Joan, The one list where I had a pending subscription from this spammer is one that I did already have set up to require approval for new subscriptions. I'm guessing that the spammer must have done something for it to have gotten that far. I of course discarded the pending subscription once I saw it. I haven't yet gotten any notifications of successful subscriptions from the spammer, but this one pending subscription that I discarded had obviously been confirmed by the spammer -- perhaps automatically through some robot set up on their end -- or I doubt there would have been a pending subscription to handle. -- Mary On 4/27/2013 5:28 PM, JYoung6180@aol.com wrote: > Okay...here is my question. Let's say you have your list set to > automatically allow people to subscribe like most of us do. And let's say just for > the sake of argument that these apparently deliberate attempts to subscribe > to lists DO make it through and don't get blocked as non-subscriber emails or > because the address is "implicit" or because there are too many > addresses...I would still assume that these subscribe attempts are being mass > generated by an automated process and, if that is the case, has ANYONE had one of > these actually get subbed to their lists? What I'm really curious about is > the fact that a subscription attempt would generate a confirmation > email...and the spammer would then have to receive the confirmation and respond to > it to actually BE subscribed...has that been happening? > > Joan

JYoung6180@aol.com wrote: >Okay...here is my question. Let's say you have your list set to >automatically allow people to subscribe like most of us do. And >let's say just for >the sake of argument that these apparently deliberate attempts to subscribe >to lists DO make it through and don't get blocked as non-subscriber emails or > because the address is "implicit" or because there are too many >addresses...I would still assume that these subscribe attempts are >being mass >generated by an automated process and, if that is the case, has >ANYONE had one of >these actually get subbed to their lists? What I'm really curious about is >the fact that a subscription attempt would generate a confirmation >email...and the spammer would then have to receive the confirmation >and respond to >it to actually BE subscribed...has that been happening? I received one request for subscription to my most active list this morning. It was in my pending requests as I have that list on approval. I was suspicious about it and decided to wait for awhile before I approved "DatingLife". After seeing the traffic here, I simply discarded the request. I checked all my other (very inactive) lists (all set to automatic subscribe) and found nothing out of the ordinary. I do check my subscribe notices and all seem normal. Lee Hoffman/KY TMG Tips: <http://www.tmgtips.com> My website: <http://www.tmgtips.com/lhoffman> A user of the best genealogy program, The Master Genealogist (TMG)

This is what I am seeing - and whoever sent that is trying to get you to subscribe to whatever that site is. Just hit delete button. I received 2 to my admin address and once just to me. Deleted right on spot after added them to spam hit list. David Samuelsen On 4/27/2013 8:49 AM, JYoung6180@aol.com wrote: > I'm getting the ones sent to my admin address that say "subscribe now and > save..." but they are not trying to sub to the list...just using that word > in the subject for their own spam purposes. > > Joan

Okay...here is my question. Let's say you have your list set to automatically allow people to subscribe like most of us do. And let's say just for the sake of argument that these apparently deliberate attempts to subscribe to lists DO make it through and don't get blocked as non-subscriber emails or because the address is "implicit" or because there are too many addresses...I would still assume that these subscribe attempts are being mass generated by an automated process and, if that is the case, has ANYONE had one of these actually get subbed to their lists? What I'm really curious about is the fact that a subscription attempt would generate a confirmation email...and the spammer would then have to receive the confirmation and respond to it to actually BE subscribed...has that been happening? Joan In a message dated 4/27/2013 2:40:29 P.M. Eastern Daylight Time, charani.b@gmail.com writes: Wyants wrote: > I'm sure you're right, Gene, and I don't mean to drag this out, but are you > sure they were sent to your lists' subscribe addresses? Have a look at this: http://fourrabbitsblog.wordpress.com/2013/04/27/spammer-sub-request/ I've borrowed a page on the blog to show what many of us are seeing. -- Charani (UK) OPC for Walton, Ashcott, Shapwick, Greinton and Clutton, SOM http://wsom-opc.org.uk ------------------------------- To unsubscribe from the list, please send an email to LISTOWNERS-request@rootsweb.com with the word 'unsubscribe' without the quotes in the subject and the body of the message

I have no pending messages from these people to approve, only subscriptions to reject, approve, defer, reject. Janet

Wyants wrote: > I'm sure you're right, Gene, and I don't mean to drag this out, but are you > sure they were sent to your lists' subscribe addresses? These are genuine subscribe requests sent to the request address, NOT spam sent to lists by non subscribers (I don't see those anyway.) or any other kind of spam. If you haven't been hit so far, I'm sure you will be. I've had two active and two inactive lists hit so far. I'm waiting for the rest to get hit. All my lists are set for approval anyway. -- Charani (UK) OPC for Walton, Ashcott, Shapwick, Greinton and Clutton, SOM http://wsom-opc.org.uk

