On 30.10.2012 19:52, Michal Trojnara wrote:
You were clever enough to send the email via TOR, but not enough to subscribe the mailing list via TOR.
He also seems unable to avoid giving the same e-mail address in the faked response:
From: Michal Trojnara <odalim29@gmail.com>
that already appeared in the original request:
From: magali morales <odalim29@gmail.com>
The latter seems to have actually been sent through Google, sans TOR:
Received-SPF: Pass (sender SPF authorized) identity=mailfrom; client-ip=74.125.83.48; helo=mail-ee0-f48.google.com; envelope-from=odalim29@gmail.com; receiver=stunnel-users@stunnel.org Received: from mail-ee0-f48.google.com (mail-ee0-f48.google.com [74.125.83.48]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (No client certificate requested) by linode.mirt.net (Postfix) with ESMTPS id 557541C123 for <stunnel-users@stunnel.org>; Thu, 25 Oct 2012 20:04:18 +0200 (CEST)
You might want to involve the abuse contacts there, too. Regards, J. Bern -- *NEU* - NEC IT-Infrastruktur-Produkte im <http://www.linworks-shop.de/>: Server--Storage--Virtualisierung--Management SW--Passion for Performance Jochen Bern, Systemingenieur --- LINworks GmbH <http://www.LINworks.de/> Postfach 100121, 64201 Darmstadt | Robert-Koch-Str. 9, 64331 Weiterstadt PGP (1024D/4096g) FP = D18B 41B1 16C0 11BA 7F8C DCF7 E1D5 FAF4 444E 1C27 Tel. +49 6151 9067-231, Zentr. -0, Fax -299 - Amtsg. Darmstadt HRB 85202 Unternehmenssitz Weiterstadt, Geschäftsführer Metin Dogan, Oliver Michel