public inbox for gentoo-user@lists.gentoo.org
 help / color / mirror / Atom feed
* [gentoo-user] bot attack ?
@ 2025-02-15 22:40 Philip Webb
  2025-02-15 23:17 ` Dale
  2025-02-15 23:21 ` Jack
  0 siblings, 2 replies; 5+ messages in thread
From: Philip Webb @ 2025-02-15 22:40 UTC (permalink / raw
  To: Gentoo User

[ This looks like some form of malicious spam,
which others might want to be aware of.  I've been using Gentoo since 2003
& have never encountered anything like it before ]

----- Forwarded message from Moderation Robot <robomod@news.nic.it> -----

>From purslow  Sat Feb 15 17: 21:22 2025
Delivered-To: purslow1@ca.inter.net
X-Virus-Scanned: Debian amavisd-new at
X-Spam-Flag: NO
X-Spam-Score: -2.641
X-Spam-Level: 
X-Spam-Status: No, score=-2.641 tagged_above=-999 required=5 tests=[BAYES_50=0.8, HEADER_FROM_DIFFERENT_DOMAINS=0.249, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_RP_CERTIFIED=-3, RCVD_IN_RP_RNBL=1.31,
	RCVD_IN_RP_SAFE=-2, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
From: Moderation Robot <robomod@news.nic.it>
Subject: Re: [gentoo-user] problem formatting new 256 GB USB stick
To: "Philip Webb <Philip Webb" <purslow@ca.inter.net>
Date: Sat, 15 Feb 2025 09:00:01 +0100 (CET)

linux.gentoo.user is a moderated newsgroup in gateway
with a mailing list.

Your article has been examined by the automatic moderation program
and has been refused because:

this newsgroup is currently read only because of administrative
reasons. Please submit your message to the mailing list address.
You may subscribe to linux.admin.news to know if and when bidirectional
gating will be enabled.


For more information about the linux.* hierarchy please read the FAQ
at http://www.linux.it/~md/linux-faq

Virtually your,
The Moderation Robot.

------- Follows the first few lines of your article --------
Return-Path: <news@i2pn2.org>
X-Original-To: linux-gentoo-user@moderators.bofh.it
Delivered-To: linuxmod+linux.gentoo.user@erode.bofh.it
Received: from pi-dach.dorfdsl.de (pi-dach.dorfdsl.de [IPv6:2a01:170:118f:30::33])
	(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
	 key-exchange X25519 server-signature ECDSA (secp384r1) server-digest SHA384)
	(No client certificate requested)
	by erode.bofh.it (Postfix) with ESMTPS id C27D41762550
	for <linux-gentoo-user@moderators.bofh.it>; Sat, 15 Feb 2025 08:50:36 +0100 (CET)
Received: from i2pn2.org (i2pn2.org [157.230.63.40])
	by pi-dach.dorfdsl.de (8.18.1/8.18.1/Debian-6~bpo12+1) with ESMTP id 51F7oZRT250718
	for <linux-gentoo-user@moderators.isc.org>; Sat, 15 Feb 2025 08:50:35 +0100
Received: by i2pn2.org (Postfix, from userid 9)
	id E1C7F59803B; Sat, 15 Feb 2025 07:50:34 +0000 (UTC)
To: linux-gentoo-user@moderators.isc.org
From: "Philip Webb <Philip Webb" <purslow@ca.inter.net>
Newsgroups: linux.gentoo.user
Subject: [gentoo-user] problem formatting new 256 GB USB stick
Date: Sat, 15 Feb 2025 08:50:01 +0200
Organization: i2pn2 (i2pn.org)
Message-ID: <Kgl61-gVN4-5@gated-at.bofh.it>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Injection-Info: ;
	posting-account="597X7D5SaIfPk7x7Rj3Y256QMy32256Yh92EC2lLr+U";
X-Organization: RBBSG
X-Mailconverter: SoupGate-Linux v1.24
X-Report-Abuse-To: newsmaster@fidonet.fi
X-Spam-Checker-Version: SpamAssassin 4.0.0
X-Comment-To: All

Recently, I bought  2  new Kingston Exodia  256 GB  USB sticks
from Canada Computers, the store in Toronto I've used for  25 yr .
With many previous new USB sticks of sizes  <= 128 GB
& which came with a VFat filesystem,
I simply repartitioned them using Fdisk, which created a Linux partition
& then used 'mke2fs' to format them with an Ext2 filesystem.
This time, something has gone wrong :

  root:538 ~> mke2fs /dev/sdb1
  mke2fs 1.47.0 (5-Feb-2023)

----- End forwarded message -----

-- 
========================,,============================================
SUPPORT     ___________//___,   Philip Webb
ELECTRIC   /] [] [] [] [] []|   Cities Centre, University of Toronto
TRANSIT    `-O----------O---'   purslowatcadotinterdotnet



^ permalink raw reply	[flat|nested] 5+ messages in thread

* Re: [gentoo-user] bot attack ?
  2025-02-15 22:40 [gentoo-user] bot attack ? Philip Webb
@ 2025-02-15 23:17 ` Dale
  2025-02-15 23:21 ` Jack
  1 sibling, 0 replies; 5+ messages in thread
From: Dale @ 2025-02-15 23:17 UTC (permalink / raw
  To: gentoo-user

Philip Webb wrote:
> [ This looks like some form of malicious spam,
> which others might want to be aware of.  I've been using Gentoo since 2003
> & have never encountered anything like it before ]
>
> ----- Forwarded message from Moderation Robot <robomod@news.nic.it> -----
>
> >From purslow  Sat Feb 15 17: 21:22 2025
> Delivered-To: purslow1@ca.inter.net
> X-Virus-Scanned: Debian amavisd-new at
> X-Spam-Flag: NO
> X-Spam-Score: -2.641
> X-Spam-Level: 
> X-Spam-Status: No, score=-2.641 tagged_above=-999 required=5 tests=[BAYES_50=0.8, HEADER_FROM_DIFFERENT_DOMAINS=0.249, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_RP_CERTIFIED=-3, RCVD_IN_RP_RNBL=1.31,
> 	RCVD_IN_RP_SAFE=-2, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
> From: Moderation Robot <robomod@news.nic.it>
> Subject: Re: [gentoo-user] problem formatting new 256 GB USB stick
> To: "Philip Webb <Philip Webb" <purslow@ca.inter.net>
> Date: Sat, 15 Feb 2025 09:00:01 +0100 (CET)
>
> linux.gentoo.user is a moderated newsgroup in gateway
> with a mailing list.
>
> Your article has been examined by the automatic moderation program
> and has been refused because:
>
> this newsgroup is currently read only because of administrative
> reasons. Please submit your message to the mailing list address.
> You may subscribe to linux.admin.news to know if and when bidirectional
> gating will be enabled.
>
>
> For more information about the linux.* hierarchy please read the FAQ
> at http://www.linux.it/~md/linux-faq
>
> Virtually your,
> The Moderation Robot.
>
> ------- Follows the first few lines of your article --------
> Return-Path: <news@i2pn2.org>
> X-Original-To: linux-gentoo-user@moderators.bofh.it
> Delivered-To: linuxmod+linux.gentoo.user@erode.bofh.it
> Received: from pi-dach.dorfdsl.de (pi-dach.dorfdsl.de [IPv6:2a01:170:118f:30::33])
> 	(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
> 	 key-exchange X25519 server-signature ECDSA (secp384r1) server-digest SHA384)
> 	(No client certificate requested)
> 	by erode.bofh.it (Postfix) with ESMTPS id C27D41762550
> 	for <linux-gentoo-user@moderators.bofh.it>; Sat, 15 Feb 2025 08:50:36 +0100 (CET)
> Received: from i2pn2.org (i2pn2.org [157.230.63.40])
> 	by pi-dach.dorfdsl.de (8.18.1/8.18.1/Debian-6~bpo12+1) with ESMTP id 51F7oZRT250718
> 	for <linux-gentoo-user@moderators.isc.org>; Sat, 15 Feb 2025 08:50:35 +0100
> Received: by i2pn2.org (Postfix, from userid 9)
> 	id E1C7F59803B; Sat, 15 Feb 2025 07:50:34 +0000 (UTC)
> To: linux-gentoo-user@moderators.isc.org
> From: "Philip Webb <Philip Webb" <purslow@ca.inter.net>
> Newsgroups: linux.gentoo.user
> Subject: [gentoo-user] problem formatting new 256 GB USB stick
> Date: Sat, 15 Feb 2025 08:50:01 +0200
> Organization: i2pn2 (i2pn.org)
> Message-ID: <Kgl61-gVN4-5@gated-at.bofh.it>
> MIME-Version: 1.0
> Content-Type: text/plain; charset="us-ascii"
> Content-Transfer-Encoding: 7bit
> Injection-Info: ;
> 	posting-account="597X7D5SaIfPk7x7Rj3Y256QMy32256Yh92EC2lLr+U";
> X-Organization: RBBSG
> X-Mailconverter: SoupGate-Linux v1.24
> X-Report-Abuse-To: newsmaster@fidonet.fi
> X-Spam-Checker-Version: SpamAssassin 4.0.0
> X-Comment-To: All
>
> Recently, I bought  2  new Kingston Exodia  256 GB  USB sticks
> from Canada Computers, the store in Toronto I've used for  25 yr .
> With many previous new USB sticks of sizes  <= 128 GB
> & which came with a VFat filesystem,
> I simply repartitioned them using Fdisk, which created a Linux partition
> & then used 'mke2fs' to format them with an Ext2 filesystem.
> This time, something has gone wrong :
>
>   root:538 ~> mke2fs /dev/sdb1
>   mke2fs 1.47.0 (5-Feb-2023)
>
> ----- End forwarded message -----
>


