@nts-online.net, foxybee10@verizon.net, flanary@rootsweb.com, carlota@rotorooterconcord.com, tbow0260@aol.com, coolmissel@hotmail.com Date: Sat, 31 Mar 2012 13:37:53 -0400 (EDT) Reply-To: flanary@rootsweb.com Message-ID: <8CEDD7C2287FCAB-1EA0-BEF@webmail-d143.sysops.aol.com> Subject: Re: [FLANARY] o Message: 1 X-Mime-Autoconverted: from 8bit to 7bit by reformime (rfc2045lib 0.20) (Snipped for security's sake) [end message]
Hi Folks: Is this a new spammer? I’m the listowner for the FLANARY & FLANNERY Mailing Lists. The poster of the message below is subscribed to both of these lists. I’ve tried unsubbing the poster, but the poster simply resubs. I tried moderating the poster, but the message below went directly to the FLANARY list. How do I add the poster to the Ban list? Halsey [message] From: llrich1144@aol.com Precedence: list Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit To: cashcraft@potawatomi.org, drich@nts-online.net, foxybee10@verizon.net, flanary@rootsweb.com, carlota@rotorooterconcord.com, tbow0260@aol.com, coolmissel@hotmail.com Date: Sat, 31 Mar 2012 13:37:53 -0400 (EDT) Reply-To: flanary@rootsweb.com Message-ID: <8CEDD7C2287FCAB-1EA0-BEF@webmail-d143.sysops.aol.com> Subject: Re: [FLANARY] o Message: 1 X-Mime-Autoconverted: from 8bit to 7bit by reformime (rfc2045lib 0.20) .. http://autocabco.com/yourdiscountcode-health99.html?waID=65ezy [end message]
And the significance of that to this list is . . . ? Lynne >The very first message I received on a RootsWeb list to which I >subscribe, but do not admin, that was about the 1940 Census, contained >significantly erroneous information. > >Further say I naught. > >Darrell
Greetings: The very first message I received on a RootsWeb list to which I subscribe, but do not admin, that was about the 1940 Census, contained significantly erroneous information. Further say I naught. Darrell
Sign up for 'My Account' there you will find access to all your rootsweb activities including lists you admin and lists you belong too. https://myaccount.rootsweb.com/signin Or use Password Central. http://passwordcentral.rootsweb.ancestry.com/ However, My Account is better. Joan Asche On Wed, Mar 28, 2012 at 12:15 PM, <Barbraseb@wmconnect.com> wrote: > Could someone please tell me how to get into my mailing lists as admin? > > Thanks.</HTML> > > ------------------------------- > To unsubscribe from the list, please send an email to LISTOWNERS-request@rootsweb.com with the word 'unsubscribe' without the quotes in the subject and the body of the message
Could someone please tell me how to get into my mailing lists as admin? Thanks.</HTML>
JYoung6180@aol.com wrote: >I would delete it because you know it isn't a valid request/address. >It could be spam directed to many addresses and coming FROM a >forged/spoofed RootsWeb address that accidentally appears to be an >attempt to subscribe. Thanks, Joan. That was my initial thought. But, I thought I'd see if there was a way-off chance that staff was using it for some reason. If it had been "staff" or something that could be seen as being used for test purposes, I might have just gone ahead and done my usual approve and moderate. But, it was so off the wall that I wanted a little back-up to my thinking. Plus, I figured it might hit some other list as well, and my question would be a heads up for other Admins. It blows my mind that people spend their time thinking up these things. Maybe they want someone else to suffer for the work they have to go through to do this kind of thing. Lee Hoffman/KY TMG Tips: <http://www.tmgtips.com> My website: <http://www.tmgtips.com/lhoffman> A user of the best genealogy program, The Master Genealogist (TMG)
