On 09/28/2015 12:04 PM, Matthew Saltzman wrote:
FIY, the ones I found were:
- ^nkymtky+.*@gmail\.com
- ^kihuwzl+.*@gmail\.com
- ^kihuotter+.*@gmail\.com
- ^hulexchan+.*@gmail\.com
- ^ewnetwork+.*@gmail\.com
- ^damofah+.*@gmail\.com
- ^bustysarahrae+.*@gmail\.com
- ^vujovich+.*@usc\.edu
- ^yesboobsofficial+.*@gmail\.com
- ^yowesephth+.*@gmail\.com
- ^ewnetwork2+.*@gmail\.com
- ^nwplayer123+.*@gmail\.com
So I guessed that if I could just block those (with embedded periods), I'd have the issue covered. Have others seen other addresses?
These
bustys.arahrae+digits@gmail.com dam.ofah+digits@gmail.com ewne.twork2+digits@gmail.com ewnet.work+digits@gmail.com hul.exchan+digits@gmail.com kihuo.tter+digits@gmail.com kih.uwzl+digits@gmail.com nky.mtky+digits@gmail.com nw.player123+digits@gmail.com vujovich+digits@usc.edu yesboo.bsofficial+digits@gmail.com yowesep.hth+digits@gmail.com
are just the ones seen at mail.python.org on Sept 28, CEST. I have seen lots of others and other domains. The initial ones a few weeks ago had only 5 digits, but lately, they all have more.
As noted in the post at https://mail.python.org/pipermail/mailman-users/2015-August/079668.html, I checked and there was only one member of one list out of all the python.org list subscribers that had a local part ending with '+' and digits and it only had one digit between the '+' and '@'.
There are a few that match the '+' followed by anything followed by at least 3 digits followed by @ RE, so this RE
^.*\+\d(3,}@
which requires 3 or more digits and only digits between + and @ is safer, and
^.*\+\d(5,}@
is safer still and I think would get all the ones I'm currently seeing.
-- Mark Sapiro mark@msapiro.net The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan