Received: from localhost (unknown [200.46.204.183]) by mail.postgresql.org (Postfix) with ESMTP id B751D6309F0; Thu, 5 Mar 2009 09:27:41 -0400 (AST) Received: from mail.postgresql.org ([200.46.204.86]) by localhost (mx1.hub.org [200.46.204.183]) (amavisd-maia, port 10024) with ESMTP id 78702-09; Thu, 5 Mar 2009 09:27:37 -0400 (AST) X-Greylist: from auto-whitelisted by SQLgrey-1.7.6 X-Greylist: from auto-whitelisted by SQLgrey-1.7.6 Received: from lists.commandprompt.com (host-159.commandprompt.net [207.173.203.159]) by mail.postgresql.org (Postfix) with ESMTP id A95E16339CB; Thu, 5 Mar 2009 09:27:37 -0400 (AST) Received: from perhan.alvh.no-ip.org (200-126-91-44.bk6-dsl.surnet.cl [200.126.91.44]) (authenticated bits=0) by lists.commandprompt.com (8.13.8/8.13.8) with ESMTP id n25DY24h021884 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Thu, 5 Mar 2009 05:34:04 -0800 Received: by perhan.alvh.no-ip.org (Postfix, from userid 1000) id CFD4747CDE; Thu, 5 Mar 2009 10:27:28 -0300 (CLST) Date: Thu, 5 Mar 2009 10:27:28 -0300 From: Alvaro Herrera To: "Marc G. Fournier" Cc: "Marc G. Fournier" , w^3 Subject: Re: news gateway malfunctioning? Message-ID: <20090305132728.GC4087@alvh.no-ip.org> References: <20090304194501.GD12854@alvh.no-ip.org> <20090305001422.O1736@hub.org> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="NMuMz9nt05w80d4+" Content-Disposition: inline In-Reply-To: <20090305001422.O1736@hub.org> User-Agent: Mutt/1.5.18 (2008-05-17) X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.0 (lists.commandprompt.com [207.173.203.159]); Thu, 05 Mar 2009 05:34:05 -0800 (PST) X-Virus-Scanned: Maia Mailguard 1.0.1 X-Spam-Status: No, hits=3.519 tagged_above=0 required=5 tests=MIME_QP_LONG_LINE=1.819, SARE_OEM_FAKE_YEAR=1.7 X-Spam-Level: *** X-Archive-Number: 200903/16 X-Sequence-Number: 16670 --NMuMz9nt05w80d4+ Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Marc G. Fournier wrote: > On Wed, 4 Mar 2009, Alvaro Herrera wrote: > >> Lately I have gotten a number of moderation request for -hackers and >> other lists that look like the attached message. From the header it >> looks to me like they are coming from the USENET gateway; I wonder >> what's up with the "RCPT TO" stuff at the top of the body of the >> message. Is the gateway getting confused by the mangling done by the >> spam checker? > > I'm a bit lost here, so bare with me ... > > First question, I guess, is whether there are othe rmessages showing up > that RCPT TO stuff, or is it just these types of 'spam' messages ... ? As far as I can tell, it's only spam messages that are KOI8-R encoded. Strangely no other spam message seems to suffer the same fate. Maybe something is buggy in the usenet gateway path that gets confused by a KOI8-R escape sequence or something, and ends up inserting an extra carriage return. > The oddness here is that it almost looks like someone manually connected > to the smtp port and tried to