Bug 78538

Summary:	virus sent by gentoo developer in a mailing list.
Product:	Community Relations	Reporter:	Curtis Napier (RETIRED) <curtis119>
Component:	Developer Relations	Assignee:	Gentoo Community Relations Team <comrel>
Status:	RESOLVED CANTFIX
Severity:	normal	CC:	swift
Priority:	High
Version:	unspecified
Hardware:	All
OS:	All
Whiteboard:
Package list:		Runtime testing required:	---

Description Curtis Napier (RETIRED) gentoo-dev

2005-01-18 10:17:31 UTC

I have received several emails from lanius@gentoo.org which contain the W32.Beagle.X@mm virus as an attachement ( Counter_strike.cpl ). This has been happening for months. This is being sent to the gentoo-doc@lists.gentoo.org mailing list. Can lanius be contacted and asked to do a virus scan on his machine? The originating IP is 156.56.111.196 <lists.gentoo.org> but someone may be spoofing lanius' email directly. This doesn't affect me as I use only Linux based computers but some of the people on the mailing list may be using windows. The full headers are:

X-Apparently-To:	 curtis119@yahoo.com via 206.190.37.162; Mon, 17 Jan 2005 15:35:22 -0800
X-YahooFilteredBulk:	156.56.111.196
Authentication-Results:	mta108.mail.dcn.yahoo.com from=gentoo.org; domainkeys=neutral (no sig)
X-Originating-IP:	[156.56.111.196]
Return-Path:	<gentoo-doc-return-2060-curtis119=yahoo.com@lists.gentoo.org>
Received:	from 156.56.111.196 (EHLO parrot.gentoo.org) (156.56.111.196) by mta108.mail.dcn.yahoo.com with SMTP; Mon, 17 Jan 2005 15:35:22 -0800
Received:	(qmail 22020 invoked by uid 89); 17 Jan 2005 23:35:20 +0000
Mailing-List:	contact gentoo-doc-help@gentoo.org; run by ezmlm
Precedence:	bulk
List-Post:	<mailto:gentoo-doc@gentoo.org>
List-Help:	<mailto:gentoo-doc-help@gentoo.org>
List-Unsubscribe:	<mailto:gentoo-doc-unsubscribe@gentoo.org>
List-Subscribe:	<mailto:gentoo-doc-subscribe@gentoo.org>
List-Id:	Gentoo Linux mail <gentoo-doc.gentoo.org>
X-BeenThere:	gentoo-doc@gentoo.org
Delivered-To:	mailing list gentoo-doc@lists.gentoo.org
Received:	(qmail 5491 invoked from network); 17 Jan 2005 23:35:20 +0000
Date:	Tue, 18 Jan 2005 00:38:40 +0100
To:	"Gentoo-doc" <gentoo-doc@lists.gentoo.org>
From:	"Lanius" <lanius@gentoo.org>  Add to Address BookAdd to Address Book
Message-ID:	<fmbvcitnrfhwvofiryz@gentoo.org>
MIME-Version:	1.0
Content-Type:	multipart/mixed; boundary="--------adlgsefotkkpvtuvnuxq"
Subject:	[gentoo-doc] Incoming message
Content-Length:	20526

Comment 1 Jon Portnoy (RETIRED) gentoo-dev

2005-01-21 10:29:36 UTC

This is most definitely just a spoofed address. I get hundreds of these a week from various @gentoo.org addresses. He's not infected.