[clue-admin] Spam Routing Question: Why didn't it just bounce?

[David Anselmi]

Jed S. Baer wrote:
[...]
> Yeah, OK. The To: header is forged. I tested by sending a mail directly to
> clue-dev-admin, and I get the same result -- Mailman (or something which
> looks suspiciously like it) sends the message to clue-dev-owner, whence it
> comes to me.
> 
> Well, one thing is, the "admin" variants of the mailing list addresses
> should be live, shouldn't they? (Well, obviously they're being handled.)

Why do you think mailman is involved?  Oh, I see.  You just gave us the 
spam header, not the header of the message you received.  I missed that 
originally.

It seems that this is just the behavior of spam sent to the 
clue-dev-admin address.  Mailman takes it in and generates a message to 
clue-dev-owner.

Eventually I found docs on mailman's email interface here:

http://www.list.org/mailman-member/node10.html

so maybe that helps you.  But it seems to indicate that -owner and 
-admin behave the same and clearly they don't.

Interestingly, exim puts the envelope to in the Recieved: header and 
postfix seems not to.  That might have made it more obvious what was 
happening.

HTH,
Dave