inject the message manually ... and ended > up injecting the 'formatted message' that has all the SMTP cmds embeded > ... Well, it's consistent enough that I doubt that's the case. I attach a pair of messages here. As far as I can tell, they are both exactly the same message, except that one was passed through the usenet gateway. -- Alvaro Herrera http://www.CommandPrompt.com/ PostgreSQL Replication, Consulting, Custom Development, 24x7 support --NMuMz9nt05w80d4+ Content-Type: message/rfc822 Content-Disposition: inline Return-Path: X-Original-To: alvherre@alvh.no-ip.org Delivered-To: alvherre@alvh.no-ip.org Received: from mx2.hub.org (mx2.hub.org [200.46.204.254]) by perhan.alvh.no-ip.org (Postfix) with ESMTP id D772047C48 for ; Wed, 4 Mar 2009 11:20:16 -0300 (CLST) Received: from postgresql.org (mail.postgresql.org [200.46.204.86]) by mx2.hub.org (Postfix) with ESMTP id 774761E81BC8; Wed, 4 Mar 2009 10:20:14 -0400 (AST) MIME-Version: 1.0 X-Mailer: MIME-tools 5.427 (Entity 5.427) To: pgsql-hackers-owner@postgresql.org From: pgsql-hackers-owner@postgresql.org Subject: AFDB-1B52-CAF6 : CONSULT from pgsql-hackers (post) Reply-To: majordomo@postgresql.org X-Loop: majordomo X-Mailing-List: pgsql-hackers@postgresql.org Content-Type: multipart/mixed; boundary="----------=_1236176415-75608-0" Date: Wed, 04 Mar 2009 10:20:16 -0400 Message-ID: This is a multi-part message in MIME format... ------------=_1236176415-75608-0 Content-Type: text/plain; charset="us-ascii" Content-Disposition: inline Content-Transfer-Encoding: binary Content-Language: en __ The following request: "(post to pgsql-hackers)" was sent to postgresql.org by www.softmarket.rumix@saratoff.ru (=?koi8-r?B?88/T1MHXzMXOycUgzs/Nxc7LzMHU1dLZIMTFzA==?=). The request requires your confirmation for the following reason(s): The author (www.softmarket.rumix@saratoff.ru (=?koi8-r?B?88/T1MHXzMXOycUgzs/Nxc7LzMHU1dLZIMTFzA==?=)) is not a member of any of the restrict_post groups. To accept or reject this request, please do one of the following: 1. If you have web browsing capability, visit and follow the instructions there. 2. Reply to majordomo@postgresql.org with one of the following two commands in the body of the message: accept reject (The number AFDB-1B52-CAF6 must be in the Subject header) 3. Reply to majordomo@postgresql.org with one of the following two commands in the body of the message: accept AFDB-1B52-CAF6 reject AFDB-1B52-CAF6 4. If you know the administrative password for the pgsql-hackers list, all pending requests can be managed by visiting If you do not respond within 7 days, this token will expire, and the request will not be completed. ------------=_1236176415-75608-0 Content-Type: message/rfc822 Content-Disposition: inline Content-Transfer-Encoding: 8bit Content-Description: Original message Return-Path: Delivered-To: pgsql-hackers-postgresql.org@mail.postgresql.org Received: from localhost (unknown [200.46.204.183]) by