I may have a somewhat different problem, but I was getting subscription
attempts (to Mailman 2) through the web site from addresses that didn't
exist. I was worried about too much "backscatter" ruining our "reputation"
on services that prevent users from deciding what isn't spam.

I tried one of the recommended modifications, which was to add to
/etc/mailman/mm_cfg.py the simplest possible test to the web site, to
prevent "bots" from trying to sign up, which came from Defaults.py:

SUBSCRIBE_FORM_SECRET = "<sRiI8Cye0i9QpHq1yKlMMzQY>"
SUBSCRIBE_FORM_MIN_TIME = seconds(10)
CAPTCHAS = {
  'en': [
    ('What is two times six?', '(12|twelve)'),
  ],
}

I'm not sure that the first line did any good, but the second one seems to
have worked like a charm. The problem completely went away. There are
fancier solutions in Defaults.py, but this one worked for me.

HOWEVER, I also had to edit
/var/lib/mailman/lists/jdm-society/en/listinfo.html
to add the line
<tr><td><mm-captcha-ui></td></tr>
just before the row with "Your name".

Jon

On 04/14/21 21:15, Bader, Robert (Bob) wrote:
> I think I have a situation where someone is sending email to one of my lists 
> request address ie 
> (lista-reque...@domain.com<mailto:lista-reque...@domain.com>) from an invalid 
> email address (maybe spoofing the sending address). Or they may be able to 
> trying to subscribe and entering an invalid email address on the wbesite.
> 
> So what happens is the list admins gets a bunch of bounces.  What is the best 
> way to stop this?  If I add an email to the ban section for a list, will 
> mailman drop any email or requests from them if they are spoofing as a sender 
> or trying to subscribe?

-- 
Jonathan Baron, Professor of Psychology, University of Pennsylvania
Home page: https://www.sas.upenn.edu/~baron
Editor: Judgment and Decision Making (http://journal.sjdm.org)
------------------------------------------------------
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
    https://mail.python.org/archives/list/mailman-users@python.org/

Reply via email to