[clue-admin] Spam Routing Question: Why didn't it just bounce?

[Jed S. Baer]

OK, I get an admin message from from Mailman about receiving a bounce
message. But what it sent me wasn't a bounce message. It was spam sent to
lynn.danielson at clue.denver.co.us, which doesn't exist at all on the
machine -- not as an alias, not as an account, not in the mailman aliases.

I'm trying to figure out how this wound up getting processed by mailman as
a bounce message, or if it's Mailman that's confused, or I'm confused, or
what.

The mail I received was from Mailman-bounces to clue-dev-owner, so the
headers all match the expected path for it having been processed by
Mailman. IOW, it's not a spam sent to clue-dev-owner, spoofed to look like
a bounce message.

I see nothing on the server linking "Lynn.Danielson" to either Mailman or
clue-dev-owner.

Here are the headers Mailman included in the message it forwarded to me.
(Munged to thwart scraper bots)

Any thoughts?
jed


Return-Path: <pwmuemzugiwxpa at peoplepc.com>
X-Original-To: clue-dev-admin [ atsign ] clue.denver.co.us
Delivered-To: clue-dev-admin [ atsign ] clue.denver.co.us
Received: from cable200-116-1-41.epm.net.co (cable200-116-1-41.epm.net.co
	[200.116.1.41])
	by clue.cluedenver.org (Postfix) with SMTP id 09BC045A34;
	Wed, 15 Dec 2004 15:53:33 -0700 (MST)
X-Message-Info: UKdpR44nhrMQG21BHMiuyRU581YVEnzvVK0BCZ132G8s29P
Received: (from mdw248million at localhost)
	by wiz020-eaten36.qd50xwt.lycos.co.uk (8.56.41/2.44.76) id gw1DD3pd2360;
	Wed, 15 Dec 2004 17:43:29 -0400 GMT
X-Authentication-Warning: m63-whup8.btk6u.lycos.co.uk: ojj1configure set
	sender to pwmuemzugiwxpa at peoplepc.com using -z
MIME-Version: 1.0
Date: Wed, 15 Dec 2004 15:44:29 -0600
From: Catalina Snow <pwmuemzugiwxpa at peoplepc.com>
Subject: The new and revollutionaary peenjs enlaargment tool! druid
To: lynn.danielson [ atsign ] clue.denver.co.us
Message-Id: <wvq9jia0-09698886096457012-23173278331719177 at genre66>
Content-Type: multipart/alternative;
	boundary="--966002258658743"

-- 
http://s88369986.onlinehome.us/freedomsight/

... it is poor civic hygiene to install technologies that could someday
facilitate a police state. -- Bruce Schneier