mail.postgresql.org (Postfix) with ESMTP id 984FE63489C for ; Wed, 4 Mar 2009 10:20:13 -0400 (AST) Received: from mail.postgresql.org ([200.46.204.86]) by localhost (mx1.hub.org [200.46.204.183]) (amavisd-maia, port 10024) with ESMTP id 54288-07 for ; Wed, 4 Mar 2009 10:19:57 -0400 (AST) Received: from news.hub.org (news.hub.org [200.46.204.72]) by mail.postgresql.org (Postfix) with ESMTP id 444BE634787 for ; Wed, 4 Mar 2009 10:19:57 -0400 (AST) Received: from news.hub.org (news.hub.org [200.46.204.72]) by news.hub.org (8.14.3/8.14.3) with ESMTP id n24EJpuG054048 for ; Wed, 4 Mar 2009 10:19:51 -0400 (AST) (envelope-from news@news.hub.org) Received: (from news@localhost) by news.hub.org (8.14.3/8.14.3/Submit) id n24Do5iI015916 for pgsql-hackers@postgresql.org; Wed, 4 Mar 2009 09:50:05 -0400 (AST) (envelope-from news) From: www.softmarket.rumix@saratoff.ru (=?koi8-r?B?88/T1MHXzMXOycUgzs/Nxc7LzMHU1dLZIMTFzA==?=) X-Newsgroups: pgsql.hackers Subject: =?koi8-r?B?5MXMz9DSz8na18/E09TXzyAtICDP0sfBzsnawcPJ0SDEz8vVzcXO1M/P?= =?koi8-r?B?ws/Sz9TBINDSxcTQ0snR1MnR?= Date: Wed, 4 Mar 2009 23:34:14 +0800 Organization: Hub.Org Networking Services Lines: 28 Sender: news@news.hub.org Message-ID: <000d01c99cde$ac857530$6400a8c0@www.softmarket.rumix> Mime-Version: 1.0 X-Complaints-To: usenet@news.hub.org X-Received: from FOZVSRTKJP ([116.22.234.180]) by news.hub.org (8.14.3/8.14.3) with ESMTP id n24Do284015560; Wed, 4 Mar 2009 09:50:04 -0400 (AST) (envelope-from www.softmarket.rumix@saratoff.ru) X-Received: from 116.22.234.180 by mail.saratoff.ru; Wed, 4 Mar 2009 23:34:14 +0800 X-To: X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.3790.1830 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.1830 To: pgsql-hackers@postgresql.org X-Virus-Scanned: Maia Mailguard 1.0.1 X-Spam-Status: No, hits=4.319 tagged_above=0 required=5 tests=MIME_QP_LONG_LINE=1.819, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E4_51_100=1.5, RAZOR2_CHECK=0.5 X-Spam-Level: **** Content-Type: text/plain; charset="koi8-r" Content-Transfer-Encoding: quoted-printable =E4=C5=CC=CF=D0=D2=CF=C9=DA=D7=CF=C4=D3=D4=D7=CF - =CF=D2=C7=C1=CE=C9=DA= =C1=C3=C9=D1 =C4=CF=CB=D5=CD=C5=CE=D4=CF=CF=C2=CF=D2=CF=D4=C1 =D0=D2=C5=C4= =D0=D2=C9=D1=D4=C9=D1=20 =F7=D3=D1 =C9=CE=C6=CF=D2=CD=C1=C3=C9=D1 =D0=CF =D4=C5=CC: [495] 792*--21 2= 2, 4=FE5=FE05=FA =20=20 18 M=C1=D2t=C1 2=EF=EF9 =C7. =20=20 =F0=D2=CF=C7=D2=C1=CD=CD=C1 =CD=C5=D2=CF=D0=D2=C9=D1=D4=C9=D1 1-=CA =C4=C5= =CE=D8:=20 =EE=CF=D2=CD=C1=D4=C9=D7=CE=CF-=D0=D2=C1=D7=CF=D7=D9=C5 =C1=CB=D4=D9 =D0= =CF =C4=C5=CC=CF=D0=D2=CF=C9=DA=D7=CF=C4=D3=D4=D7=D5. =EF=D3=CE=CF=D7=CE=D9= =C5 =CB=C1=D4=C5=C7=CF=D2=C9=C9 =C4=CF=CB=D5=CD=C5=CE=D4=CF=D7. =F3=CF=DA= =C4=C1=CE=C9=C5 =F4=C1=C2=C5=CC=D1 =D5=CE=C9=C6=C9=C3=C9=D2=CF=D7=C1=CE=CE= =D9=C8 =C6=CF=D2=CD =C4=CF=CB=D5=CD=C5=CE=D4=CF=D7 =D0=D2=C5=C4=D0=D2=C9=D1= =D4=C9=D1=3D= ------------=_1236176415-75608-0-- --NMuMz9nt05w80d4+ Content-Type: message/rfc822 