just blacklist kellyjack1776@Yahoo.com if you have Mailwasher to work side by side. I had no problem flushing this one out into blacklist. It is a spammer. No honest person can pull it off. I got all 20 lists and it is repeating. So far, none got to the list because every one had -admin". W. David Samuelsen On 7/29/2012 1:29 PM, Deloris Williams wrote: > Looks to me that someone has nothing better to do this weekend so they > somehow gathered all of the Administrator email addresses and the Request > subscribe addresses and started spamming all of us. The emails are not > coming through with any single individuals name, while they mostly seem to > say "kellyjack1776..." the names attached to that supposed address are all > different. It could be that someone has found a new way of launching spam > and bypassing the actual mailing lists.

Sharon- This is a Yahoo address and on MY end I have that auto add thing shut off. If the Yahoo address for this Kelly isn't subscribed (and never was--can't say one way or the other) to my lists...auto-add wouldn't be a factor even if Yahoo emails do that (not sure if they do or not). Joan In a message dated 7/29/2012 4:44:45 P.M. Eastern Daylight Time, DULCICH6@aol.com writes: Joan, Remember that if the subscriber is an AOLer that the default is for your (private) address to be auto added to their address book. That is what I have experienced any way when list directed spam comes to my private address. Sharon

Joan, Remember that if the subscriber is an AOLer that the default is for your (private) address to be auto added to their address book. That is what I have experienced any way when list directed spam comes to my private address. Sharon In a message dated 7/29/2012 1:27:32 P.M. Pacific Daylight Time, del_williams@comcast.net writes: I would have thought that also had I received the spam at my admin addresses FIRST...but I received it first at my personal email address and that is pretty rare for me to get spam at BOTH my private AND admin addresses unless it is from someone somehow connected to my lists...but I do have to correct myself. I made the ASSumption that Kelly was subscribed to my lists...but as of this afternoon that isn't the case. So I guess anything is possible.

Deloris- I would have thought that also had I received the spam at my admin addresses FIRST...but I received it first at my personal email address and that is pretty rare for me to get spam at BOTH my private AND admin addresses unless it is from someone somehow connected to my lists...but I do have to correct myself. I made the ASSumption that Kelly was subscribed to my lists...but as of this afternoon that isn't the case. So I guess anything is possible. Joan In a message dated 7/29/2012 12:59:58 P.M. Eastern Daylight Time, del_williams@comcast.net writes: I've seen this also for most of my lists, but only to the Administrators address. Since I rarely get email from anyone on the adm. address, I believe it is someone who has harvested all of the adm. addresses rather than from someone's hijacked account. I just delete them right along with any other junk mail. Deloris

Hmmm.... I don't know what's going on then. The spammers are getting more sophisticated with the types of emails being sent out to us and they are especially busy this weekend. The other type of messages I've been getting today are to 2 of my web email accounts; the messages claim they are from my web mail servers telling me that I need to upgrade my accounts because my messages have gone over the allowed limit, so of course they ask you to "confirm" your password & user name in the email and reply to their message. Aside from the fact that I don't read my email online in the first place since it comes into my email client, I always ignore & delete that kind of crap anyway. Deloris From: JYoung6180@aol.com Sent: Sunday, July 29, 2012 2:49 PM To: del_williams@comcast.net ; listowners@rootsweb.com Subject: Re: [LO] Political and Religious hate mail coming to my adminaddresses... Deloris- I would have thought that also had I received the spam at my admin addresses FIRST...but I received it first at my personal email address and that is pretty rare for me to get spam at BOTH my private AND admin addresses unless it is from someone somehow connected to my lists...but I do have to correct myself. I made the ASSumption that Kelly was subscribed to my lists...but as of this afternoon that isn't the case. So I guess anything is possible. Joan In a message dated 7/29/2012 12:59:58 P.M. Eastern Daylight Time, del_williams@comcast.net writes: I've seen this also for most of my lists, but only to the Administrators address. Since I rarely get email from anyone on the adm. address, I believe it is someone who has harvested all of the adm. addresses rather than from someone's hijacked account. I just delete them right along with any other junk mail. Deloris

