Spamming of NANOG list members

Hansen, Christoffer christoffer at
Thu May 23 21:12:53 UTC 2019

Appreciate the warning!

On 23/05/2019 19:46, Valerie Wittkop wrote:
> These messages are not flowing through NANOG servers, nor using the NANOG domain. They are not messages coming from the NANOG organization. Please be aware if you receive a message matching this description and always make sure to scan attachments for a virus.

The one I received looked like this:

> From: "NANOG" <service at>


Has it been considered switching to "-all", instead of only "~all" in
the spf record?

> $ dig +short +nocmd +nocomments TXT
> "v=spf1 ip4: ip4:  ip4: ip4: ip6:2001:1838:2001:8::19 ip6:2001:1838:2001:8::20 ip6:2400:cb00:2048:1::6814:c632 ip6:2400:cb00:2048:1::6814:c732 ~all"

-------------- next part --------------
Return-Path: <service at>
Delivered-To: user at
Received: from (unknown [])
	by (Halon) with ESMTPS
	id 9cdfc18c-7d3d-11e9-825c-506b4b1aa3a0;
	Thu, 23 May 2019 09:31:59 +0000 (UTC)
Received: from localhost (localhost [])
	by (Postfix) with ESMTP id 306D4121593
	for <user at>; Thu, 23 May 2019 11:31:58 +0200 (CEST)
X-Spam-Flag: NO
X-Spam-Score: -2.403
X-Spam-Status: No, score=-2.403 tagged_above=-9999 required=5
	tests=[ALL_TRUSTED=-1, BAYES_00=-1.9, MISSING_MID=0.497]
	autolearn=no autolearn_force=no
Received: from ([])
	by localhost ( []) (amavisd-new, port 10024)
	with LMTP id X7bW28gISBQ9 for <user at>;
	Thu, 23 May 2019 11:31:56 +0200 (CEST)
Received: from [] ( [])
	(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by (Postfix) with ESMTPSA id 05D4D121350
	for <user at>; Thu, 23 May 2019 11:31:52 +0200 (CEST)
Date: Thu, 23 May 2019 04:13:07 -0500
From: "NANOG" <service at>
To: <user at>
Subject: gescanntes Dokument LZVO-451-EY4074
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----=_Part_65483_1484872530.28790224771686175392"
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 228 bytes
Desc: OpenPGP digital signature
URL: <>

More information about the NANOG mailing list