Well, it isn't read only since you just sent a email and I got it here. 
I've never seen anything like that or heard of one either.  Usually when
a mod or something chimes in, it's from a gentoo.org email account and
they are generally known to us already.  Some of us anyway.

Maybe a dev will see this and forward it on to whoever needs to handle
this.  I guess one could file a bug.  Make sure to include headers and
such of course. 

Makes me want to break out my rod and reel.  Sounds fishy.  :-D 

Dale

:-)  :-) 


^ permalink raw reply	[flat|nested] 5+ messages in thread

* Re: [gentoo-user] bot attack ?
  2025-02-15 22:40 [gentoo-user] bot attack ? Philip Webb
  2025-02-15 23:17 ` Dale
@ 2025-02-15 23:21 ` Jack
  2025-02-15 23:52   ` Philip Webb
  1 sibling, 1 reply; 5+ messages in thread
From: Jack @ 2025-02-15 23:21 UTC (permalink / raw
  To: gentoo-user

On 2025.02.15 17:40, Philip Webb wrote:
> [ This looks like some form of malicious spam,
> which others might want to be aware of.  I've been using Gentoo since  
> 2003
> & have never encountered anything like it before ]
> 
> ----- Forwarded message from Moderation Robot <robomod@news.nic.it>  
> -----
> 
> >From purslow  Sat Feb 15 17: 21:22 2025
> Delivered-To: purslow1@ca.inter.net
> X-Virus-Scanned: Debian amavisd-new at
> X-Spam-Flag: NO
> X-Spam-Score: -2.641
> X-Spam-Level:
> X-Spam-Status: No, score=-2.641 tagged_above=-999 required=5  
> tests=[BAYES_50=0.8, HEADER_FROM_DIFFERENT_DOMAINS=0.249,  
> RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_RP_CERTIFIED=-3,  
> RCVD_IN_RP_RNBL=1.31,
> 	RCVD_IN_RP_SAFE=-2, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001,  
> URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
> From: Moderation Robot <robomod@news.nic.it>
> Subject: Re: [gentoo-user] problem formatting new 256 GB USB stick
> To: "Philip Webb <Philip Webb" <purslow@ca.inter.net>
> Date: Sat, 15 Feb 2025 09:00:01 +0100 (CET)
> 
> linux.gentoo.user is a moderated newsgroup in gateway
> with a mailing list.
> 
> Your article has been examined by the automatic moderation program
> and has been refused because:
> 
> this newsgroup is currently read only because of administrative
> reasons. Please submit your message to the mailing list address.
> You may subscribe to linux.admin.news to know if and when  
> bidirectional
> gating will be enabled.
> 
> 
> For more information about the linux.* hierarchy please read the FAQ
> at http://www.linux.it/~md/linux-faq
> 
> Virtually your,
> The Moderation Robot.
