[Mailman-Users] Persistent spam source!

[Lindsay Haisley]

What appears to be happening here is that the envelope sender address
for these spams is AdrianaCaldwell at archive.elespectaddor.com which
matches a rule in header_filter_rules to hold mail addresses matching
the regexp ".*Archive". So it _appears_ that directives in
header_filter_rules trump directives from discard_these_nonmembers. Is
this indeed the case? Would specifying the above address verbatim in
discard_these_nonmembers give this directive precedence? 

On Sat, 2016-01-23 at 19:35 -0600, Lindsay Haisley wrote:
> I got the following from one of my list admins. Any suggestions as to
> what might be going on? I've verified that the address in question is
> indeed on the discard_these_nonmembers list and that the problem address
> isn't already subscribed.
> 
> ----
>         So we keep getting spam postings from  jeffrey at elespectaddor.com
>         caught in the "needs approval" filter. He's not a member. I've
>         added him to the non-member filter under "List of non-member
>         addresses whose postings will be automatically discarded" and
>         banned him from membership. But half a dozen times a day we're
>         still getting requests to approve a spam posting when the
>         options I've set up are to discard anything from him.
>         
>         How are these slipping through? And is there anything we can do
>         about it? It's not a disaster, but it sure is a pain.
> ----
> 
> Our MM version is 2.1.18-1.
> 

-- 
Lindsay Haisley      | "The first casualty when war comes is truth"
FMP Computer Servces |      
512-259-1190         |        -- Hiram W Johnson    
http://www.fmp.com   |