[SAC] [OSGeo] #2757: Possible postfix issues since osgeo6 upgrade

[OSGeo]

#2757: Possible postfix issues since osgeo6 upgrade
---------------------------+----------------------------------------
 Reporter:  robe           |       Owner:  sac@…
     Type:  task           |      Status:  new
 Priority:  normal         |   Milestone:  Sysadmin Contract 2022-II
Component:  Systems Admin  |  Resolution:
 Keywords:                 |
---------------------------+----------------------------------------

Comment (by strk):

 The Delivery Status Notification is being sent FROM mailer-
 daemon at osgeo6.osgeo.osuosl.org to the mailing list addresses. I've seen
 this happening starting April 30, to these mailing lists:
 - geoforall-northamerica at lists.osgeo.org
 - geoforall-africa at lists.osgeo.org
 - geoforall-europe at lists.osgeo.org
 - geoforall-asiaaustralia at lists.osgeo.org
 - geoforall-iberoamerica at lists.osgeo.org
 - geoforall at lists.osgeo.org
 - geoserver-security at lists.osgeo.org

 On average, an email a day to each of the above mailing lists.

 Since mailer-daemon@ is not a subscriber, for each mail the -owner@ for
 the target mailing list replied to mailer-daemon@ with a "Your message to
 ... awaits moderator approval" response.

 The response email does not contain the full detail of the original mail
 (the one sent from mailer-daemon to mailing list) so further inspection is
 not possible from where I stand at the moment.

 The question is: WHY would mailer-daemon@ send a Delivery Status
 Notification (with subject "Successful Mail Delivery Report") to a mailing
 list? Was it a spoofed attempt by some hacker or did MTA receive an email
 requesting status notification from the Mailman with mailing list address
 as Sender ?

-- 
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2757#comment:2>
OSGeo <https://osgeo.org/>
OSGeo committee and general foundation issue tracker.