OK, thanks, Charani ... I see now. I must be blessed because I have had NONE of these! Only posts to my admin addresses and posts in Pending ... it's almost certainly because I don't have my lists set to approve each subscription, so this is a simple issue for me to deal with ... But it raises the question as to whether or not this is a bug in MailMan that needs to be seen to?? PSW ----- Original Message ----- From: "Charani" <charani.b@gmail.com> To: <listowners@rootsweb.com> Sent: Saturday, April 27, 2013 12:38 PM Subject: Re: [LO] Spammer subscribing. > Wyants wrote: >> I'm sure you're right, Gene, and I don't mean to drag this out, but are >> you >> sure they were sent to your lists' subscribe addresses? > > Have a look at this: > > http://fourrabbitsblog.wordpress.com/2013/04/27/spammer-sub-request/ > > I've borrowed a page on the blog to show what many of us are seeing. > > -- > Charani (UK) > OPC for Walton, Ashcott, Shapwick, > Greinton and Clutton, SOM > http://wsom-opc.org.uk > > > ------------------------------- > To unsubscribe from the list, please send an email to > LISTOWNERS-request@rootsweb.com with the word 'unsubscribe' without the > quotes in the subject and the body of the message >

I am getting them on 2 inactive lists and they are subscribe attempts, all right. Luckily I had set the two lists up for approval a while back, so none of the attempts worked. Janet On Sat, Apr 27, 2013 at 3:49 PM, <JYoung6180@aol.com> wrote: > Spammers usually send their spam as BCCs and any attempt to do that even if > it said subscribe would end up in pending requests due to the "implicit" > address. I don't even see those because I have non subscriber mail set to > discard and not hold. > > I'm getting the ones sent to my admin address that say "subscribe now and > save..." but they are not trying to sub to the list...just using that word > in the subject for their own spam purposes. > > Joan > > > In a message dated 4/27/2013 10:41:23 A.M. Eastern Daylight Time, > wyants@sasktel.net writes: > > I'm sure you're right, Gene, and I don't mean to drag this out, but are > you > sure they were sent to your lists' subscribe addresses? I have received > the > very same thing in my Pending posts and I do not have my lists set to > approve subscriptions. Mine were all sent to the List address, not the > Request address, hence their ending up in Pending ... none were > automatically subscribed ... > > PSW > > > > ------------------------------- > To unsubscribe from the list, please send an email to > LISTOWNERS-request@rootsweb.com with the word 'unsubscribe' without the > quotes in the subject and the body of the message >

I'm getting it too but as a bounce. See the following: mailman-bounces@rootsweb.com; on behalf of; Datinglife <980CF373F@adrimargs.com> which went to my admin address so it bypassed my list entirely. Cathy-0 -----Original Message----- From: listowners-bounces@rootsweb.com [mailto:listowners-bounces@rootsweb.com] On Behalf Of Charani Sent: Saturday, April 27, 2013 3:52 AM To: JYoung6180@aol.com; gnphllps@comcast.net; Listowners@rootsweb.com Subject: Re: [LO] Spammer subscribing. JYoung6180@aol.com wrote: > Gene- > > Did they SAY subscribe in either the subject or message body or were > they merely sent to the list request address? Did they actually GET subscribed? I've had a load of these as well. They are sent to the request address just like any other legitimate sub request. Thankfully my lists are all set to approval, so none of them got through. All the requests were discarded, not rejected.. The first one I got was 64F52A783C(&)affiliategoals.com (it's been munged) but the address format is similar in every instance. The subscriber's "name" is always DatingLife. I've noticed one of my junk mail folders gets at least half a dozen "dating" site scam/spam mails daily. It seems to be the latest try on. -- Charani (UK) OPC for Walton, Ashcott, Shapwick, Greinton and Clutton, SOM http://wsom-opc.org.uk ------------------------------- To unsubscribe from the list, please send an email to LISTOWNERS-request@rootsweb.com with the word 'unsubscribe' without the quotes in the subject and the body of the message

