Russ Allbery wrote: > > I hope we can agree that maintainers should be able to receive mail from > > any legitimate sender. > > > However, some maintainer addresses point to mailing lists that > > automatically reject mail from non-subscribers (without the intervention > > of a moderator). The case I am painfully aware of is > > grub-de...@lists.alioth.debian.org, listed as the maintainer for grub > > and grub2. > > > I believe this configuration is unacceptable, but would like to check > > that there is a consensus on this before pressing the matter with the > > GRUB maintainers. > > I agree that automatic rejection is bad. I do think that holding for > moderation is okay. > > The configuration that I use for pkg-shibboleth-devel is to automatically > allow any message with X-Debian-PR-Package or X-Debian: DAK in the headers > and then hold everything else from non-subscribers for moderation, > expiring messages after seven days, and disabling the moderation > notification messages to the sender. I then review every message held for > moderation through my own spam filters and go and approve anything that's > legitimate, whitelisting the sender at the same time. I set an expiration > time of 7 days for things in the moderation queue so that I don't have to > keep going in there and cleaning it out. I also always use discard for > things that time out or things that I reject.
With an active owner approving messages this sounds like a sane setup. > I think it's particularly important to automatically let through BTS > messages (X-Debian-PR-Package) and messages from automated archive > processes. Spam from those sources is extremely low. ack. Regards, Joey -- Open source is important from a technical angle. -- Linus Torvalds -- To UNSUBSCRIBE, email to debian-project-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org