For those of you that got a list-generated copy of this hunk of spam:

> We happily announce to you the draw (#1004) of the IRISH LOTTERY ...

It would appear the spammers are getting smarter bots, or actually 
personally going through the handshaking required to post a message to 
the list.

It was annoying enough to me that I had to go digging to see how they 
got away with it, to insure it wasn't a Listserv bug or backdoor, and 
found nothing of the sort.

The message itself was submitted from a Bellsouth mailbox (web_lotto102) 
through a valid Bellsouth mailer and survived all of their checks (and 
ours) and was delivered to Listserv as an HP3000-L list posting.

Listserv recognized that this address was not subscribed to the list, so 
it emailed back an encoded confirmation request to the web_lotto102 
Bellsouth mailbox.

Someone (or something) sent back the confirmation cookie, again properly 
coded from the web_lotto102 address.

I am speechless.  I hope this isn't a "new" Listserv-aware spam proxy agent.

Time will tell.

Jeff 

* To join/leave the list, search archives, change list settings, *
* etc., please visit http://raven.utc.edu/archives/hp3000-l.html *