Content-Disposition: inline Return-Path: X-Original-To: alvherre@alvh.no-ip.org Delivered-To: alvherre@alvh.no-ip.org Received: from mx2.hub.org (mx2.hub.org [200.46.204.254]) by perhan.alvh.no-ip.org (Postfix) with ESMTP id 99BDC47C48 for ; Wed, 4 Mar 2009 11:20:32 -0300 (CLST) Received: from postgresql.org (mail.postgresql.org [200.46.204.86]) by mx2.hub.org (Postfix) with ESMTP id 690AE1E80A09; Wed, 4 Mar 2009 10:20:29 -0400 (AST) MIME-Version: 1.0 X-Mailer: MIME-tools 5.427 (Entity 5.427) To: pgsql-hackers-owner@postgresql.org From: pgsql-hackers-owner@postgresql.org Subject: B458-2AF8-2D95 : CONSULT from pgsql-hackers (post) Reply-To: majordomo@postgresql.org X-Loop: majordomo X-Mailing-List: pgsql-hackers@postgresql.org Content-Type: multipart/mixed; boundary="----------=_1236176430-75597-2" Date: Wed, 04 Mar 2009 10:20:30 -0400 Message-ID: <3240420071725fd7e06b9116499adb3e1cc347f8@postgresql.org> This is a multi-part message in MIME format... ------------=_1236176430-75597-2 Content-Type: text/plain; charset="us-ascii" Content-Disposition: inline Content-Transfer-Encoding: binary Content-Language: en __ The following request: "(post to pgsql-hackers)" was sent to postgresql.org by www.softmarket.rumix@saratoff.ru. The request requires your confirmation for the following reason(s): The author (www.softmarket.rumix@saratoff.ru) is not a member of any of the restrict_post groups. To accept or reject this request, please do one of the following: 1. If you have web browsing capability, visit and follow the instructions there. 2. Reply to majordomo@postgresql.org with one of the following two commands in the body of the message: accept reject (The number B458-2AF8-2D95 must be in the Subject header) 3. Reply to majordomo@postgresql.org with one of the following two commands in the body of the message: accept B458-2AF8-2D95 reject B458-2AF8-2D95 4. If you know the administrative password for the pgsql-hackers list, all pending requests can be managed by visiting If you do not respond within 7 days, this token will expire, and the request will not be completed. ------------=_1236176430-75597-2 Content-Type: message/rfc822 Content-Disposition: inline Content-Transfer-Encoding: 8bit Content-Description: Original message Return-Path: Delivered-To: pgsql-hackers-postgresql.org@mail.postgresql.org Received: from localhost (unknown [200.46.204.183]) by mail.postgresql.org (Postfix) with ESMTP id 61ACB634C2C for ; Wed, 4 Mar 2009 10:20:30 -0400 (AST) Received: from mail.postgresql.org ([200.46.204.86]) by localhost (mx1.hub.org [200.46.204.183]) (amavisd-maia, port 10024) with ESMTP id 53028-10 for ; Wed, 4 Mar 2009 10:20:13 -0400 (AST) Received: from news.hub.org (news.hub.org [200.46.204.72]) by mail.postgresql.org (Postfix) with ESMTP id 7D16D63485F for ; Wed, 4 Mar 2009 10:19:57 -0400 (AST) Received: from news.hub.org (news.hub.org [200.46.204.72]) by news.hub.org (8.14.3/8.14.3) with ESMTP