Do sender filters apply to subscription requests?
Hello, One of my instance's lists is apparently getting spammed with subscription requests from addresses outside my org. In sender filters, for reject_these_nonmembers I put ^(?!.*(example)\.com$) [actual domain redacted], but the requests still get through to the moderation queue. Do the sender filters apply only to posts, not to subscription requests? If so, is there any way to automatically reject subscription requests based on a regex?
Kevin Bowen kevin.t.bowen@gmail.com kevin@ucsd.edu
On 9/17/19 10:37 AM, Kevin Bowen wrote:
Do the sender filters apply only to posts, not to subscription requests?
Yes.
If so, is there any way to automatically reject subscription requests based on a regex?
Yes, add the regex to Privacy options... -> Subscription rules -> ban_list.
Also, beginning with Mailman 2.1.21 there is a mm_cfg.py GLOBAL_BAN_LIST setting. See the description in Defaults.py.
-- Mark Sapiro mark@msapiro.net The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan
Hi Kevin,
No, the Sender Filters do not apply to subscription requests.
If you are having problem with spamming subscription requests, mailman (at least the mailman 2.1* and up) give you a few options to help:
You can use your regexp in the banlist -- list of addresses that are banned from subscribing to your list. One address per line, and for a regexp, start the address with ^. (Under Privacy options, Subscription Rules)
Do you need to advertise your list? If not, taking the name off your sites public "here's my lists" page might help. Also under Privacy options, Subscription Rule)
Finally, unless you need to be notified immediately when a message is held for moderation, or of subscription requests, on most sites you can opt to get a daily notification of all things held for the list owner/admin, rather than getting each as they are delivered (General options, admin_immed_notify). While this won't cut down on spammy stuff directly, it will cut down on the noise and annoyance factor.
--Gretchen
Gretchen Beck
Carnegie Mellon
From: Mailman-Users mailman-users-bounces+cmupythia=cmu.edu@python.org on behalf of Kevin Bowen kevin.t.bowen@gmail.com Sent: Tuesday, September 17, 2019 1:37 PM To: mailman-users@python.org Subject: [Mailman-Users] Do sender filters apply to subscription requests?
Hello, One of my instance's lists is apparently getting spammed with subscription requests from addresses outside my org. In sender filters, for reject_these_nonmembers I put ^(?!.*(example)\.com$) [actual domain redacted], but the requests still get through to the moderation queue. Do the sender filters apply only to posts, not to subscription requests? If so, is there any way to automatically reject subscription requests based on a regex?
Kevin Bowen kevin.t.bowen@gmail.com kevin@ucsd.edu
Mailman-Users mailing list Mailman-Users@python.org https://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://wiki.list.org/x/AgA3 Security Policy: http://wiki.list.org/x/QIA9 Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: https://mail.python.org/mailman/options/mailman-users/cmupythia%40cmu.edu
On 9/17/2019 1:37 PM, Kevin Bowen wrote:
Hello, One of my instance's lists is apparently getting spammed with subscription requests from addresses outside my org. In sender filters, for reject_these_nonmembers I put ^(?!.*(example)\.com$) [actual domain redacted], but the requests still get through to the moderation queue. Do the sender filters apply only to posts, not to subscription requests? If so, is there any way to automatically reject subscription requests based on a regex?
Use milter-regex. https://linux.die.net/man/8/milter-regex Very flexible. Chances are you want to keep these guys out of more than your request address but milter-regex could be fine tuned for one specific address or pattern of addresses. Like:
|# filter requests from GMAIL reject "Your requests offend me."|| ||envrcpt /-request@lists.ziobro.info/|| ||and|| ||envfrom /@gmail.com/|
The offending message will never even get on your machine. In general you want to filter in the SMTP stream before an undesireable message gets on to your machine. Once a message gets put into Mailman there is the potential of backscatter.
Ciao,
//Z\\
participants (4)
-
Gretchen M Beck -
Jim Ziobro -
Kevin Bowen -
Mark Sapiro