[Mailman-Users] spam discard expressions

[Jim Dory]

Great, thanks!

This should help a lot,

regards, Jim

On Wed, Sep 20, 2017 at 1:29 PM, Robert Heller <heller at deepsoft.com> wrote:

> At Wed, 20 Sep 2017 11:59:37 -0800 Jim Dory <james at dorydesign.com> wrote:
>
> >
> > Apparently our host provider performs spam tests only on outgoing, rather
> > than incoming - since my spamassassin blacklists don't have any effect.
> >
> > So I've discovered the filters offered in Mailman after being completely
> > buried by spammers trying to post to our subscriber only list.
> >
> > I've started putting these in Sender Filters:
> >
> > ^[^@]+ at bcira\.com$
> > ^[^@]+ at airablo\.com$
> > ^[^@]+ at bfklaw\.com$
> > ^[^@]+ at bettella\.com$
> > ^[^@]+ at areallycool\.com$
> > ^[^@]+ at aristo-tec\.com$
> > ^[^@]+ at benallgood\.com$
> > ^[^@]+ at al-meshkah\.com$
> > ^[^@]+ at atoccs\.stream$
> > ^[^@]+ at authors\.com$
> > ^[^@]+ at aulson\.com$
> > ^[^@]+ at atmyx\.bid$
> > ^[^@]+ at airtecperforms\.com$
> >
> > but what is the syntax for blocking domains ending in
> > .loan
> > .stream
> > .trade
>
> ^[^@]+ at .+\.loan$
> ^[^@]+ at .+\.stream$
> ^[^@]+ at .+\.trade$
>
> etc.
>
> Just replace the "host" part with .+ (== 1 or more of any character) and
> replace com with loan, stream, trade, etc.  Thus, for example:
>
> ^[^@]+ at .+\.loan$
>
> matches any of these:
>
> someidiot at getaloan.loan
> freemoney at instantloan.loan
> brreakyourlegs at loanshark.loan
>
> (and many more).
>
> >
> > etc, other than .com.
> >
> > I've been reading up on python expressions but at first reading it is a
> bit
> > overwhelming - hoping for a simple example.
> >
> > I've also started adding in words under Spam filters such as:
> >
> > ^Subject: .*Phentermine
> > ^Subject: .*F\*buddy
> > ^Subject: .*H00kup
> > ^Subject: .*InstaF\*ck
> > ^Subject: .*Instacheat
> >
> > Wondering if anyone would care to share their lists of filters - or a
> good
> > resource?
> >
> > thanks, Jim
> > ------------------------------------------------------
> > Mailman-Users mailing list Mailman-Users at python.org
> > https://mail.python.org/mailman/listinfo/mailman-users
> > Mailman FAQ: http://wiki.list.org/x/AgA3
> > Security Policy: http://wiki.list.org/x/QIA9
> > Searchable Archives: http://www.mail-archive.com/
> mailman-users%40python.org/
> > Unsubscribe: https://mail.python.org/mailman/options/mailman-users/
> heller%40deepsoft.com
> >
> >
>
> --
> Robert Heller             -- 978-544-6933
> Deepwoods Software        -- Custom Software Services
> http://www.deepsoft.com/  -- Linux Administration Services
> heller at deepsoft.com       -- Webhosting Services
>
>