Hi Folks: Is this a new spammer? I’m the listowner for the FLANARY & FLANNERY Mailing Lists. The poster of the message below is subscribed to both of these lists. I’ve tried unsubbing the poster, but the poster simply resubs. I tried moderating the poster, but the message below went directly to the FLANARY list. How do I add the poster to the Ban list? Halsey [message] From: llrich1144@aol.com Precedence: list Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit To: cashcraft@potawatomi.org, drich@nts-online.net, foxybee10@verizon.net, flanary@rootsweb.com, carlota@rotorooterconcord.com, tbow0260@aol.com, coolmissel@hotmail.com Date: Sat, 31 Mar 2012 13:37:53 -0400 (EDT) Reply-To: flanary@rootsweb.com Message-ID: <8CEDD7C2287FCAB-1EA0-BEF@webmail-d143.sysops.aol.com> Subject: Re: [FLANARY] o Message: 1 X-Mime-Autoconverted: from 8bit to 7bit by reformime (rfc2045lib 0.20) .. http://autocabco.com/yourdiscountcode-health99.html?waID=65ezy [end message]

On 4/1/2012 10:23 AM, John Halsey Flannery wrote: > Hi Folks: Is this a new spammer? I’m the listowner for the FLANARY& > FLANNERY Mailing Lists. The poster of the message below is subscribed > to both of these lists. I’ve tried unsubbing the poster, but the > poster simply resubs. I tried moderating the poster, but the message > below went directly to the FLANARY list. How do I add the poster to > the Ban list? > > Halsey > > [message] > > From: llrich1144@aol.com Precedence: list Mime-Version: 1.0 > Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: > 7bit To: cashcraft@potawatomi.org, drich@nts-online.net, > foxybee10@verizon.net, flanary@rootsweb.com, > carlota@rotorooterconcord.com, tbow0260@aol.com, > coolmissel@hotmail.com Date: Sat, 31 Mar 2012 13:37:53 -0400 (EDT) > Reply-To: flanary@rootsweb.com > Message-ID:<8CEDD7C2287FCAB-1EA0-BEF@webmail-d143.sysops.aol.com> > Subject: Re: [FLANARY] o > Message: 1 > X-Mime-Autoconverted: from 8bit to 7bit by reformime (rfc2045lib 0.20) > > .. http:-slash-slash-autocabco.com-slash-yourdiscountcode-hyphen-health99-dot-hxxx?waID-equals-65ezy > > [end message] John: Not a spammer, but almost certainly a malicious site of some kind. Your subscriber's address has been hacked, most likely. Yes, the Ban list is the answer. The other choice is to moderate the list entirely -- Ban list works better. Admin Tools Privacy Options Ban List In the text box for the Ban List, put the address on its own line. Darrell