id n24EJpuQ054048 for ; Wed, 4 Mar 2009 10:19:52 -0400 (AST) (envelope-from news@news.hub.org) Received: (from news@localhost) by news.hub.org (8.14.3/8.14.3/Submit) id n24DoI0A016093 for pgsql-hackers@postgresql.org; Wed, 4 Mar 2009 09:50:18 -0400 (AST) (envelope-from news) From: www.softmarket.rumix@saratoff.ru X-Newsgroups: pgsql.hackers Subject: (NONE) Date: Wed, 4 Mar 2009 09:50:17 -0400 (AST) Organization: Hub.Org Networking Services Lines: 62 Sender: news@news.hub.org Message-ID: <200903041350.n24DoHcw016015@news.hub.org> X-Complaints-To: usenet@news.hub.org X-Received: from ABOYGPOEYL ([116.22.234.180]) by news.hub.org (8.14.3/8.14.3) with ESMTP id n24DoHcw016015; Wed, 4 Mar 2009 09:50:17 -0400 (AST) (envelope-from www.softmarket.rumix@saratoff.ru) X-To: undisclosed-recipients:; To: pgsql-hackers@postgresql.org X-Virus-Scanned: Maia Mailguard 1.0.1 X-Spam-Status: No, hits=1.7 tagged_above=0 required=5 tests=SARE_OEM_FAKE_YEAR=1.7 X-Spam-Level: * MAIL FROM: RCPT TO: RCPT TO: RCPT TO: RCPT TO: RCPT TO: RCPT TO: RCPT TO: DATA MAIL FROM: RCPT TO: RCPT TO: RCPT TO: RCPT TO: RCPT TO: RCPT TO: RCPT TO: DATA Received: from 116.22.234.180 by fw.abbnm.com; Wed, 4 Mar 2009 23:34:32 +0800 Message-ID: <000d01c99cde$b7163b10$6400a8c0@a.kluveld> From: =?koi8-r?B?6c3JxNYgz8bJ0y3Nxc7FxNbF0sE=?= To: Subject: =?koi8-r?B?5tXOy8PJz87BzNjO2cUgz8LR2sHOzs/T1MkgIMkg3NTJy8XUICDTzNXW?= =?koi8-r?B?xcLO2cggz9TOz9vFzsnKINPFy9LF1MHS0Q==?= Date: Wed, 4 Mar 2009 23:34:32 +0800 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0007_01C99CDE.B7163B10" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.3790.2663 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2663 This is a multi-part message in MIME format. ------=_NextPart_000_0007_01C99CDE.B7163B10 Content-Type: text/plain; charset="koi8-r" Content-Transfer-Encoding: quoted-printable =EE=CF=D2=CD=C1=D4=C9=D7=CE=CF-=D0=D2=C1=D7=CF=D7=D9=C5 =C1=CB=D4=D9 =D0=CF= =C4=C5=CC=CF=D0=D2=CF=C9=DA=D7=CF=C4=D3=D4=D7=D5. =F0=D2=C1=CB=D4=C9=DE=C5= =D3=CB=C1=D1 =D2=C1=C2=CF=D4=C1 =D3 =C4=CF=CB=D5=CD=C5=CE=D4=C1=CD=C9=20 =F0=CF =D7=CF=D0p=CFc=C1=CD =D0=CF=C4=D2=CF=C2=CE=CF=CA =C9=CE=C6=CF=D2=CD=C1= =C3=C9=C9 =C9 p=C5=C7uc=D4=C1p=C1=C3uu =CF=C2p=C1=DD=C1=CA=D4=C5c=D8 =D0=CF= =D4=C5=CC: (495) 792-=C4=D7=C1=C4=C3=C1=D4=D8 =CF=C4=C9=CE-=C4=D7=C1=C4=C3= =C1=D4=D8 =C4=D7=C1, 4=FE5-4=EF-=D0=D1=D4=D8=C4=C5=D3=D1=D8 =D4=D2=C9 =20 l8 M=C1rt=C1 2OO9 =C7. =20 =F0=D2=CF=C7=D2=C1=CD=CD=C1 =CD=C5=D2=CF=D0=D2=C9=D1=D4=C9=D1 1-=CA =C4=C5=CE= =D8:=20 =EE=CF=D2=CD=C1=D4=C9=D7=CE=CF-=D0=D2=C1=D7=CF=D7=D9=C5 =C1=CB=D4=D9 =D0=CF= =C4=C5=CC=CF=D0=D2=CF=C9=DA=D7=CF=C4=D3=D4=D7=D5. =EF=D3=CE=CF=D7=CE=D9=C5= =CB=C1=D4=C5=C7=CF=D2=C9=C9 =C4=CF=CB=D5=CD=C5=CE=D4=CF=D7. =F3=CF=DA=C4=C1= =CE=C9=C5 =F4=C1=C2=C5=CC=D1 =D5=CE=C9=C6=C9=C3=C9=D2=CF=D7=C1=CE=CE=D9=C8 = =C6=CF=D2=CD =C4=CF=CB=D5=CD=C5=CE=D4=CF=D7 =D0=D2=C5=C4=D0=D2=C9=D1=D4=C9=D1= ------------=_1236176430-75597-2-- --NMuMz9nt05w80d4+--