[Mailman-Users] Filtering Chinese spam.

[Robert Heller]

At Sat, 21 Apr 2018 10:46:01 -0700 "Kenneth G. Gordon" <kgordon2006 at frontier.com> wrote:

> 
> Hello:
> 
> One of my mailman mailing lists has been suddenly afflicted with tons of Chinese spam. 
> 
> After reading an on-line discussion of this problem and how to handle it from a thread 
> posted to this list in July of 2016, here:
> 
> https://mail.python.org/pipermail/mailman-users/2016-July/080993.html
> 
> I have modified my settings in Privacy Options/Spam Filters thusly:
> 
> ^Subject: =?utf-8?B?
> ^Subject:.*\?{4,}
> from: .*@qq.com

If you have access to the SMTP server itself, getting qq.com blocked at that 
point will help even more than blocking it in Mailman.

> from: .*ebdoor.com
> from: .*126.com
> from: .*139.com
> from: .*136.com
> from: .*163.com
> from: .*193.com
> 
> The "from" expressions have worked quite well, and using those I have cut the Chinese 
> spam by over 90%, but I am still receiving periodic posts from other Chinese senders and I 
> cannot keep adding more items to the "from" set for obvious reasons. 
> 
> Instead, as someone mentioned in that thread of July 2016, I find that all Chinese posts 
> include the expression " =?utf-8?B?" following the word "Subject".
> 
> Accordingly, I have included that in the first line of my Spam FIlter. However, it does not 
> seem to be working as desired as I am still receiving Chinese spam containing that 
> expression.
> 
> >From that thread of July 2016, I have, today, added that second line above.
> 
> Can someone here tell me what I have NOT done correctly with that first line which makes it 
> NOT work as desired?
> 
> Kenneth G. Gordon (Age 75)
> A Tired Old SYSAD.
> 
> 
> 
> ---
> This email has been checked for viruses by Avast antivirus software.
> https://www.avast.com/antivirus
> 
> ------------------------------------------------------
> Mailman-Users mailing list Mailman-Users at python.org
> https://mail.python.org/mailman/listinfo/mailman-users
> Mailman FAQ: http://wiki.list.org/x/AgA3
> Security Policy: http://wiki.list.org/x/QIA9
> Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
> Unsubscribe: https://mail.python.org/mailman/options/mailman-users/heller%40deepsoft.com
> 
>                                                                                                          

-- 
Robert Heller             -- 978-544-6933
Deepwoods Software        -- Custom Software Services
http://www.deepsoft.com/  -- Linux Administration Services
heller at deepsoft.com       -- Webhosting Services