<sigh> I guess my question wasn't so "easy" after all ... :-(

What was a daily trickle is now a flood of UCE from different domains in the .icu TLD. I hope someone can suggest some sort of prophylaxis that I haven't tried.

Is it possible that 'general_nonmember_action = Hold' is overriding my Spam Filter Rule? I still need to intercept legitimate subscribers who attempt to post under a different address, depending on which device they happen to be using. :-/

Is there any way to tell Mailman to honor my ISP's SpamAssassin score?
The headers of a UCE that got though and was Held for Approval may be seen at http://www.aresti.com/UCEheaders/

=======================================================================================
dmarc_moderation_action = Munge From
dmarc_quarantine_moderation_action = Yes
dmarc_none_moderation_action = No
 -
accept_these_nonmembers = [list if specific userids]
hold_these_nonmembers = []
reject_these_nonmembers = []
discard_these_nonmembers = []
generic_nonmember_action = Hold
forward_auto_discards = Yes
 -
header_filter_rules = Spam Filter Rule 1: ^from: .*@.*\.icu\s
                      Action = Discard
=======================================================================================

Any help will be greatly appreciated.

-Chip-
------------------------------------------------------
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Reply via email to