> 
> ------- Follows the first few lines of your article --------
> Return-Path: <news@i2pn2.org>
> X-Original-To: linux-gentoo-user@moderators.bofh.it
> Delivered-To: linuxmod+linux.gentoo.user@erode.bofh.it
> Received: from pi-dach.dorfdsl.de (pi-dach.dorfdsl.de  
> [IPv6:2a01:170:118f:30::33])
> 	(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
> 	 key-exchange X25519 server-signature ECDSA (secp384r1)  
> server-digest SHA384)
> 	(No client certificate requested)
> 	by erode.bofh.it (Postfix) with ESMTPS id C27D41762550
> 	for <linux-gentoo-user@moderators.bofh.it>; Sat, 15 Feb 2025  
> 08:50:36 +0100 (CET)
> Received: from i2pn2.org (i2pn2.org [157.230.63.40])
> 	by pi-dach.dorfdsl.de (8.18.1/8.18.1/Debian-6~bpo12+1) with  
> ESMTP id 51F7oZRT250718
> 	for <linux-gentoo-user@moderators.isc.org>; Sat, 15 Feb 2025  
> 08:50:35 +0100
> Received: by i2pn2.org (Postfix, from userid 9)
> 	id E1C7F59803B; Sat, 15 Feb 2025 07:50:34 +0000 (UTC)
> To: linux-gentoo-user@moderators.isc.org
> From: "Philip Webb <Philip Webb" <purslow@ca.inter.net>
> Newsgroups: linux.gentoo.user
> Subject: [gentoo-user] problem formatting new 256 GB USB stick
> Date: Sat, 15 Feb 2025 08:50:01 +0200
> Organization: i2pn2 (i2pn.org)
> Message-ID: <Kgl61-gVN4-5@gated-at.bofh.it>
> MIME-Version: 1.0
> Content-Type: text/plain; charset="us-ascii"
> Content-Transfer-Encoding: 7bit
> Injection-Info: ;
> 	posting-account="597X7D5SaIfPk7x7Rj3Y256QMy32256Yh92EC2lLr+U";
> X-Organization: RBBSG
> X-Mailconverter: SoupGate-Linux v1.24
> X-Report-Abuse-To: newsmaster@fidonet.fi
> X-Spam-Checker-Version: SpamAssassin 4.0.0
> X-Comment-To: All
> 
> Recently, I bought  2  new Kingston Exodia  256 GB  USB sticks
> from Canada Computers, the store in Toronto I've used for  25 yr .
> With many previous new USB sticks of sizes  <= 128 GB
> & which came with a VFat filesystem,
> I simply repartitioned them using Fdisk, which created a Linux  
> partition
> & then used 'mke2fs' to format them with an Ext2 filesystem.
> This time, something has gone wrong :
> 
>   root:538 ~> mke2fs /dev/sdb1
>   mke2fs 1.47.0 (5-Feb-2023)
> 
> ----- End forwarded message -----
> 
> --
> ========================,,============================================
> SUPPORT     ___________//___,   Philip Webb
> ELECTRIC   /] [] [] [] [] []|   Cities Centre, University of Toronto
> TRANSIT    `-O----------O---'   purslowatcadotinterdotnet

Are you posting to this group by the mailing list address, or by making  
a usenet post?  (see below for why I ask)

