[Mailman-Users] bots subscribing to lists via web forms toavoidmember-only restrictions

Sarah marrie12 at gmail.com
Mon Jan 7 02:56:13 CET 2008


Nor I. I have a double opt in for muy list. I get no spam what so ever.

SA&G
----- Original Message ----- 
From: "Mark Sapiro" <mark at msapiro.net>
To: "Matt Domsch" <Matt_Domsch at dell.com>; <mailman-users at python.org>
Sent: Sunday, January 06, 2008 1:02 PM
Subject: Re: [Mailman-Users] bots subscribing to lists via web forms toavoidmember-only restrictions


Matt Domsch wrote:

>Several times this week I've received spam to my lists which are set
>to allow postings only by list members.  Upon review, something
>(either bot or human, but I'm betting bot as they hit many lists at
>once) subscribed the spam sender email to the lists via the web form,
>sent the spam, then unsubscribed themselves.


What is subscribe_policy for these lists?


>The actual spam message was declared clean by both SpamAssassin and
>IronPort, so the filtering ahead of MM is quite helpful, but not perfect.
>
>Are there plans to enhance the web subscription form with a type of
>captcha, or other technique to discourage bots?


There is no current plan.


>Anyone else hit by this practice much?


I've never seen it on lists with subscribe_policy of either Confirm or
Approve. I don't allow open subscribe.

-- 
Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan

------------------------------------------------------
Mailman-Users mailing list
Mailman-Users at python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: http://mail.python.org/mailman/options/mailman-users/marrie12%40gmail.com

Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=show&amp;file=faq01.027.htp


More information about the Mailman-Users mailing list