Persistent spam source!

I got the following from one of my list admins. Any suggestions as to what might be going on? I've verified that the address in question is indeed on the discard_these_nonmembers list and that the problem address isn't already subscribed.
So we keep getting spam postings from jeffrey@elespectaddor.com
caught in the "needs approval" filter. He's not a member. I've
added him to the non-member filter under "List of non-member
addresses whose postings will be automatically discarded" and
banned him from membership. But half a dozen times a day we're
still getting requests to approve a spam posting when the
options I've set up are to discard anything from him.
How are these slipping through? And is there anything we can do
about it? It's not a disaster, but it sure is a pain.
Our MM version is 2.1.18-1.
--
Lindsay Haisley | "The first casualty when war comes is truth"
FMP Computer Servces |
512-259-1190 | -- Hiram W Johnson
http://www.fmp.com |

What appears to be happening here is that the envelope sender address for these spams is AdrianaCaldwell@archive.elespectaddor.com which matches a rule in header_filter_rules to hold mail addresses matching the regexp ".*Archive". So it _appears_ that directives in header_filter_rules trump directives from discard_these_nonmembers. Is this indeed the case? Would specifying the above address verbatim in discard_these_nonmembers give this directive precedence?
On Sat, 2016-01-23 at 19:35 -0600, Lindsay Haisley wrote:
I got the following from one of my list admins. Any suggestions as to what might be going on? I've verified that the address in question is indeed on the discard_these_nonmembers list and that the problem address isn't already subscribed.
So we keep getting spam postings from jeffrey@elespectaddor.com caught in the "needs approval" filter. He's not a member. I've added him to the non-member filter under "List of non-member addresses whose postings will be automatically discarded" and banned him from membership. But half a dozen times a day we're still getting requests to approve a spam posting when the options I've set up are to discard anything from him. How are these slipping through? And is there anything we can do about it? It's not a disaster, but it sure is a pain.
Our MM version is 2.1.18-1.
--
Lindsay Haisley | "The first casualty when war comes is truth"
FMP Computer Servces |
512-259-1190 | -- Hiram W Johnson
http://www.fmp.com |
participants (1)
-
Lindsay Haisley