Joan, et al, I have received only 9 of these so far today, but although every one of them purports to be from KellyJack1776@Yahoo.com every single one has a different individuals name in the from line of the full headers. They have all come to my admin addresses although several must be blind cc'd. None seem to be subb'ed to my lists. All of those that came to me are definitely coming thru RW. My delete key is getting a good workout! Sharon Dulcich In a message dated 7/29/2012 9:16:45 A.M. Pacific Daylight Time, JYoung6180@aol.com writes: ...from a list subscriber to many of my lists. I don't know if any of the rest of you have received the blistering hate mail (both political and anti-Islam religious garbage) from a gal named "Kelly" who apparently subs to MANY RootsWeb lists and has the admin addresses (and my private email address) in her address book and then sends out a ton of these hate messages to everyone in her address book.

Looks to me that someone has nothing better to do this weekend so they somehow gathered all of the Administrator email addresses and the Request subscribe addresses and started spamming all of us. The emails are not coming through with any single individuals name, while they mostly seem to say "kellyjack1776..." the names attached to that supposed address are all different. It could be that someone has found a new way of launching spam and bypassing the actual mailing lists. Deloris Williams -------------------------------------------------- From: <DULCICH6@aol.com> Sent: Sunday, July 29, 2012 2:00 PM To: <Listowners@rootsweb.com> Subject: Re: [LO] Political and Religious hate mail coming to my adminaddresses... > > Joan, et al, > > I have received only 9 of these so far today, but although every one of > them purports to be from KellyJack1776@Yahoo.com every single one has a > different individuals name in the from line of the full headers. They have > all > come to my admin addresses although several must be blind cc'd. None seem > to > be subb'ed to my lists. All of those that came to me are definitely > coming > thru RW. My delete key is getting a good workout! > > > Sharon Dulcich > > > > > > In a message dated 7/29/2012 9:16:45 A.M. Pacific Daylight Time, > JYoung6180@aol.com writes: > > ...from a list subscriber to many of my lists. I don't know if any of the > rest of you have received the blistering hate mail (both political and > anti-Islam religious garbage) from a gal named "Kelly" who apparently > subs > to > MANY RootsWeb lists and has the admin addresses (and my private email > address) in her address book and then sends out a ton of these hate > messages to > everyone in her address book. > > > > ------------------------------- > To unsubscribe from the list, please send an email to > LISTOWNERS-request@rootsweb.com with the word 'unsubscribe' without the > quotes in the subject and the body of the message

I've gotten a massive amount from admin and request addresses of this same email PLUS a bunch from 'Order" or "RE-order" which I haven't opened the first one of. Frankly Joan I'm getting really sick of the amounts of spam and crappy email we get just because we're list admins. I have seriously considered dropping every one of them just to stop some of it. Rootsweb REALLY needs to do something/anything toward controlling this better. Joyce Gaston Reece -----Original Message----- From: JYoung6180@aol.com Sent: Sunday, July 29, 2012 12:09 PM To: listowners@rootsweb.com Subject: [LO] Political and Religious hate mail coming to my adminaddresses... ...from a list subscriber to many of my lists. I don't know if any of the rest of you have received the blistering hate mail (both political and anti-Islam religious garbage) from a gal named "Kelly" who apparently subs to MANY RootsWeb lists and has the admin addresses (and my private email address) in her address book and then sends out a ton of these hate messages to everyone in her address book. I've written to her telling her to cease and desist from sending this crap or I'd unsub from the lists I admin and ban her from rejoining. I haven't as yet received a reply but since I'm getting this at a vast number of my admin addresses I have to assume that other admins are also getting it. I've notified listmaster in case he feels other action is needed -- my main reason for posting to listowners-L is that this mail had me puzzled at first as to who this "Kelly" was because the first onslaught of the hate mail came to my PRIVATE email address. It wasn't until this morning that the mail started also hitting many of my admin addresses that it dawned on me the connection was that she subbed to the lists. Joan ------------------------------- To unsubscribe from the list, please send an email to LISTOWNERS-request@rootsweb.com with the word 'unsubscribe' without the quotes in the subject and the body of the message

