[Mailman-Users] Persistent spam source!
fmouse at fmp.com
Sat Jan 23 21:19:20 EST 2016
What appears to be happening here is that the envelope sender address
for these spams is AdrianaCaldwell at archive.elespectaddor.com which
matches a rule in header_filter_rules to hold mail addresses matching
the regexp ".*Archive". So it _appears_ that directives in
header_filter_rules trump directives from discard_these_nonmembers. Is
this indeed the case? Would specifying the above address verbatim in
discard_these_nonmembers give this directive precedence?
On Sat, 2016-01-23 at 19:35 -0600, Lindsay Haisley wrote:
> I got the following from one of my list admins. Any suggestions as to
> what might be going on? I've verified that the address in question is
> indeed on the discard_these_nonmembers list and that the problem address
> isn't already subscribed.
> So we keep getting spam postings from jeffrey at elespectaddor.com
> caught in the "needs approval" filter. He's not a member. I've
> added him to the non-member filter under "List of non-member
> addresses whose postings will be automatically discarded" and
> banned him from membership. But half a dozen times a day we're
> still getting requests to approve a spam posting when the
> options I've set up are to discard anything from him.
> How are these slipping through? And is there anything we can do
> about it? It's not a disaster, but it sure is a pain.
> Our MM version is 2.1.18-1.
Lindsay Haisley | "The first casualty when war comes is truth"
FMP Computer Servces |
512-259-1190 | -- Hiram W Johnson
More information about the Mailman-Users