Those come in as a bounce when Mailman doesn't recognize what action to take on some of these messages from Non-Members. Perhaps others can tell you more about it, but I've seen them both as Bounces as well as those that get through to Pending messages from Non-Members awaiting action. Apparently Dating Life, needs a life. Deloris -------------------------------------------------- From: "Cathy-0" <chorn0591@optimum.net> Sent: Saturday, April 27, 2013 2:43 PM To: <Listowners@rootsweb.com> Subject: Re: [LO] Spammer subscribing. > I'm getting it too but as a bounce. See the following: > > mailman-bounces@rootsweb.com; on behalf of; Datinglife > <980CF373F@adrimargs.com> > > which went to my admin address so it bypassed my list entirely. > > Cathy-0 > > -----Original Message----- > From: listowners-bounces@rootsweb.com > [mailto:listowners-bounces@rootsweb.com] On Behalf Of Charani > Sent: Saturday, April 27, 2013 3:52 AM > To: JYoung6180@aol.com; gnphllps@comcast.net; Listowners@rootsweb.com > Subject: Re: [LO] Spammer subscribing. > > JYoung6180@aol.com wrote: >> Gene- >> >> Did they SAY subscribe in either the subject or message body or were >> they merely sent to the list request address? Did they actually GET > subscribed? > > I've had a load of these as well. They are sent to the request address > just > like any other legitimate sub request. Thankfully my lists are all set to > approval, so none of them got through. All the requests were discarded, > not > rejected.. > > The first one I got was 64F52A783C(&)affiliategoals.com (it's been > munged) but the address format is similar in every instance. The > subscriber's "name" is always DatingLife. I've noticed one of my junk > mail > folders gets at least half a dozen "dating" site scam/spam mails daily. > It > seems to be the latest try on. > > > -- > Charani (UK) > OPC for Walton, Ashcott, Shapwick, > Greinton and Clutton, SOM > http://wsom-opc.org.uk > > > ------------------------------- > To unsubscribe from the list, please send an email to > LISTOWNERS-request@rootsweb.com with the word 'unsubscribe' without the > quotes in the subject and the body of the message > > > > ------------------------------- > To unsubscribe from the list, please send an email to > LISTOWNERS-request@rootsweb.com with the word 'unsubscribe' without the > quotes in the subject and the body of the message

I saw one sub request this morning before I went out to work (it's coming up to 3pm Saturday in New Zealand as I type this), and thought the name "Datinglife" looked as dodgy as the random number in the email address supplied. But I was in a bit of a rush to get to work, so left it for when I got home this afternoon - and now there are another TWELVE requests waiting, all along the same lines - the ISP may be genuine (and I don't actually care at this point, it doesn't matter), but each address has a seemingly-random name for the email address, eg 1FAF1414C2@abusivi.com And I've got a load of spam from Datinglife, too, besides these requests to join my mailing lists, sent to the -admin addresses. They've been very busy today. And I am so glad I have all of my lists set so that I have to approve each request to join the mailing list - it is paying off in spades today. :-) Wendy JYoung6180@aol.com said the following on 27/04/2013 2:07 p.m.: > Gene- > > Did they SAY subscribe in either the subject or message body or were they > merely sent to the list request address? Did they actually GET subscribed? > > Joan > > > In a message dated 4/26/2013 9:56:48 P.M. Eastern Daylight Time, > gnphllps@comcast.net writes: > > FYI I just got 3 subscribe requests from "DatingLife" using 2 different > email addresses. I also had 2 spam messages to my admin address from the same > user name. > > Gene

Yes, I had one of these on one of my lists this morning. Several pending requests were "not a subscriber" pending requests that were sent to the list address, but one was in fact interpreted as a subscribe request as it was sent to the -request address. I had one just like what Charani shows on the blog page. I don't remember whether I have all lists set to approve subscriber requests, but I'm guessing I don't. I may temporarily set them all to approval required until this spate of spamming is over. -- Mary On 4/27/2013 2:38 PM, Charani wrote: > Wyants wrote: >> I'm sure you're right, Gene, and I don't mean to drag this out, but are you >> sure they were sent to your lists' subscribe addresses? > > Have a look at this: > > http://fourrabbitsblog.wordpress.com/2013/04/27/spammer-sub-request/ > > I've borrowed a page on the blog to show what many of us are seeing. >

Janet- This may be because you REVIEW all new subs. I don't...so I wouldn't see anything requiring approval to subscribe but they still don't seem to GET subscribed. Probably because farther down the list for MailMan to check off is the "implicit" address check or "too many" addresses the post is being sent to. So they end up in pending requests. Joan In a message dated 4/27/2013 12:28:13 P.M. Eastern Daylight Time, reojan@gmail.com writes: I have no pending messages from these people to approve, only subscriptions to reject, approve, defer, reject. Janet