I would delete it because you know it isn't a valid request/address. It could be spam directed to many addresses and coming FROM a forged/spoofed RootsWeb address that accidentally appears to be an attempt to subscribe. Joan In a message dated 3/27/2012 6:48:56 P.M. Eastern Daylight Time, lhoffman@acm.org writes: Hi Joan -- You wrote: >Is this in your pending requests or where did you see it--did it >come to you in an email? If you can view the full headers that might >be helpful in determining what is going on here. No, this is in pending requests, so no headers are available.. Lee Hoffman/KY TMG Tips: <http://www.tmgtips.com> My website: <http://www.tmgtips.com/lhoffman> A user of the best genealogy program, The Master Genealogist (TMG) ------------------------------- To unsubscribe from the list, please send an email to LISTOWNERS-request@rootsweb.com with the word 'unsubscribe' without the quotes in the subject and the body of the message
Hi Joan -- You wrote: >Is this in your pending requests or where did you see it--did it >come to you in an email? If you can view the full headers that might >be helpful in determining what is going on here. No, this is in pending requests, so no headers are available.. Lee Hoffman/KY TMG Tips: <http://www.tmgtips.com> My website: <http://www.tmgtips.com/lhoffman> A user of the best genealogy program, The Master Genealogist (TMG)
Lee- Is this in your pending requests or where did you see it--did it come to you in an email? If you can view the full headers that might be helpful in determining what is going on here. Joan In a message dated 3/27/2012 6:27:32 P.M. Eastern Daylight Time, lhoffman@acm.org writes: I just received notice that <Content-Type@lists2.rootsweb.com> was requesting to subscribe to one of my lists which is located on the list2 server. Normally, I would approve a suspicious address and place it on moderation until the first posting or so. But this does not even appear to be a valid address unless staff is using this for some reason (doubtful). Should I just discard this request, Reject it, or do the usual (approve and moderate)? Lee Hoffman/KY TMG Tips: <http://www.tmgtips.com> My website: <http://www.tmgtips.com/lhoffman> A user of the best genealogy program, The Master Genealogist (TMG)
I think I would approve and moderate...I prefer not to be suspicious by nature...but there is no "down side" to approve and moderate... -David Reed List Administrator: MAINE, NEW-ENG-GEN, MELINCOL (Maine, Lincoln County), ME-IRISH, CEMETERIES-HISTORIC-PRESERVATION, MARIN --------------------------------------------- "Actually, there is only one 'first question' of government, and it is "How should we live?" or "What kind of people do we want our citizens to be?" - George F. Will (1941-), American political commentator Please consider the environment before printing this e-mail. -----Original Message----- From: listowners-bounces@rootsweb.com [mailto:listowners-bounces@rootsweb.com] On Behalf Of Lee Hoffman Sent: Tuesday, March 27, 2012 6:22 PM To: List Owners List Subject: [LO] Odd subscriber? I just received notice that <Content-Type@lists2.rootsweb.com> was requesting to subscribe to one of my lists which is located on the list2 server. Normally, I would approve a suspicious address and place it on moderation until the first posting or so. But this does not even appear to be a valid address unless staff is using this for some reason (doubtful). Should I just discard this request, Reject it, or do the usual (approve and moderate)? Lee Hoffman/KY TMG Tips: <http://www.tmgtips.com> My website: <http://www.tmgtips.com/lhoffman> A user of the best genealogy program, The Master Genealogist (TMG) ------------------------------- To unsubscribe from the list, please send an email to LISTOWNERS-request@rootsweb.com with the word 'unsubscribe' without the quotes in the subject and the body of the message
