[U-Boot] [MailServer Notification]Web Reputation Notification

[U-Boot] [MailServer Notification]Web Reputation Notification

[Administrator]

http://www.bestdvr.ru has been detected as
suspicious URLs,and Quarantine to user's spam folder has been
taken on 10/4/2011 4:45:02 AM.
Message details:
Server: TAMPA101EM
Sender: ScanMailAdmin at sypris.com;
Recipient: u-boot at lists.denx.de;
Subject: Suspicious URL:[U-Boot] [MailServer Notification]Web Reputation 
Notification 

[U-Boot] WTF (Re: [MailServer Notification]Web Reputation Notification)

[Abdoulaye Walsimou Gaye]

Please Blacklist all mails from this domain "sypris.com"

Thanks,
AWG

[U-Boot] WTF (Re: [MailServer Notification]Web Reputation Notification)

[Detlev Zundel]

Hi Abdoulaye,

> Please Blacklist all mails from this domain "sypris.com"

Done, but even though, I could not undo the already sent mails.

I'm trying to find out who is repsonsible for this mess.

Thanks
  Detlev

-- 
Restrict Digital Restrictions Management:
If you can't copy it - don't buy it
--
DENX Software Engineering GmbH,      MD: Wolfgang Denk & Detlev Zundel
HRB 165235 Munich,  Office: Kirchenstr.5, D-82194 Groebenzell, Germany
Phone: (+49)-8142-66989-40 Fax: (+49)-8142-66989-80 Email: dzu at denx.de

[U-Boot] WTF (Re: [MailServer Notification]Web Reputation Notification)

[Igor Grinberg]

Hi Detlev,


On 10/04/11 11:53, Detlev Zundel wrote:
> Hi Abdoulaye,
> 
>> Please Blacklist all mails from this domain "sypris.com"
> 
> Done, but even though, I could not undo the already sent mails.
> 
> I'm trying to find out who is repsonsible for this mess.

I don't know who's responsible for this, but
those emails say something about www . bestdrv . ru
I've seen this address in emails (patches) from
Brilliantov Kirill Vladimirovich <brilliantov@byterg . ru>
in series: [PATCH 0/3] add new PHY chips support


-- 
Regards,
Igor.

[U-Boot] WTF (Re: [MailServer Notification]Web Reputation Notification)

[Detlev Zundel]

Hi Igor,

> Hi Detlev,
>
>
> On 10/04/11 11:53, Detlev Zundel wrote:
>> Hi Abdoulaye,
>> 
>>> Please Blacklist all mails from this domain "sypris.com"
>> 
>> Done, but even though, I could not undo the already sent mails.
>> 
>> I'm trying to find out who is repsonsible for this mess.
>
> I don't know who's responsible for this, but
> those emails say something about www . bestdrv . ru
> I've seen this address in emails (patches) from
> Brilliantov Kirill Vladimirovich <brilliantov@byterg . ru>
> in series: [PATCH 0/3] add new PHY chips support

Yes, I have come to the same conclusion.  My russian is not that good,
but that URL does not look very malicious to me.  The fact that it
appeared in a mail from a real contributor to U-Boot[1] also backs this
fact.  Well ok, the patch was for an old U-Boot, but still, it's a real
patch ;)

It seems that the sypris people have a very misconfigured filter
software with questionable filter rules.  I'm waiting for an answer from
their postmaster.

Cheers
  Detlev

[1] http://lists.denx.de/pipermail/u-boot/2011-October/103191.html

-- 
.. most of the finest products of an applied mathematician's fancy must be
rejected, as soon as they have been created, for the brutal but sufficient
reason that they do not fit the facts.            -- G. H. Hardy
--
DENX Software Engineering GmbH,      MD: Wolfgang Denk & Detlev Zundel
HRB 165235 Munich,  Office: Kirchenstr.5, D-82194 Groebenzell, Germany
Phone: (+49)-8142-66989-40 Fax: (+49)-8142-66989-80 Email: dzu at denx.de

[U-Boot] WTF (Re: [MailServer Notification]Web Reputation Notification)

[Igor Grinberg]

