On Thu, 2020-08-20 at 09:43 +0800, Philip Paeps via mailop wrote: > On 2020-08-20 05:17:09 (+0800), Michael Wise via mailop wrote: > > BotNet? > > Were they listed in the SpamHaus XBL as being compromised? > > The problem is that the subscriptions come in through the Mailman web > interface, not through email. > > Arguably, this is a variant of the old "send an email greeting card" > spam. > > I don't know of anyone who checks the XBL (or other blocklists) on the > web server. Or if that would even be effective. Does the XBL list > botnets that abuse web services that lead to email being sent too? This > may actually be an interesting hack to perpetrate. :)
You should probably also know about these 2 additional MM settings: BLOCK_SPAMHAUS_LISTED_IP_SUBSCRIBE = Yes BLOCK_SPAMHAUS_LISTED_DBL_SUBSCRIBE = Yes -Jim P. _______________________________________________ mailop mailing list mailop@mailop.org https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop