[Mailman-Users] messages getting auto discarded

[Jim Dory]

We are on Mailman 2.1.23. CPanel version.

Here is a typical auto discard vette log entry from a guy who isn't
subscribed on the particular email he used, but is on other email addresses:

Feb 16 18:13:35 2018 (1341) Message discarded, msgid: <
CALKxJoSAAhuBCRZCmmbWFpsrCjdZPwiwy--N95_1BDk4kniMGw at mail.gmail.com>'
       list: Nome-announce,
       handler: Moderate

This message went to a nome-announce.bounces "Auto discard notification" I
can actually see the message in that notification.

What has changed in the last month or two is when a non-member used to try
to post, I would get a nome-announce-bounces "Nome-announce post from
someone at nome.net requires approval" and the message would be "Post to a
moderated list". In that case I could then go into the administrative
interface "Tend to pending moderator requests" and review who had tried to
post and act on it one way or another. If it was a local non-spam email I
could write to the person and tell them to subscribe and give instructions,
or to use their subscribed email account. But now it seems like if anyone
tries to post with an unsubscribed account, I don't see them unless I go
through the (up to) hundreds of "Auto discard notification"s. So I'm
thinking now it isn't to do with any of my spam filters because I haven't
touched them for several months.. except I did add that ^parsons at nome\.net$
last entry in the sender filters not too long ago.

On Fri, Feb 16, 2018 at 7:04 PM, Mark Sapiro <mark at msapiro.net> wrote:

> On 02/16/2018 11:09 AM, Jim Dory wrote:
> > I've gotten a ton of spam directed at our mailing list so I set up some
> > auto discard filters. Unfortunately I don't know regular expressions so
> may
> > have misconfigured - result is some seemingly valid messages getting
> > discarded (could be different reason than my filters).
> >
> > A couple yesterday were from un-subscribed users. but usually I get a
> > bounce saying it is held for moderation.. though not in this case. I
> don't
> > always check the auto discard messages because of the number of them,
> but a
> > registered user sent an email that never showed up as a bounce (held for
> > moderation) or as accepted, so I assume it was auto discarded as well.
>
>
> First, you need to look at logs. Mailman's vette log will have a message
> like
>
> Message discarded, msgid: ...'
>         list: ...,
>         handler: ...
>
> for each discarded message. In the case of header_filter_rules, the
> handler will be SpamDetect.
>
> Note that if you change the action to Hold,the vette log message will be
>
> <listname> post from <sender> held, message-id=<...>: <reason>
>
> and if your Mailman is 2.1.26, <reason> will tell you which regexp
> matched. Prior to 2.1.26 it just says "message matched a filter rule"
>
>
> > Here's my filter config for subject:
> > ...
>
>
> You should be aware that these regexps are matched case-insensitively.
> You can't make them be case-sensitive.
>
>
> > and legacy:
> > # Lines that *start* with a '#' are comments.
>
> For bounce_matching_headers it appears you just have the defaults which
> probably never match as they are over 15 years old, and these result in
> Holds, not Discards.
> >
> > and email:
> >
> ...
>
> If these are in discard_these_nonmembers, the handler will be Moderate.
>
>
> > The subject on one discarded msg was (from unsubscribed user - just used
> > wrong email):
> > MEDITATION! RURAL BUSINESS FINANCE! Register today.
> >
> > And another subject same situation:
> > SPARC MEETING
> >
> > Message sources didn't give me any clues, but I could provide one if it
> > would help.
>
>
> How are you seeing these things if the messages are discarded?
>
> --
> Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
> San Francisco Bay Area, California    better use your sense - B. Dylan
> ------------------------------------------------------
> Mailman-Users mailing list Mailman-Users at python.org
> https://mail.python.org/mailman/listinfo/mailman-users
> Mailman FAQ: http://wiki.list.org/x/AgA3
> Security Policy: http://wiki.list.org/x/QIA9
> Searchable Archives: http://www.mail-archive.com/
> mailman-users%40python.org/
> Unsubscribe: https://mail.python.org/mailman/options/mailman-users/
> james%40dorydesign.com
>