But but but you will only see ONE reasons for the messages being bumped over to pending requests...whichever MailMan checks first...so there could be more than one reason. Since I have non-subscriber mail set to discard MailMan bypassed that check for my pending requests...so mine all say "implicit" address. Joan In a message dated 4/27/2013 11:07:48 A.M. Eastern Daylight Time, wyants@sasktel.net writes: Right, of course, Joan, but mine all ended up in Pending because they "weren't subscribed to the list" (hence, they were sent to the List address), not because they had an implicit address. If it had been a BCC, an "implicit address" would have been the stated reason for their having ended up in Pending ... PSW

This is crazy. My personal email got hacked earlier this week and it sent out all this spam to everyone. These people must have had a lot of time on there hands Bri Sent from my iPhone On Apr 27, 2013, at 12:25 PM, Janet Crawford <reojan@gmail.com> wrote: > I have no pending messages from these people to approve, only subscriptions > to reject, approve, defer, reject. > > Janet > > ------------------------------- > To unsubscribe from the list, please send an email to LISTOWNERS-request@rootsweb.com with the word 'unsubscribe' without the quotes in the subject and the body of the message

This is an example of what I have pending in one of my mailing lists, the attempting to subscribe addresses vary but the (Datinglife) appears in them all; they are pending subscriptions, plus the regular junk trying to be posted by non-members, and it is happening to a number of my lists; I'm eliminating the first few portions of the addresses involved so as not to trigger anything; you decide: Pending subscriptions: ......80AF0@algorytm.com.pl (Datinglife) Fri Apr 26 14:27:12 2013 Pending posts: From: .....958b@americanpatches.com on Fri Apr 26 14:56:24 2013 Subject: Subscribe Now and Save 99% Cause: Post sent by a non-member to a members-only list. From: .....jpn@wikipedia.org on Sat Apr 27 05:37:53 2013 Subject: ! LUXURY WATCHES,JEWELRY and ACCESSORIES Cause: Post sent by a non-member to a members-only list. ---------- Deloris -------------------------------------------------- From: "Wyants" <wyants@sasktel.net> Sent: Saturday, April 27, 2013 10:34 AM To: "Kathie Harrison" <harrison28@gmail.com>; "Janet Crawford" <reojan@gmail.com> Cc: "LISTOWNERS" <listowners@rootsweb.com> Subject: Re: [LO] Spammer subscribing. > Thanks, Kathy, > > this might very well be and I'm not disputing this ... I am only going on > what I see in my many(!) lists ... every Pending post I have received > reads: > > "You must first subscribe to the list in order to post. Please visit the > list > home page for subscription instructions." > >

Wyant, I'm not Gene, but believe me, as you will see from the others here, these emails are coming through the Subscription Requests, actually linked to Rootsweb, where even if you don't trust the email you can go to your Administrative page yourself and see that the address is awaiting approval. This is their new way of getting onto the lists, and everybody should be very careful of what they are approving right now. I've got a dozen more requests from several more lists since I sent my first message 5 minutes ago. Deloris -------------------------------------------------- From: "Wyants" <wyants@sasktel.net> Sent: Saturday, April 27, 2013 9:37 AM To: "Gene Phillips" <gnphllps@comcast.net>; <listowners@rootsweb.com> Subject: Re: [LO] Spammer subscribing. > I'm sure you're right, Gene, and I don't mean to drag this out, but are > you > sure they were sent to your lists' subscribe addresses? I have received > the > very same thing in my Pending posts and I do not have my lists set to > approve subscriptions. Mine were all sent to the List address, not the > Request address, hence their ending up in Pending ... none were > automatically subscribed ... > > PSW > > ----- Original Message ----- > From: "Gene Phillips" <gnphllps@comcast.net> > To: "Wyants" <wyants@sasktel.net> > Sent: Friday, April 26, 2013 8:58 PM > Subject: Re: [LO] Spammer subscribing. > > >>I have all of my lists set to approve subscriptions. I got a message for >>each list that said I had a pending subscription request for 3 lists. >>There >>was a pending subscription on each of 3 lists. >> >> Gene >> >> At 09:02 PM 4/26/2013, Wyants wrote: >>>Gene, >>> >>>are you sure these all didn't go to your admin address? That's where all >>>mine have gone ... >>> >>>Peter >>> >>>----- Original Message ----- From: "Gene Phillips" <gnphllps@comcast.net> >>>To: <Listowners@rootsweb.com> >>>Sent: Friday, April 26, 2013 7:53 PM >>>Subject: [LO] Spammer subscribing. >>> >>> >>>>FYI I just got 3 subscribe requests from "DatingLife" using 2 different >>>>email addresses. I also had 2 spam messages to my admin address from the >>>>same user name. >>>> >>>>Gene >>>> >>>> >>>>------------------------------- >>>>To unsubscribe from the list, please send an email to >>>>LISTOWNERS-request@rootsweb.com with the word 'unsubscribe' without the >>>>quotes in the subject and the body of the message >> > > > ------------------------------- > To unsubscribe from the list, please send an email to > LISTOWNERS-request@rootsweb.com with the word 'unsubscribe' without the > quotes in the subject and the body of the message

