Spamming of NANOG list members

Thu May 23 21:12:53 UTC 2019

Appreciate the warning!

On 23/05/2019 19:46, Valerie Wittkop wrote:
> These messages are not flowing through NANOG servers, nor using the NANOG domain. They are not messages coming from the NANOG organization. Please be aware if you receive a message matching this description and always make sure to scan attachments for a virus.

The one I received looked like this:

> From: "NANOG" <service at cegips.pl>

...

Has it been considered switching to "-all", instead of only "~all" in
the spf record?

> $ dig +short +nocmd +nocomments TXT nanog.org
> "v=spf1 include:_spf.google.com ip4:104.20.199.50 ip4:104.20.198.50  ip4:50.31.151.75 ip4:50.31.151.76 ip6:2001:1838:2001:8::19 ip6:2001:1838:2001:8::20 ip6:2400:cb00:2048:1::6814:c632 ip6:2400:cb00:2048:1::6814:c732 ~all"

	-Christoffer
-------------- next part --------------
Return-Path: <service at cegips.pl>
Delivered-To: user at example.com
Received: from mx.cegips.pl (unknown [213.192.76.50])
	by mx1.pub.mailpod7-cph3.one.com (Halon) with ESMTPS
	id 9cdfc18c-7d3d-11e9-825c-506b4b1aa3a0;
	Thu, 23 May 2019 09:31:59 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
	by mx.cegips.pl (Postfix) with ESMTP id 306D4121593
	for <user at example.com>; Thu, 23 May 2019 11:31:58 +0200 (CEST)
X-Spam-Flag: NO
X-Spam-Score: -2.403
X-Spam-Level:
X-Spam-Status: No, score=-2.403 tagged_above=-9999 required=5
	tests=[ALL_TRUSTED=-1, BAYES_00=-1.9, MISSING_MID=0.497]
	autolearn=no autolearn_force=no
Received: from mx.cegips.pl ([127.0.0.1])
	by localhost (mx.cegips.pl [127.0.0.1]) (amavisd-new, port 10024)
	with LMTP id X7bW28gISBQ9 for <user at example.com>;
	Thu, 23 May 2019 11:31:56 +0200 (CEST)
Received: from [190.12.55.174] (corp-190-12-55-174.gye.puntonet.ec [190.12.55.174])
	(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by mx.cegips.pl (Postfix) with ESMTPSA id 05D4D121350
	for <user at example.com>; Thu, 23 May 2019 11:31:52 +0200 (CEST)
Date: Thu, 23 May 2019 04:13:07 -0500
From: "NANOG" <service at cegips.pl>
To: <user at example.com>
Subject: gescanntes Dokument LZVO-451-EY4074
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----=_Part_65483_1484872530.28790224771686175392"
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 228 bytes
Desc: OpenPGP digital signature
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20190523/3c138cce/attachment.sig>