Can someone confirm they are coming to our admin addresses (and thus through RW), please? That could easily explain the sheer volume, but I checked before reporting them all to my ISP and have seen no mention or anything to lead me to conclude they are coming through RW. If such is the case, then I need to report it to RW abuse instead of EarthLink. Thanks. David E. Cann decann@infionline.net -----Original Message----- From: listowners-bounces@rootsweb.com [mailto:listowners-bounces@rootsweb.com] On Behalf Of Deloris Williams Sent: Sunday, July 29, 2012 12:58 PM To: listowners@rootsweb.com Subject: Re: [LO] Political and Religious hate mail coming to my adminaddresses... I've seen this also for most of my lists, but only to the Administrators address. Since I rarely get email from anyone on the adm. address, I believe it is someone who has harvested all of the adm. addresses rather than from someone's hijacked account. I just delete them right along with any other junk mail. Deloris <snip>

I may be wrong but I believe the OTHER addresses are ones she had in her list of TO and CC addressses--they are just responding to ALL. At least that is happening with the mail she sent to my private email address. Joan In a message dated 7/29/2012 12:25:10 P.M. Eastern Daylight Time, wyants@sasktel.net writes: Joan, I have also received this to ALL of my lists (60+) but only to the admin addresses. It is not only coming from "kellyjack1776" but from other addresses as well. The address(es) being used are NOT subbed to any of my lists. It IS s*p*a*m but NOT your garden variety in that it is being sent from the author of the book being advertised in order to increase sales of the book. It IS a real book and is available from Amazon.com for "only" $US 9.99. You can find it by searching for "How Fatima Started Islam", but the reviews ain't very good!! PSW

...from a list subscriber to many of my lists. I don't know if any of the rest of you have received the blistering hate mail (both political and anti-Islam religious garbage) from a gal named "Kelly" who apparently subs to MANY RootsWeb lists and has the admin addresses (and my private email address) in her address book and then sends out a ton of these hate messages to everyone in her address book. I've written to her telling her to cease and desist from sending this crap or I'd unsub from the lists I admin and ban her from rejoining. I haven't as yet received a reply but since I'm getting this at a vast number of my admin addresses I have to assume that other admins are also getting it. I've notified listmaster in case he feels other action is needed -- my main reason for posting to listowners-L is that this mail had me puzzled at first as to who this "Kelly" was because the first onslaught of the hate mail came to my PRIVATE email address. It wasn't until this morning that the mail started also hitting many of my admin addresses that it dawned on me the connection was that she subbed to the lists. Joan

I've seen this also for most of my lists, but only to the Administrators address. Since I rarely get email from anyone on the adm. address, I believe it is someone who has harvested all of the adm. addresses rather than from someone's hijacked account. I just delete them right along with any other junk mail. Deloris -------------------------------------------------- From: <JYoung6180@aol.com> Sent: Sunday, July 29, 2012 11:09 AM To: <listowners@rootsweb.com> Subject: [LO] Political and Religious hate mail coming to my adminaddresses... > ...from a list subscriber to many of my lists. I don't know if any of the > rest of you have received the blistering hate mail (both political and > anti-Islam religious garbage) from a gal named "Kelly" who apparently subs > to > MANY RootsWeb lists and has the admin addresses (and my private email > address) in her address book and then sends out a ton of these hate > messages to > everyone in her address book. > > I've written to her telling her to cease and desist from sending this crap > or I'd unsub from the lists I admin and ban her from rejoining. I haven't > as yet received a reply but since I'm getting this at a vast number of my > admin addresses I have to assume that other admins are also getting it. > > I've notified listmaster in case he feels other action is needed -- my > main > reason for posting to listowners-L is that this mail had me puzzled at > first as to who this "Kelly" was because the first onslaught of the hate > mail > came to my PRIVATE email address. It wasn't until this morning that the > mail started also hitting many of my admin addresses that it dawned on me > the > connection was that she subbed to the lists. > > Joan > > > > ------------------------------- > To unsubscribe from the list, please send an email to > LISTOWNERS-request@rootsweb.com with the word 'unsubscribe' without the > quotes in the subject and the body of the message