That's exactly the kinds of addresses they've been sending. They all start with a series of number & letters, then end with non-sensical things like "affiliate......com." or "hostel.....com", but with the words "Dating Life" included as the subscriber. One has to make sure they look at those emails for approval which give the additional details with the subscribers "name" to make sure it isn't one of these spammers. So far, every single Request Approval I've seen these past 2 days from my lists have been from these spammers. Luckily, all of my lists are set for me to approve, so they don't get onto the lists. Deloris -------------------------------------------------- From: "Charani" <charani.b@gmail.com> Sent: Saturday, April 27, 2013 2:52 AM To: <JYoung6180@aol.com>; <gnphllps@comcast.net>; <Listowners@rootsweb.com> Subject: Re: [LO] Spammer subscribing. > JYoung6180@aol.com wrote: >> Gene- >> >> Did they SAY subscribe in either the subject or message body or were they >> merely sent to the list request address? Did they actually GET >> subscribed? > > I've had a load of these as well. They are sent to the request > address just like any other legitimate sub request. Thankfully my > lists are all set to approval, so none of them got through. All the > requests were discarded, not rejected.. > > The first one I got was 64F52A783C(&)affiliategoals.com (it's been > munged) but the address format is similar in every instance. The > subscriber's "name" is always DatingLife. I've noticed one of my junk > mail folders gets at least half a dozen "dating" site scam/spam mails > daily. It seems to be the latest try on. > > > -- > Charani (UK) > OPC for Walton, Ashcott, Shapwick, > Greinton and Clutton, SOM > http://wsom-opc.org.uk > > > ------------------------------- > To unsubscribe from the list, please send an email to > LISTOWNERS-request@rootsweb.com with the word 'unsubscribe' without the > quotes in the subject and the body of the message

I've also been getting a variety of Subscription requests to about 7 of my Mailing List Request addresses these past few days from addresses I've recognized as spammers. Not too many people have addresses that end in "Dating Life" using several different email addresses, at that. I've put all of my lists for Request Approval to come to me. This seems to be their latest idea way of spamming the lists. Deloris -------------------------------------------------- From: <JYoung6180@aol.com> Sent: Saturday, April 27, 2013 1:36 AM To: <mdtaffet@twcny.rr.com> Cc: <Listowners@rootsweb.com> Subject: Re: [LO] Spammer subscribing. > Mary- > > Oh...this has happened occasionally in the past where the spammer includes > the word SUBSCRIBE as a part of the SPAM which isn't directly intended to > subscribe to our lists but ends up GETTING subscribed because they used > that > word. > > Joan > > > In a message dated 4/26/2013 11:37:37 P.M. Eastern Daylight Time, > mdtaffet@twcny.rr.com writes: > > Joan, > > The spam related to this that has come to my -admin address does include > the word "subscribe" in the message body, as part of their spam, which > says something like "subscribe now and save ...". > > So far they've only come to my various -admin addresses. > > -- Mary > > > > ------------------------------- > To unsubscribe from the list, please send an email to > LISTOWNERS-request@rootsweb.com with the word 'unsubscribe' without the > quotes in the subject and the body of the message

Spammers usually send their spam as BCCs and any attempt to do that even if it said subscribe would end up in pending requests due to the "implicit" address. I don't even see those because I have non subscriber mail set to discard and not hold. I'm getting the ones sent to my admin address that say "subscribe now and save..." but they are not trying to sub to the list...just using that word in the subject for their own spam purposes. Joan In a message dated 4/27/2013 10:41:23 A.M. Eastern Daylight Time, wyants@sasktel.net writes: I'm sure you're right, Gene, and I don't mean to drag this out, but are you sure they were sent to your lists' subscribe addresses? I have received the very same thing in my Pending posts and I do not have my lists set to approve subscriptions. Mine were all sent to the List address, not the Request address, hence their ending up in Pending ... none were automatically subscribed ... PSW