[Groff] Spam apparently from list -- again

[Peter Schaffter]

I received six porno-spam emails today, apparently originating from
list members (Werner and Ted).  Three yesterday.  As before, when
this happened, the attachment is stripped off the email before I
receive it, but the message still comes though.

Here's a sample envelope+header, in case someone can make use of it.

===Start spam header===

>From address@hidden  Fri Jun  3 05:34:56 2005
Received: from lists.gnu.org ([199.232.76.165])
        by faustus.dyn.ca with esmtp (Exim 4.50)
        id 1De8Zs-0001vr-7Z
        for address@hidden; Fri, 03 Jun 2005 05:34:56 -0400
Received: from localhost ([127.0.0.1] helo=lists.gnu.org)
        by lists.gnu.org with esmtp (Exim 4.43)
        id 1De8cA-0005q6-5j
        for address@hidden; Fri, 03 Jun 2005 05:37:18 -0400
Received: from mailman by lists.gnu.org with tmda-scanned (Exim 4.43)
        id 1De8N2-0001lH-92
        for address@hidden; Fri, 03 Jun 2005 05:21:40 -0400
Received: from exim by lists.gnu.org with spam-scanned (Exim 4.43)
        id 1De8My-0001jK-P8
        for address@hidden; Fri, 03 Jun 2005 05:21:37 -0400
Received: from [199.232.76.173] (helo=monty-python.gnu.org)
        by lists.gnu.org with esmtp (Exim 4.43) id 1De8Mw-0001fl-DR
        for address@hidden; Fri, 03 Jun 2005 05:21:34 -0400
Received: from [194.2.232.250] (helo=199.232.76.166)
        by monty-python.gnu.org with smtp (Exim 4.34) id 1De8JG-0008Iu-99
        for address@hidden; Fri, 03 Jun 2005 05:17:46 -0400
From: "Ted.Harding" <address@hidden>
To: address@hidden
Date: 03 Jun 2005 11:15:15 +0100
MIME-Version: 1.0
X-Mailer: OstroSoft SMTP Component (5.1.1)
Content-Type: multipart/mixed; boundary="--NextMimePart"
Message-Id: <address@hidden>
X-Content-Filtered-By: Mailman/MimeDel 2.1.5
Subject: [Groff] Fw:'''~~movie'''~~25
X-BeenThere: address@hidden
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: groff.gnu.org
List-Unsubscribe: <http://lists.gnu.org/mailman/listinfo/groff>,
        <mailto:address@hidden>
List-Archive: <http://lists.gnu.org/pipermail/groff>
List-Post: <mailto:address@hidden>
List-Help: <mailto:address@hidden>
List-Subscribe: <http://lists.gnu.org/mailman/listinfo/groff>,
        <mailto:address@hidden>
Sender: address@hidden
Errors-To: address@hidden

===End spam header===

-- 
Peter Schaffter
  Author of _The Schumann Proof_ (RendezVous Press, Canada)
  http://faustus.dyn.ca