I suspect the message might actually be legitimate.  I access this  
group as a mailing list, but I also read usenet using Pan as a  
newsreader, and recognize bofh.it as a usenet server that may well be  
where the gateway between this mailing list and the linked usenet group  
happens.  (I access usenet from eternalseptember.org, and bofh gets  
mentioned occasionally in their support groups.)  I also just looked at  
linux.gentoo.users, and your message above is already posted there, so  
it looks like the "administrative reasons" have been resolved.  I asked  
that first question because it would seem odd that it suggests you to  
send you message to the mailing list address - if that is what you did  
in the first place.  I suspect the bofh admins might be interested  
about the possible breakage, but I also suspect others will do that if  
actually necessary.

Jack


^ permalink raw reply	[flat|nested] 5+ messages in thread

* Re: [gentoo-user] bot attack ?
  2025-02-15 23:21 ` Jack
@ 2025-02-15 23:52   ` Philip Webb
  2025-02-16  0:40     ` Jack
  0 siblings, 1 reply; 5+ messages in thread
From: Philip Webb @ 2025-02-15 23:52 UTC (permalink / raw
  To: gentoo-user

250215 Jack wrote:
> On 2025.02.15 17:40, Philip Webb wrote:
> > [ This looks like some form of malicious spam,
> > which others might want to be aware of.  I've been using Gentoo since  
> > 2003
> > & have never encountered anything like it before ]
> > 
> > ----- Forwarded message from Moderation Robot <robomod@news.nic.it>  
> > -----
> > 
> > >From purslow  Sat Feb 15 17: 21:22 2025
> > Delivered-To: purslow1@ca.inter.net
> > X-Virus-Scanned: Debian amavisd-new at
> > X-Spam-Flag: NO
> > X-Spam-Score: -2.641
> > X-Spam-Level:
> > X-Spam-Status: No, score=-2.641 tagged_above=-999 required=5  
> > tests=[BAYES_50=0.8, HEADER_FROM_DIFFERENT_DOMAINS=0.249,  
> > RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_RP_CERTIFIED=-3,  
> > RCVD_IN_RP_RNBL=1.31,
> > 	RCVD_IN_RP_SAFE=-2, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001,  
> > URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
> > From: Moderation Robot <robomod@news.nic.it>
> > Subject: Re: [gentoo-user] problem formatting new 256 GB USB stick
> > To: "Philip Webb <Philip Webb" <purslow@ca.inter.net>
> > Date: Sat, 15 Feb 2025 09:00:01 +0100 (CET)
> > 
> > linux.gentoo.user is a moderated newsgroup in gateway
> > with a mailing list.
> > 
> > Your article has been examined by the automatic moderation program
> > and has been refused because:
> > 
> > this newsgroup is currently read only because of administrative
> > reasons. Please submit your message to the mailing list address.
> > You may subscribe to linux.admin.news to know if and when  
> > bidirectional
> > gating will be enabled.
> > 
> > 
> > For more information about the linux.* hierarchy please read the FAQ
> > at http://www.linux.it/~md/linux-faq
> > 
> > Virtually your,
