[Mailman-Users] Subscription Form Spam -- It continues . . .
mark at msapiro.net
Wed Oct 7 17:03:36 CEST 2015
On 10/07/2015 06:16 AM, brian at emwd.com wrote:
> We keep
> seeing dozens of subscription spam coming in from gmail addresses PER
> MINUTE with the following format:
> kihuotter+59233527 at gmail.com
> We have implemented the form secret function that was introduced in
> Mailman 2.16 but it is having no effect on these particular subscription
When these first started, enabling SUBSCRIBE_FORM_SECRET would help, but
there were still many that delayed long enough even with
SUBSCRIBE_FORM_MIN_TIME = seconds(8) to get through. Currently, the ones
that hit mail.python.org almost always delay long enough. I just checked
the vette log and we're currently banning about 18,000 attempts per day.
> I remember seeing a solution from Mark Sapiro addressing this exact
> issue but I can't seem to find it again.
There are several threads on this in the archives of this list from
August and September, but the above linked post is a good summary.
Mark Sapiro <mark at msapiro.net> The highway is for gamblers,
San Francisco Bay Area, California better use your sense - B. Dylan
More information about the Mailman-Users