DOS ain't dead

> > > I just got two spam emails from...

[rr]
> > I didn't get those, but I got other spam in the past rarely.

Then someone is selecting targets.

[Rugxulo]
> I don't typically read spam, and most of it gets auto-filtered into "SPAM"
> by Gmail for me (who, BTW, now give you almost 5 GB, w00t!). But yeah, I
> know I have received a very very tiny amount of spam (with like nonsense
> as subject like "mlvwz"). But AFAIK, none recently originated from here.

> > > this forum is definitely the origin - both messages had the closing
> > lines:

BTW, message headers confirm that this is true.

[rr]
> > Then these mails have been sent via mlf's contact form, which is open for
> > unregistered users and not protected by a CAPTCHA.

Can this be changed? Is there a log of true senders?

[rr]
> > Try disabling "Show e-mail link" in your profile.

That would certainly work, but it defeats the purpose of having mail capability.

[Rugxulo]
> Yeah, or just "encrypt" the address like "steve{at}whatever_DOT_com". Of
> course, it's harder for real replies to be sent (but that's probably rare
> from this forum), but most people accept that extra step these days (at
> least in newsgroups, where most spammers seem to look for targets).

Encrypting won't work in this case. Users don't see the address, only the Forum's system does, and it needs to return a message with a new password, to a real working address.