> > The Moderation Robot.
> > 
> > ------- Follows the first few lines of your article --------
> > Return-Path: <news@i2pn2.org>
> > X-Original-To: linux-gentoo-user@moderators.bofh.it
> > Delivered-To: linuxmod+linux.gentoo.user@erode.bofh.it
> > Received: from pi-dach.dorfdsl.de (pi-dach.dorfdsl.de  
> > [IPv6:2a01:170:118f:30::33])
> > 	(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
> > 	 key-exchange X25519 server-signature ECDSA (secp384r1)  
> > server-digest SHA384)
> > 	(No client certificate requested)
> > 	by erode.bofh.it (Postfix) with ESMTPS id C27D41762550
> > 	for <linux-gentoo-user@moderators.bofh.it>; Sat, 15 Feb 2025  
> > 08:50:36 +0100 (CET)
> > Received: from i2pn2.org (i2pn2.org [157.230.63.40])
> > 	by pi-dach.dorfdsl.de (8.18.1/8.18.1/Debian-6~bpo12+1) with  
> > ESMTP id 51F7oZRT250718
> > 	for <linux-gentoo-user@moderators.isc.org>; Sat, 15 Feb 2025  
> > 08:50:35 +0100
> > Received: by i2pn2.org (Postfix, from userid 9)
> > 	id E1C7F59803B; Sat, 15 Feb 2025 07:50:34 +0000 (UTC)
> > To: linux-gentoo-user@moderators.isc.org
> > From: "Philip Webb <Philip Webb" <purslow@ca.inter.net>
> > Newsgroups: linux.gentoo.user
> > Subject: [gentoo-user] problem formatting new 256 GB USB stick
> > Date: Sat, 15 Feb 2025 08:50:01 +0200
> > Organization: i2pn2 (i2pn.org)
> > Message-ID: <Kgl61-gVN4-5@gated-at.bofh.it>
> > MIME-Version: 1.0
> > Content-Type: text/plain; charset="us-ascii"
> > Content-Transfer-Encoding: 7bit
> > Injection-Info: ;
> > 	posting-account="597X7D5SaIfPk7x7Rj3Y256QMy32256Yh92EC2lLr+U";
> > X-Organization: RBBSG
> > X-Mailconverter: SoupGate-Linux v1.24
> > X-Report-Abuse-To: newsmaster@fidonet.fi
> > X-Spam-Checker-Version: SpamAssassin 4.0.0
> > X-Comment-To: All
> > 
> > Recently, I bought  2  new Kingston Exodia  256 GB  USB sticks
> > from Canada Computers, the store in Toronto I've used for  25 yr .
> > With many previous new USB sticks of sizes  <= 128 GB
> > & which came with a VFat filesystem,
> > I simply repartitioned them using Fdisk, which created a Linux  
> > partition
> > & then used 'mke2fs' to format them with an Ext2 filesystem.
> > This time, something has gone wrong :
> > 
> >   root:538 ~> mke2fs /dev/sdb1
> >   mke2fs 1.47.0 (5-Feb-2023)
> > 
> > ----- End forwarded message -----
> > 
> > --
> > ========================,,============================================
> > SUPPORT     ___________//___,   Philip Webb
> > ELECTRIC   /] [] [] [] [] []|   Cities Centre, University of Toronto
> > TRANSIT    `-O----------O---'   purslowatcadotinterdotnet
> 
> Are you posting to this group by the mailing list address
> or by making  a usenet post ? -- it would seem odd that it suggests
> you send your message to the mailing list address,
> if that is what you did in the first place.
> I suspect the bofh admins might be interested about the possible breakage,
> but also that others will do that, if actually necessary.