On 10/04/11 13:06, Detlev Zundel wrote:
> Hi Igor,
> 
>> Hi Detlev,
>>
>>
>> On 10/04/11 11:53, Detlev Zundel wrote:
>>> Hi Abdoulaye,
>>>
>>>> Please Blacklist all mails from this domain "sypris.com"
>>>
>>> Done, but even though, I could not undo the already sent mails.
>>>
>>> I'm trying to find out who is repsonsible for this mess.
>>
>> I don't know who's responsible for this, but
>> those emails say something about www . bestdrv . ru
>> I've seen this address in emails (patches) from
>> Brilliantov Kirill Vladimirovich <brilliantov@byterg . ru>
>> in series: [PATCH 0/3] add new PHY chips support
> 
> Yes, I have come to the same conclusion.  My russian is not that good,
> but that URL does not look very malicious to me.

Indeed, it does not.

> The fact that it
> appeared in a mail from a real contributor to U-Boot[1] also backs this
> fact.  Well ok, the patch was for an old U-Boot, but still, it's a real
> patch ;)

Right, I'm not trying to convict anybody,
just that URL jumped in my mind, when I was browsing through...
(I also misspelled it, but who cares...)

> 
> It seems that the sypris people have a very misconfigured filter
> software with questionable filter rules.  I'm waiting for an answer from
> their postmaster.

Hope you'll get it quick...

> 
> Cheers
>   Detlev
> 
> [1] http://lists.denx.de/pipermail/u-boot/2011-October/103191.html
> 

Another question, is the email address of the sender
of those notification mails subscribed to u-boot mailing list?
Or can people send email to the list without being subscribed?

-- 
Regards,
Igor.

[U-Boot] WTF (Re: [MailServer Notification]Web Reputation, > Notification)

[Brilliantov Kirill Vladimirovich]

Sorry, usually my e-mail don't lead to similar effect, it is the first time.

-- 
Best regards,
Brilliantov Kirill Vladimirovich

[U-Boot] WTF (Re: [MailServer Notification]Web Reputation, > Notification)

[Detlev Zundel]

Hi Kirill,

> Sorry, usually my e-mail don't lead to similar effect, it is the first
> time.

You don't have to excuse anything.  The problem here is clearly on the
people administring the machine that sent those mails.

All _you_ could do is rebase the patches to a current U-Boot ;)

Cheers
  Detlev

-- 
The  mathematician's patterns,  like the  painter's or  the poet's,  must be
beautiful;  the ideas, like the colours or the words, must fit together in a
harmonious way. Beauty is the first test: there is no permanent place in the
world for ugly mathematics.                       -- G. H. Hardy
--
DENX Software Engineering GmbH,      MD: Wolfgang Denk & Detlev Zundel
HRB 165235 Munich,  Office: Kirchenstr.5, D-82194 Groebenzell, Germany
Phone: (+49)-8142-66989-40 Fax: (+49)-8142-66989-80 Email: dzu at denx.de

[U-Boot] WTF (Re: [MailServer Notification]Web Reputation Notification)

[Detlev Zundel]

Hi Igor,

[...]

> Another question, is the email address of the sender
> of those notification mails subscribed to u-boot mailing list?
> Or can people send email to the list without being subscribed?

This mailing list is by intent an open mailing list, i.e. also
non-subscribers can post to the list.  This has proven to be very
helpful as people can simply CC the mailing list with topics brought up
on other mailing lists (for example the linux mailing lists).  I
sincerely want to keep this feature as it encourages sharing of
information.

Note that the moving of the arm linux mailing list[1] happened because
other people think alike (see [2] if you have more time ;).

Cheers
  Detlev

[1] http://lwn.net/Articles/348044/
[2] http://lists.arm.linux.org.uk/lurker/thread/20090812.201754.6cebb291.en.html#i20090812.201754.6cebb291

-- 
He thinks he's really smooth, but he's only C^1.
--
DENX Software Engineering GmbH,      MD: Wolfgang Denk & Detlev Zundel
HRB 165235 Munich,  Office: Kirchenstr.5, D-82194 Groebenzell, Germany
Phone: (+49)-8142-66989-40 Fax: (+49)-8142-66989-80 Email: dzu at denx.de