email address being harvested from ports website

[Erich Dollansky]

Hi,

On Sat, 11 Apr 2015 09:02:32 -0400
Ernie Luzar <luzar722 at gmail.com> wrote:

> Erich Dollansky wrote:
> > On Fri, 10 Apr 2015 09:31:41 -0400
> > Ernie Luzar <luzar722 at gmail.com> wrote:
> > 
> >> I maintain 4 ports and within the last 6 months I have started
> >> receiving large amounts of spam on the ports maintainer email
> > 
> > this is an old subject. Some harvester got registered here and
> > collect the address of every e-mail posted to this list. They
> > started a long time ago by directly answering every e-mail sent out
> > by the list and went now to typical spamming.
> > 
> > There is no real way against this. Registration makes it more
> > difficult but not impossible. 
> > 
> > But they are very easy to filter.
> > 
> >> The http://www.freebsd.org/ports/ website is being harvested for
> >> email addresses.
> >>
> > It is not the web-site, it is the lists from where they get the
> > e-mail addresses.
> > 
> >> We all have personally experienced spam email. Now the volunteers
> >> who create and maintain the ports in the Freebsd ports collection
> >> are being targeted with spam.
> >>
> > They are very easy to filter. So, why bother.
> > 
> 
> As the O.P. the maintainer email addresses are not used for every day 
> use. There are special email addresses created just for the
> individual port. After updating the ports with new email addresses
> that have never had email traffic using them I still got spam within
> a few days of the the port update.
> 
isn't the mail address then in the port's makefile?

The filtering of spam becomes a problem then. 

> This has nothing to do with the email address I use for this list.
> 
> The http://www.freebsd.org/ports/ website is being harvested for
> email addresses.
> 
> The maintainer email should not be shown to the public.
> 
And the e-mail address in the Makefile? I think, somebody who can write
a script to get the e-mail addresses out of the website like this
should not have a real problem to get them out of the ports. 

Of course, the e-mail address should be hardly needed on the web site.
Everybody who has to contact the maintainer also has access to the
makefile.

Erich