As always since 2003,
I posted to 'gentoo-user@lists.gentoo.org (Gentoo User)' using Mutt.

> I suspect the message might actually be legitimate.
> I access this group as a mailing list,
> but I also read usenet using Pan as a newsreader
> and recognize bofh.it as a usenet server
> that may well be where the gateway between this mailing list
> and the linked usenet group happens.
> I access usenet from eternalseptember.org
> and bofh gets mentioned occasionally in their support groups.
> I also just looked at linux.gentoo.users
> and your message above is already posted there,
> so it looks like the "administrative reasons" have been resolved.

I've never heard of such a news group & didn't even know they still existed.
I'm not sure I want any of my e-mails forwarded to another address by a bot,
which could lead to all sorts of nasty results.  Certainly,
Gentoo should guarantee that nothing in its list software does such a thing.
I hope someone else can see that it's fixed :
I didn't cause it & don't feel like doing work to fix it.

-- 
========================,,============================================
SUPPORT     ___________//___,   Philip Webb
ELECTRIC   /] [] [] [] [] []|   Cities Centre, University of Toronto
TRANSIT    `-O----------O---'   purslowatcadotinterdotnet



^ permalink raw reply	[flat|nested] 5+ messages in thread

* Re: [gentoo-user] bot attack ?
  2025-02-15 23:52   ` Philip Webb
@ 2025-02-16  0:40     ` Jack
  0 siblings, 0 replies; 5+ messages in thread
From: Jack @ 2025-02-16  0:40 UTC (permalink / raw
  To: gentoo-user

On 2025.02.15 18:52, Philip Webb wrote:
> 250215 Jack wrote:
> > On 2025.02.15 17:40, Philip Webb wrote:
> > > [ This looks like some form of malicious spam,
> > > which others might want to be aware of.  I've been using Gentoo  
> since
> > > 2003
> > > & have never encountered anything like it before ]
> > >
> > > ----- Forwarded message from Moderation Robot  
> <robomod@news.nic.it>
> > > -----
> > >
> > > >From purslow  Sat Feb 15 17: 21:22 2025
> > > Delivered-To: purslow1@ca.inter.net
> > > X-Virus-Scanned: Debian amavisd-new at
> > > X-Spam-Flag: NO
> > > X-Spam-Score: -2.641
> > > X-Spam-Level:
> > > X-Spam-Status: No, score=-2.641 tagged_above=-999 required=5
> > > tests=[BAYES_50=0.8, HEADER_FROM_DIFFERENT_DOMAINS=0.249,
> > > RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_RP_CERTIFIED=-3,
> > > RCVD_IN_RP_RNBL=1.31,
> > > 	RCVD_IN_RP_SAFE=-2, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001,
> > > URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
> > > From: Moderation Robot <robomod@news.nic.it>
> > > Subject: Re: [gentoo-user] problem formatting new 256 GB USB stick
> > > To: "Philip Webb <Philip Webb" <purslow@ca.inter.net>
> > > Date: Sat, 15 Feb 2025 09:00:01 +0100 (CET)
> > >
> > > linux.gentoo.user is a moderated newsgroup in gateway
> > > with a mailing list.
> > >
> > > Your article has been examined by the automatic moderation program
> > > and has been refused because:
> > >
> > > this newsgroup is currently read only because of administrative
> > > reasons. Please submit your message to the mailing list address.
> > > You may subscribe to linux.admin.news to know if and when
> > > bidirectional
> > > gating will be enabled.
> > >
> > >
> > > For more information about the linux.* hierarchy please read the  
> FAQ
> > > at http://www.linux.it/~md/linux-faq
> > >
> > > Virtually your,
> > > The Moderation Robot.
> > >
> > > ------- Follows the first few lines of your article --------
> > > Return-Path: <news@i2pn2.org>
> > > X-Original-To: linux-gentoo-user@moderators.bofh.it
> > > Delivered-To: linuxmod+linux.gentoo.user@erode.bofh.it
> > > Received: from pi-dach.dorfdsl.de (pi-dach.dorfdsl.de
> > > [IPv6:2a01:170:118f:30::33])
> > > 	(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
> > > 	 key-exchange X25519 server-signature ECDSA (secp384r1)
> > > server-digest SHA384)
> > > 	(No client certificate requested)
> > > 	by erode.bofh.it (Postfix) with ESMTPS id C27D41762550
> > > 	for <linux-gentoo-user@moderators.bofh.it>; Sat, 15 Feb 2025
> > > 08:50:36 +0100 (CET)
> > > Received: from i2pn2.org (i2pn2.org [157.230.63.40])
> > > 	by pi-dach.dorfdsl.de (8.18.1/8.18.1/Debian-6~bpo12+1) with