Joan, I have also received this to ALL of my lists (60+) but only to the admin addresses. It is not only coming from "kellyjack1776" but from other addresses as well. The address(es) being used are NOT subbed to any of my lists. It IS s*p*a*m but NOT your garden variety in that it is being sent from the author of the book being advertised in order to increase sales of the book. It IS a real book and is available from Amazon.com for "only" $US 9.99. You can find it by searching for "How Fatima Started Islam", but the reviews ain't very good!! PSW ----- Original Message ----- From: <JYoung6180@aol.com> To: <listowners@rootsweb.com> Sent: Sunday, July 29, 2012 10:09 AM Subject: [LO] Political and Religious hate mail coming to my adminaddresses... > ...from a list subscriber to many of my lists. I don't know if any of the > rest of you have received the blistering hate mail (both political and > anti-Islam religious garbage) from a gal named "Kelly" who apparently subs > to > MANY RootsWeb lists and has the admin addresses (and my private email > address) in her address book and then sends out a ton of these hate > messages to > everyone in her address book. > > I've written to her telling her to cease and desist from sending this crap > or I'd unsub from the lists I admin and ban her from rejoining. I haven't > as yet received a reply but since I'm getting this at a vast number of my > admin addresses I have to assume that other admins are also getting it. > > I've notified listmaster in case he feels other action is needed -- my > main > reason for posting to listowners-L is that this mail had me puzzled at > first as to who this "Kelly" was because the first onslaught of the hate > mail > came to my PRIVATE email address. It wasn't until this morning that the > mail started also hitting many of my admin addresses that it dawned on me > the > connection was that she subbed to the lists. > > Joan > > > > ------------------------------- > To unsubscribe from the list, please send an email to > LISTOWNERS-request@rootsweb.com with the word 'unsubscribe' without the > quotes in the subject and the body of the message >

First off, it's a weekend and staff isn't working on the weekends. What's the hurry? Anyway, you probably WON'T receive a reply but that doesn't mean that they didn't receive and consider your message. Joan In a message dated 7/21/2012 3:55:06 P.M. Eastern Daylight Time, maryannlubinsky@yahoo.com writes: I forwarded one of the messages to Rootsweb immediately on receipt inquiring as to its validity but did not receive a reply as of this morning. Mary Ann Lubinsky

Not exactly. AOL and other ISPs send logs to RootsWeb IF/WHEN someone reports a LIST message as spam to AOL and RootsWeb unsubs the person from the list they reported. But this doesn't happen if someone reports OTHER spam spoofing RootsWeb addresses to their ISPs as spam. However, that said, the consequences can be WORSE in doing this because it can cause EVERYONE at your ISP (AOL or whatever) to be blocked from getting any RootsWeb mail because it can result in AOL treating RootsWeb as a spammer. So DON'T DO IT! Only report any spam that spoofs RootsWeb TO RootsWeb and NOWHERE else. Joan In a message dated 7/21/2012 3:14:54 P.M. Eastern Daylight Time, harrison28@gmail.com writes: Well if you have a problem with Rootsweb and you are an admin then give your lists to admins that know we are not to report ADMIN mail from Rootsweb, If you look at the archives for LO you will see this has been discussed many times, Rootsweb gets notified when AOL subscribers report ROOTSWEB mail as spam and AOL notifies Rootsweb now so that these reporters of SPAM will be globally removed from the lists.

Mary Ann- NEVER NEVER NEVER report ANYTHING that comes to you as admin or via a list or list request address as spam to your ISP. You won't be removed from the list unless you are reporting list messages as spam as Kathie stated...but you DO run the risk of getting RootsWeb blocked as the spammer by these ISP. The ONLY place to report any spam that spoofs RootsWeb is TO RootsWeb. Joan In a message dated 7/21/2012 2:38:00 P.M. Eastern Daylight Time, maryannlubinsky@yahoo.com writes: I received 8 messages yesterday to my personal email address, 2 each for 4 of my Rootsweb lists, requesting I verify my identity by clicking on a link. The message said the mailing list would be deactivated if I did not follow through. Upon investigation, I determined they came from an AOL address. I reported each of these as SPAM to abuse@aol.net with a cc to spam@uce.gov because they were attempts at phishing. Mary Ann Lubinsky