I just received notice that <Content-Type@lists2.rootsweb.com> was requesting to subscribe to one of my lists which is located on the list2 server. Normally, I would approve a suspicious address and place it on moderation until the first posting or so. But this does not even appear to be a valid address unless staff is using this for some reason (doubtful). Should I just discard this request, Reject it, or do the usual (approve and moderate)? Lee Hoffman/KY TMG Tips: <http://www.tmgtips.com> My website: <http://www.tmgtips.com/lhoffman> A user of the best genealogy program, The Master Genealogist (TMG)
I received the same request on one of my lists. I was suspicious so I deleted the request. MAL ________________________________ From: Lee Hoffman <lhoffman@acm.org> To: List Owners List <Listowners-L@rootsweb.com> Sent: Tuesday, March 27, 2012 6:21 PM Subject: [LO] Odd subscriber? I just received notice that <Content-Type@lists2.rootsweb.com> was requesting to subscribe to one of my lists which is located on the list2 server. Normally, I would approve a suspicious address and place it on moderation until the first posting or so. But this does not even appear to be a valid address unless staff is using this for some reason (doubtful). Should I just discard this request, Reject it, or do the usual (approve and moderate)? Lee Hoffman/KY TMG Tips: <http://www.tmgtips.com> My website: <http://www.tmgtips.com/lhoffman> A user of the best genealogy program, The Master Genealogist (TMG)
Yes, you approved the spam accidentally in pending requests. There is a header field that shows this: > X-Mailman-Approved-At: Thu, 22 Mar 2012 08:07:21 -0600 The "approved" field is not there unless the message is approved by the admin from pending requests. Joan In a message dated 3/22/2012 12:23:25 P.M. Eastern Daylight Time, wyants@sasktel.net writes: Ooops ... really?? That's not good if that's what I did! Thanks, PSW
Ooops ... really?? That's not good if that's what I did! Thanks, PSW On Thu, 22 Mar 2012 09:42:55 -0600, wyants@sasktel.net wrote: > > Folks, > > this piece of S*P*A"M was sent to my SUFFOLK List earlier today: > > http://archiver.rootsweb.ancestry.com/th/read/SUFFOLK/2012-03/1332338836 > > The address given is not subscribed to the List and hasn't been > unsubscribed since the post. I also can't find anything like the > given address in the List's subscriber's list, and it looks like this > post was blind-copied to the SUFFOLK List. The full headers are > below. Any suggestions on how this occurred?? > > Thanks, > Peter > > ------------------------------------------------------------------------------------- > > X-Spam-Flag: NO > X-Envelope-From: suffolk-bounces@rootsweb.com > Return-Path: <suffolk-bounces@rootsweb.com> > Received: from lists2.rootsweb.com (lists2.rootsweb.com > [66.43.28.157]) by mail125c7.megamailservers.com (8.13.6/8.13.1) with > ESMTP id q2MECYPF012797 for ; Thu, 22 Mar 2012 10:12:42 -0400 > Received: from lists2.rootsweb.com (lists2.rootsweb.com [127.0.0.1]) > by lists2.rootsweb.com (8.13.8/8.13.8) with ESMTP id q2ME9nf7022711 > for ; Thu, 22 Mar 2012 08:12:33 -0600 > Received: from mail3.rootsweb.com (mail3.rootsweb.com > [192.168.26.64]) by lists2.rootsweb.com (8.13.8/8.13.8) with ESMTP id > q2LFCfYH002684; Wed, 21 Mar 2012 09:12:41 -0600 > Received: from mail.rootsweb.com (mail.rootsweb.com [192.168.26.52]) > by mail3.rootsweb.com (8.13.8/8.13.8) with ESMTP id q2LFCfYi012248; > Wed, 21 Mar 2012 09:12:41 -0600 > Received: from eh7lznhfhdu00.net ([95.59.209.171]) by > mail.rootsweb.com (8.13.8/8.13.8) with SMTP id q2LFAnjq021703; Wed, > 21 Mar 2012 09:12:29 -0600 > MIME-Version: 1.0 > From: "Allison Lise" <isabellemichele@acadian.com> > Date: Wed, 21 Mar 2012 17:07:16 +0300 > Message-ID: 32g14j45y11-30044333-966x2n93@nkawpeodfs > To: <ohmeigs-l@rootsweb.com> > X-Spam-Score: 5.712 (*****) FB_QUALITY_REPLICA,RDNS_NONE > X-Scanned-By: MIMEDefang 2.68 on 192.168.26.64 > X-Mailman-Approved-At: Thu, 22 Mar 2012 08:07:21 -0600 > Subject: [SFK-UK] We promise that youll be thrilled with every bag > you buy from us, or your money back. n6jso12 > X-BeenThere: suffolk@rootsweb.com > X-Mailman-Version: 2.1.7 > Precedence: list > Reply-To: suffolk@rootsweb.com > List-Id: <suffolk@rootsweb.com> > X-Loop: SUFFOLK@rootsweb.com > X-Member: SUFFOLK@rootsweb.com > List-Unsubscribe: > <http://lists2.rootsweb.ancestry.com/mailman/listinfo/suffolk>, > <mailto:suffolk-request@rootsweb.com?subject=unsubscribe> > List-Archive: <http://archiver.rootsweb.ancestry.com/th/index?list=suffolk> > List-Post: <mailto:suffolk@rootsweb.com> > List-Help: <mailto:suffolk-request@rootsweb.com?subject=help> > List-Subscribe: > <http://lists2.rootsweb.ancestry.com/mailman/listinfo/suffolk>, > <mailto:suffolk-request@rootsweb.com?subject=subscribe> > Content-Type: multipart/mixed; boundary="===============1320566738==" > Sender: suffolk-bounces@rootsweb.com > Errors-To: s+-uffolk-bounce+wyants=sasktel.net@rootsweb.comX-MMR: 0 > X-CSC: 100 > X-CHA: v=1.1 cv=W3g0I3SDG+MdzbENaGTEDA5xc5bXfFJ5+E7NkWLfVrY= c=1 sm=1 > p=hqxyWNfjAAAA:8 p=ih9Oc1jbT7Mpo0j9lvUA:9 p=twndu_3ZYbB6EOmeoIQA:7 > p=1C0jAD4HJvhRsJy1:21 p=aq1CljpcFSCEH9fM:21 a=Z-2YdJlMOrwA:10 > a=6xM3TI-DiskA:10 a=mQsX4_zo9-EA:10 a=jKecjdWMqH3bozmjGTaitA==:17 > a=QEXdDO2ut3YA:10 a=ixjGs0MFAAAA:8 a=3sgKUIb8hK4iIHlDYIoA:9 > a=bPRLD4P5pdqbu9tKZjIA:7 a=CjuIK1q_8ugA:10 a=Xg3YYBZn_wkA:10 > a=Dy8l5IYJyXoA:10 a=jKecjdWMqH3bozmjGTaitA==:117 > X-WHL: SLR >
Folks, this piece of S*P*A"M was sent to my SUFFOLK List earlier today: http://archiver.rootsweb.ancestry.com/th/read/SUFFOLK/2012-03/1332338836 The address given is not subscribed to the List and hasn't been unsubscribed since the post. I also can't find anything like the given address in the List's subscriber's list, and it looks like this post was blind-copied to the SUFFOLK List. The full headers are below. Any suggestions on how this occurred?? Thanks, Peter ------------------------------------------------------------------------------------- X-Spam-Flag: NO X-Envelope-From: suffolk-bounces@rootsweb.com Return-Path: <suffolk-bounces@rootsweb.com> Received: from lists2.rootsweb.com (lists2.rootsweb.com [66.43.28.157]) by mail125c7.megamailservers.com (8.13.6/8.13.1) with ESMTP id q2MECYPF012797 for ; Thu, 22 Mar 2012 10:12:42 -0400 Received: from lists2.rootsweb.com (lists2.rootsweb.com [127.0.0.1]) by lists2.rootsweb.com (8.13.8/8.13.8) with ESMTP id q2ME9nf7022711 for ; Thu, 22 Mar 2012 08:12:33 -0600 Received: from mail3.rootsweb.com (mail3.rootsweb.com [192.168.26.64]) by lists2.rootsweb.com (8.13.8/8.13.8) with ESMTP id q2LFCfYH002684; Wed, 21 Mar 2012 09:12:41 -0600 Received: from mail.rootsweb.com (mail.rootsweb.com [192.168.26.52]) by mail3.rootsweb.com (8.13.8/8.13.8) with ESMTP id q2LFCfYi012248; Wed, 21 Mar 2012 09:12:41 -0600 Received: from eh7lznhfhdu00.net ([95.59.209.171]) by mail.rootsweb.com (8.13.8/8.13.8) with SMTP id q2LFAnjq021703; Wed, 21 Mar 2012 09:12:29 -0600 MIME-Version: 1.0 From: "Allison Lise" <isabellemichele@acadian.com> Date: Wed, 21 Mar 2012 17:07:16 +0300 Message-ID: 32g14j45y11-30044333-966x2n93@nkawpeodfs To: <ohmeigs-l@rootsweb.com> X-Spam-Score: 5.712 (*****) FB_QUALITY_REPLICA,RDNS_NONE X-Scanned-By: MIMEDefang 2.68 on 192.168.26.64 X-Mailman-Approved-At: Thu, 22 Mar 2012 08:07:21 -0600 Subject: [SFK-UK] We promise that youll be thrilled with every bag you buy from us, or your money back. n6jso12 X-BeenThere: suffolk@rootsweb.com X-Mailman-Version: 2.1.7 Precedence: list Reply-To: suffolk@rootsweb.com List-Id: <suffolk@rootsweb.com> X-Loop: SUFFOLK@rootsweb.com X-Member: SUFFOLK@rootsweb.com List-Unsubscribe: <http://lists2.rootsweb.ancestry.com/mailman/listinfo/suffolk>, <mailto:suffolk-request@rootsweb.com?subject=unsubscribe> List-Archive: <http://archiver.rootsweb.ancestry.com/th/index?list=suffolk> List-Post: <mailto:suffolk@rootsweb.com> List-Help: <mailto:suffolk-request@rootsweb.com?subject=help> List-Subscribe: <http://lists2.rootsweb.ancestry.com/mailman/listinfo/suffolk>, <mailto:suffolk-request@rootsweb.com?subject=subscribe> Content-Type: multipart/mixed; boundary="===============1320566738==" Sender: suffolk-bounces@rootsweb.com Errors-To: s+-uffolk-bounce+wyants=sasktel.net@rootsweb.comX-MMR: 0 X-CSC: 100 X-CHA: v=1.1 cv=W3g0I3SDG+MdzbENaGTEDA5xc5bXfFJ5+E7NkWLfVrY= c=1 sm=1 p=hqxyWNfjAAAA:8 p=ih9Oc1jbT7Mpo0j9lvUA:9 p=twndu_3ZYbB6EOmeoIQA:7 p=1C0jAD4HJvhRsJy1:21 p=aq1CljpcFSCEH9fM:21 a=Z-2YdJlMOrwA:10 a=6xM3TI-DiskA:10 a=mQsX4_zo9-EA:10 a=jKecjdWMqH3bozmjGTaitA==:17 a=QEXdDO2ut3YA:10 a=ixjGs0MFAAAA:8 a=3sgKUIb8hK4iIHlDYIoA:9 a=bPRLD4P5pdqbu9tKZjIA:7 a=CjuIK1q_8ugA:10 a=Xg3YYBZn_wkA:10 a=Dy8l5IYJyXoA:10 a=jKecjdWMqH3bozmjGTaitA==:117 X-WHL: SLR
Are you highlighting the name and then REMOVING it and THEN submitting the changes? That should remove it. HOWEVER, that said...there is NOTHING that should stop you from manually subscribing the director even if his address IS on the ban list. It will prevent him subscribing via email but NOT from being added manually by the list admin. Joan In a message dated 3/21/2012 7:44:58 P.M. Eastern Daylight Time, gftl@bluemarble.net writes: I've been the list owner of the INMONROE for the past 11 years and never knew there was a ban list. Now the new director of the Monroe County History Center wants to subscribe to the list, but all of our combined efforts have failed. Finally I asked the help desk and was advised that the director's e-mail address was on the ban list. And sure enough, it is there, but I can't seem to delete it. I highlight the name, click to delete it, and click on "Submit Your Changes." This brings up a screen that starts with the big word "Error" in red and then all the names on the ban list in black. When I try to search for the e-mail address on this page, the page switches back to the opening page for the Ban List. What in the world am I doing wrong?? Randi
Paul- Not everyone has gc-gateway on the ban list. Might want to just remove everything from the ban list and start fresh. Joan In a message dated 3/21/2012 8:08:00 P.M. Eastern Daylight Time, pleblan@aim.com writes: Hi After 11 years, I think I would do away with the entire ban list. The only thing in it should be ^gc-gateway@rootsweb.com to allow you to review the entries from the companion board. Did you delete the line you want removed or just make it blank. If there are there two ^^ you just want one. Do you have each entry on the ban list and start it with a ^. Paul
Hi After 11 years, I think I would do away with the entire ban list. The only thing in it should be ^gc-gateway@rootsweb.com to allow you to review the entries from the companion board. Did you delete the line you want removed or just make it blank. If there are there two ^^ you just want one. Do you have each entry on the ban list and start it with a ^. Paul -----Original Message----- From: Randi I've been the list owner of the INMONROE for the past 11 years and never new there was a ban list. Now the new director of the Monroe County istory Center wants to subscribe to the list, but all of our combined fforts have failed. Finally I asked the help desk and was advised that the irector's e-mail address was on the ban list. And sure enough, it is here, but I can't seem to delete it. I highlight the name, click to delete it, and click on "Submit Your hanges." This brings up a screen that starts with the big word "Error" in ed and then all the names on the ban list in black. When I try to search or the e-mail address on this page, the page switches back to the opening age for the Ban List. What in the world am I doing wrong?? Randi ------------------------------ o unsubscribe from the list, please send an email to LISTOWNERS-request@rootsweb.com ith the word 'unsubscribe' without the quotes in the subject and the body of he message