Blocking or holding subscribe requests when email address contains "+"

Folks:
I'm looking for a way to block, or preferably hold for approval, subscribe requests where the email address contains a plus sign.
I've been getting a lot of subscribe requests from bogus email addresses that look like: adfslij+32987234@gmail.com.
Any suggestions?
Thanks!
david
-- IBM i on Power Systems: For when you can't afford to be out of business!
I'm riding 100 miles (a full century) in the American Diabetes Association's Tour de Cure to raise money for diabetes research, education, advocacy, and awareness. You can make a tax deductible donation to my ride by visiting http://gmanesig.diabetessucks.net. My goal is $6000 but any amount is appreciated.
See where I get my donations from ... visit http://gmanesig.diabetessucks.net/map for an interactive map (it's a geeky thing).

The only thing I can think of is to require approval of all subscriptions (and maybe confirmation) and then build a regexp to auto approve all addresses without a + in them. I don't know how this will interact with the ban list (if you need that).
On Sep 15, 2015, at 12:17 PM, Gibbs, David <david@midrange.com> wrote:
Folks:
I'm looking for a way to block, or preferably hold for approval, subscribe requests where the email address contains a plus sign.
I've been getting a lot of subscribe requests from bogus email addresses that look like: adfslij+32987234@gmail.com.
Any suggestions?
Thanks!
david
-- IBM i on Power Systems: For when you can't afford to be out of business!
I'm riding 100 miles (a full century) in the American Diabetes Association's Tour de Cure to raise money for diabetes research, education, advocacy, and awareness. You can make a tax deductible donation to my ride by visiting http://gmanesig.diabetessucks.net. My goal is $6000 but any amount is appreciated.
See where I get my donations from ... visit http://gmanesig.diabetessucks.net/map for an interactive map (it's a geeky thing).
Mailman-Users mailing list Mailman-Users@python.org https://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://wiki.list.org/x/AgA3 Security Policy: http://wiki.list.org/x/QIA9 Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: https://mail.python.org/mailman/options/mailman-users/richard%40damon-family...

On 9/15/2015 11:31 AM, Richard Damon wrote:
The only thing I can think of is to require approval of all subscriptions (and maybe confirmation) and then build a regexp to auto approve all addresses without a + in them. I don't know how this will interact with the ban list (if you need that).
Unfortunately, Mailman sends out the confirmation email before requiring approval. I want to stop (or hold) the subscription request before the confirmation message goes out.
Maybe I have to look into a captcha integration?
david
-- IBM i on Power Systems: For when you can't afford to be out of business!
I'm riding 100 miles (a full century) in the American Diabetes Association's Tour de Cure to raise money for diabetes research, education, advocacy, and awareness. You can make a tax deductible donation to my ride by visiting http://emailsig.diabetessucks.net. My goal is $6000 but any amount is appreciated.
See where I get my donations from ... visit http://emailsig.diabetessucks.net/map for an interactive map (it's a geeky thing).

On September 15, 2015 9:33:35 AM PDT, David Gibbs <david@midrange.com> wrote:
Unfortunately, Mailman sends out the confirmation email before requiring approval. I want to stop (or hold) the subscription request before the confirmation message goes out.
Maybe I have to look into a captcha integration?
Recent Mailman has a SUBSCRIBE_FORM_SECRET setting which helps but doesn't stop them all.
Because of these, there is now a GLOBAL_BAN_LIST, but that isn't released yet.
You want a regexp in the ban_list for each list. For the python.org lists we use
^.*\+.*\d{3,}@
I.e., + followed by anything followed by at least 3 digits followed by @.
This has been effective so far.
The bots are doing web subscribe so there's no backscatter from this.
-- Mark Sapiro <mark@msapiro.net> Sent from my Not_an_iThing with standards compliant, open source software.

On 9/15/2015 1:13 PM, Mark Sapiro wrote:
Unfortunately, Mailman sends out the confirmation email before requiring approval. I want to stop (or hold) the subscription request before the confirmation message goes out.
You want a regexp in the ban_list for each list. For the python.org lists we use
^.*\+.*\d{3,}@
I.e., + followed by anything followed by at least 3 digits followed by @.
THANK YOU! This is exactly the solution I was looking for.
david
-- IBM i on Power Systems: For when you can't afford to be out of business!
I'm riding 100 miles (a full century) in the American Diabetes Association's Tour de Cure to raise money for diabetes research, education, advocacy, and awareness. You can make a tax deductible donation to my ride by visiting http://emailsig.diabetessucks.net. My goal is $6000 but any amount is appreciated.
See where I get my donations from ... visit http://emailsig.diabetessucks.net/map for an interactive map (it's a geeky thing).
participants (4)
-
David Gibbs
-
Gibbs, David
-
Mark Sapiro
-
Richard Damon