Hello,
we are having someone on the mailing list since yesterday who appearently re-sends mails from the mailing list to the receivers, which creates a lot of spam.
From what we can see: * relayed via 1&1/united internet/GMX/etc, host is: moutng.kundenserver.de * senders IP address appears to be an Arcor ADSL connection, GeoIP says this might come from Berlin * internal IP address might be 10.99.52.31 * spam started most probably yesterday
(all this information is available in mail headers [1], visible to everyone reading this mailing list. No sniffing etc happened to acquire this.)
If you (partly) match this description, please check your mail server and fix this. If you could drop me a mail too, that would be great - I won't tell on you, promise - but then we can stop looking for the culprit. ;)
Cheers, Simon
[1] Received: from moutng.kundenserver.de (moutng.kundenserver.de [212.227.126.171]) by open-mesh.org (Postfix) with ESMTPS id 5102A601742 for b.a.t.m.a.n@lists.open-mesh.org; Wed, 14 Nov 2012 23:56:12 +0100 (CET) Received: from [10.99.52.31] (dslb-094-222-006-045.pools.arcor-ip.net [94.222.6.45]) by mrelayeu.kundenserver.de (node=mreu3) with ESMTP (Nemesis) id 0MD19D-1TQlP141HX-009dni; Wed, 14 Nov 2012 23:56:09 +0100