> > > ESMTP id 51F7oZRT250718
> > > 	for <linux-gentoo-user@moderators.isc.org>; Sat, 15 Feb 2025
> > > 08:50:35 +0100
> > > Received: by i2pn2.org (Postfix, from userid 9)
> > > 	id E1C7F59803B; Sat, 15 Feb 2025 07:50:34 +0000 (UTC)
> > > To: linux-gentoo-user@moderators.isc.org
> > > From: "Philip Webb <Philip Webb" <purslow@ca.inter.net>
> > > Newsgroups: linux.gentoo.user
> > > Subject: [gentoo-user] problem formatting new 256 GB USB stick
> > > Date: Sat, 15 Feb 2025 08:50:01 +0200
> > > Organization: i2pn2 (i2pn.org)
> > > Message-ID: <Kgl61-gVN4-5@gated-at.bofh.it>
> > > MIME-Version: 1.0
> > > Content-Type: text/plain; charset="us-ascii"
> > > Content-Transfer-Encoding: 7bit
> > > Injection-Info: ;
> > > 	posting-account="597X7D5SaIfPk7x7Rj3Y256QMy32256Yh92EC2lLr+U";
> > > X-Organization: RBBSG
> > > X-Mailconverter: SoupGate-Linux v1.24
> > > X-Report-Abuse-To: newsmaster@fidonet.fi
> > > X-Spam-Checker-Version: SpamAssassin 4.0.0
> > > X-Comment-To: All
> > >
> > > Recently, I bought  2  new Kingston Exodia  256 GB  USB sticks
> > > from Canada Computers, the store in Toronto I've used for  25 yr .
> > > With many previous new USB sticks of sizes  <= 128 GB
> > > & which came with a VFat filesystem,
> > > I simply repartitioned them using Fdisk, which created a Linux
> > > partition
> > > & then used 'mke2fs' to format them with an Ext2 filesystem.
> > > This time, something has gone wrong :
> > >
> > >   root:538 ~> mke2fs /dev/sdb1
> > >   mke2fs 1.47.0 (5-Feb-2023)
> > >
> > > ----- End forwarded message -----
> > >
> > > --
> > >  
> ========================,,============================================
> > > SUPPORT     ___________//___,   Philip Webb
> > > ELECTRIC   /] [] [] [] [] []|   Cities Centre, University of  
> Toronto
> > > TRANSIT    `-O----------O---'   purslowatcadotinterdotnet
> >
> > Are you posting to this group by the mailing list address
> > or by making  a usenet post ? -- it would seem odd that it suggests
> > you send your message to the mailing list address,
> > if that is what you did in the first place.
> > I suspect the bofh admins might be interested about the possible  
> breakage,
> > but also that others will do that, if actually necessary.
> 
> As always since 2003,
> I posted to 'gentoo-user@lists.gentoo.org (Gentoo User)' using Mutt.
> 
> > I suspect the message might actually be legitimate.
> > I access this group as a mailing list,
> > but I also read usenet using Pan as a newsreader
> > and recognize bofh.it as a usenet server
> > that may well be where the gateway between this mailing list
> > and the linked usenet group happens.
> > I access usenet from eternalseptember.org
> > and bofh gets mentioned occasionally in their support groups.
> > I also just looked at linux.gentoo.users
> > and your message above is already posted there,
> > so it looks like the "administrative reasons" have been resolved.
> 
> I've never heard of such a news group & didn't even know they still  
> existed.
> I'm not sure I want any of my e-mails forwarded to another address by  
> a bot,
> which could lead to all sorts of nasty results.  Certainly,
> Gentoo should guarantee that nothing in its list software does such a  
> thing.
> I hope someone else can see that it's fixed :
> I didn't cause it & don't feel like doing work to fix it.
I admit to knowing little to nothing about the history of gateways  
between a mailing list and a usenet group, but it's been going on for a  
long time.  I'm pretty sure the group's moderation is essentially the  
same as the mailing list, and even the list can be read by lurkers.  I  
don't think anything counts as broken here (except whatever caused that  
email to be sent to you.)  Perhaps a Gentoo dev will chime in regarding  
any official policy about this, but I don't think there is anything  
that needs to be fixed.


^ permalink raw reply	[flat|nested] 5+ messages in thread

end of thread, other threads:[~2025-02-16  0:42 UTC | newest]

Thread overview: 5+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2025-02-15 22:40 [gentoo-user] bot attack ? Philip Webb
2025-02-15 23:17 ` Dale
2025-02-15 23:21 ` Jack
2025-02-15 23:52   ` Philip Webb
2025-02-16  0:40     ` Jack

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox