i have posted my thoughts on unacceptable list access previously and it sank to
the level of a frequent poster denigrating other users since they took exception
to his self-professed role of protecting list admins in order "to avoid the list
admins following bad advice from people" who might have differing opinions from
his own. hopefully, that will not happen here.
in re the recent Brazilian Portuguese (note the 'R$' symbol for ISO BRL rather
than Euro) spam: what was wrong with that posting that should have been caught:
* the IP of origin 52.165.41.104 is an MS delegation without rDNS and --
obviously -- no SPF/TXT RR and
* the claimed domain 'cloudapp.net' does not exist in whois (not a 100%
indication of non-existence) or DNS (a 100% 'reject' indicator).
i have not used mailman for some time, but these two (2) simple errors would
have been blocked by normal 'postscreen' checks and should never have gotten as
far as mailman in any case. checking the EHLO format is in the ?s range and a
DNS check should take < 100ms. thus, these types of errors could be quickly and
easily eliminated with a '521' without any RBL or list-serve processing at all.
the wider problem case is how non-subscribers are given two-way access to the
list that exposes so much subscriber info (name, professional affiliation, email
addr, ...) to whomever. i cannot fathom why the list does not make use of
aliases so that each subscriber can control what they want to make public via
their alias profile.
Thank you,
Johann v. Preu?en
On 2016.Apr.19 16:40, Oliver Niebuhr wrote:
> Am 20.04.2016 um 01:05 schrieb Scott Neugroschl:
>> Can the spam filters on the listserv be updated? Got two today in
>> Spanish and Portuguese for monetary scams. Anyone else getting these?
>>
>>
>>
>> ---
>>
>> Scott Neugroschl | XYPRO Technology Corporation
>>
>> 4100 Guardian Street | Suite 100 |Simi Valley, CA 93063 | Phone 805
>> 583-2874|Fax 805 583-0124 |
> Morning.
>
> Yeah I got those too. I think like everyone else who subscribed to that
> List and has no specific Filters set up :)
>
> I am an Admin for some Mailman Lists myself - there is no way to block
> everything with 100 Percent efficency - except if you disallow
> non-members to send Message to $List.
>
> It always depends on the local Mailing List Policy.
>
> Greetings
> Oliver
>
>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20160419/162e293d/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3825 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20160419/162e293d/attachment.bin>
