[U-Boot] [MailServer Notification]Web Reputation Notification

http://www.bestdvr.ru has been detected as suspicious URLs,and Quarantine to user's spam folder has been taken on 10/4/2011 4:45:02 AM. Message details: Server: TAMPA101EM Sender: ScanMailAdmin@sypris.com; Recipient: u-boot@lists.denx.de; Subject: Suspicious URL:[U-Boot] [MailServer Notification]Web Reputation Notification

Please Blacklist all mails from this domain "sypris.com"
Thanks, AWG

Hi Abdoulaye,
Please Blacklist all mails from this domain "sypris.com"
Done, but even though, I could not undo the already sent mails.
I'm trying to find out who is repsonsible for this mess.
Thanks Detlev

Hi Detlev,
On 10/04/11 11:53, Detlev Zundel wrote:
Hi Abdoulaye,
Please Blacklist all mails from this domain "sypris.com"
Done, but even though, I could not undo the already sent mails.
I'm trying to find out who is repsonsible for this mess.
I don't know who's responsible for this, but those emails say something about www . bestdrv . ru I've seen this address in emails (patches) from Brilliantov Kirill Vladimirovich <brilliantov at byterg . ru> in series: [PATCH 0/3] add new PHY chips support

Hi Igor,
Hi Detlev,
On 10/04/11 11:53, Detlev Zundel wrote:
Hi Abdoulaye,
Please Blacklist all mails from this domain "sypris.com"
Done, but even though, I could not undo the already sent mails.
I'm trying to find out who is repsonsible for this mess.
I don't know who's responsible for this, but those emails say something about www . bestdrv . ru I've seen this address in emails (patches) from Brilliantov Kirill Vladimirovich <brilliantov at byterg . ru> in series: [PATCH 0/3] add new PHY chips support
Yes, I have come to the same conclusion. My russian is not that good, but that URL does not look very malicious to me. The fact that it appeared in a mail from a real contributor to U-Boot[1] also backs this fact. Well ok, the patch was for an old U-Boot, but still, it's a real patch ;)
It seems that the sypris people have a very misconfigured filter software with questionable filter rules. I'm waiting for an answer from their postmaster.
Cheers Detlev
[1] http://lists.denx.de/pipermail/u-boot/2011-October/103191.html

On 10/04/11 13:06, Detlev Zundel wrote:
Hi Igor,
Hi Detlev,
On 10/04/11 11:53, Detlev Zundel wrote:
Hi Abdoulaye,
Please Blacklist all mails from this domain "sypris.com"
Done, but even though, I could not undo the already sent mails.
I'm trying to find out who is repsonsible for this mess.
I don't know who's responsible for this, but those emails say something about www . bestdrv . ru I've seen this address in emails (patches) from Brilliantov Kirill Vladimirovich <brilliantov at byterg . ru> in series: [PATCH 0/3] add new PHY chips support
Yes, I have come to the same conclusion. My russian is not that good, but that URL does not look very malicious to me.
Indeed, it does not.
The fact that it appeared in a mail from a real contributor to U-Boot[1] also backs this fact. Well ok, the patch was for an old U-Boot, but still, it's a real patch ;)
Right, I'm not trying to convict anybody, just that URL jumped in my mind, when I was browsing through... (I also misspelled it, but who cares...)
It seems that the sypris people have a very misconfigured filter software with questionable filter rules. I'm waiting for an answer from their postmaster.
Hope you'll get it quick...
Cheers Detlev
[1] http://lists.denx.de/pipermail/u-boot/2011-October/103191.html
Another question, is the email address of the sender of those notification mails subscribed to u-boot mailing list? Or can people send email to the list without being subscribed?

Hi Igor,
[...]
Another question, is the email address of the sender of those notification mails subscribed to u-boot mailing list? Or can people send email to the list without being subscribed?
This mailing list is by intent an open mailing list, i.e. also non-subscribers can post to the list. This has proven to be very helpful as people can simply CC the mailing list with topics brought up on other mailing lists (for example the linux mailing lists). I sincerely want to keep this feature as it encourages sharing of information.
Note that the moving of the arm linux mailing list[1] happened because other people think alike (see [2] if you have more time ;).
Cheers Detlev
[1] http://lwn.net/Articles/348044/ [2] http://lists.arm.linux.org.uk/lurker/thread/20090812.201754.6cebb291.en.html...
participants (4)
-
Abdoulaye Walsimou Gaye
-
Administrator
-
Detlev Zundel
-
Igor Grinberg