You're not going to receive any replies from RW on weekends anyway. But as the others have said, if you received the message through your own personal email address rather than through the Rootsweb Mailman system, there would be no need to report to them as spam. The messages I mentioned in my original message were some that actually came through RW and were among the Pending Requests for a couple of my mailing lists. I just rejected the message and moved on but wanted to alert others in case they hadn't paid attention to it. Deloris Williams From: Mary Ann Lubinsky Sent: Saturday, July 21, 2012 2:55 PM To: JYoung6180@aol.com ; del_williams@comcast.net ; listowners@rootsweb.com Subject: Re: [LO] Messages spoofing Rootsweb I forwarded one of the messages to Rootsweb immediately on receipt inquiring as to its validity but did not receive a reply as of this morning. Mary Ann Lubinsky -------------------------------------------------------------------------------- From: Mary Ann Lubinsky <maryannlubinsky@yahoo.com> To: "JYoung6180@aol.com" <JYoung6180@aol.com>; "del_williams@comcast.net" <del_williams@comcast.net>; "listowners@rootsweb.com" <listowners@rootsweb.com> Sent: Saturday, July 21, 2012 3:48 PM Subject: Re: [LO] Messages spoofing Rootsweb None of the messages came through any of the lists. They were delivered to me personally in my own mailbox. They only mentioned the lists. Mary Ann Lubinsky -------------------------------------------------------------------------------- From: "JYoung6180@aol.com" <JYoung6180@aol.com> To: maryannlubinsky@yahoo.com; del_williams@comcast.net; listowners@rootsweb.com Sent: Saturday, July 21, 2012 3:12 PM Subject: Re: [LO] Messages spoofing Rootsweb Mary Ann- NEVER NEVER NEVER report ANYTHING that comes to you as admin or via a list or list request address as spam to your ISP. You won't be removed from the list unless you are reporting list messages as spam as Kathie stated...but you DO run the risk of getting RootsWeb blocked as the spammer by these ISP. The ONLY place to report any spam that spoofs RootsWeb is TO RootsWeb. Joan In a message dated 7/21/2012 2:38:00 P.M. Eastern Daylight Time, maryannlubinsky@yahoo.com writes: I received 8 messages yesterday to my personal email address, 2 each for 4 of my Rootsweb lists, requesting I verify my identity by clicking on a link. The message said the mailing list would be deactivated if I did not follow through. Upon investigation, I determined they came from an AOL address. I reported each of these as SPAM to abuse@aol.net with a cc to spam@uce.gov because they were attempts at phishing. Mary Ann Lubinsky

On 7/21/2012 2:48 PM, Mary Ann Lubinsky wrote: > None of the messages came through any of the lists. They were > delivered to me personally in my own mailbox. They only mentioned the lists. > > Mary Ann Lubinsky Mary Ann: What *precisely* do you mean by "they only mentioned the lists"? If your answer is in *any* way tied to RootsWeb, whether in the "from" address or the "to" address (the latter is still possible if it was routed to your personal mailbox -- by RootsWeb for admin action, for example) then the problem still exists. You cannot report the message as SPAM without potentially entangling RootsWeb in the mess, and possibly being globally unsubbed yourself. Darrell

Well if you have a problem with Rootsweb and you are an admin then give your lists to admins that know we are not to report ADMIN mail from Rootsweb, If you look at the archives for LO you will see this has been discussed many times, Rootsweb gets notified when AOL subscribers report ROOTSWEB mail as spam and AOL notifies Rootsweb now so that these reporters of SPAM will be globally removed from the lists. On Sat, Jul 21, 2012 at 1:52 PM, <scotstout@aol.com> wrote: > and that is exactly the problem i have with rootsweb. the spam NEEDS to be > reported to the isp, yet rootsweb will unsubscribe me if i do so. > -- ~~~~~ Take care, Kathie

DO NOT report these as SPAM. They come to your personal address since you are the admin. When you report these to your ISP you will likely be removed from the lists by ROOTSWEB. Just delete them and move on. On Sat, Jul 21, 2012 at 1:35 PM, Mary Ann Lubinsky <maryannlubinsky@yahoo.com> wrote: > I received 8 messages yesterday to my personal email address, 2 each for 4 of my Rootsweb lists, requesting I verify my identity by clicking on a > link. The message said the mailing list would be deactivated if I did not > follow through. Upon investigation, I determined they came from an AOL > address. I reported each of these as SPAM to abuse@aol.net with a cc to spam@uce.gov because they were attempts at phishing. >-- ~~~~~ Take care, Kathie