Re: [Mailman-Developers] Spam/Scam button
At 6:26 PM -0500 2005-12-14, Barry Warsaw wrote: While in general I think the mailing list is a lousy place to do spam removal (it is better done upstream of the MLM), I do think we could add some useful controls to help here. I can certainly see the advantage in allowing Mailman to take advantage of additional information placed within the headers of the message by the anti-spam processing system (improved in 2.1.6 over previous versions). And I can see the usefulness of having a discard and report as spam option for list owners and moderators, as mentioned by Dale -- basically, just forward the message to a pre-configured e-mail address. However, I would seriously question the usefulness of trying to integrate a full-blown anti-spam system into Mailman (e.g., SpamBayes). IMO, that kind of thing needs to be integrated into the MTA, not Mailman. My bigger concern here is that people understand who sees this discard as spam button, and how it works. This is not something that would be exposed or otherwise available to the regular mailing list recipients, and I believe that it will be important to manage user expectations in this respect. -- Brad Knowles, [EMAIL PROTECTED] Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety. -- Benjamin Franklin (1706-1790), reply of the Pennsylvania Assembly to the Governor, November 11, 1755 LOPSA member since December 2005. See http://www.lopsa.org/. ___ Mailman-Developers mailing list Mailman-Developers@python.org http://mail.python.org/mailman/listinfo/mailman-developers Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-developers/archive%40jab.org Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp
Re: [Mailman-Developers] Spam/Scam button
I personally agree that MM is a poor place to do spam management. What we're considering doing is using some Courier-IMAP-fu to make it work all pretty like. If SA/dspam/whatever tags a post to a list as spam, it is delivered to an IMAP mailbox folder that the list administrators can access. To approve messages mismarked as spam, they simply move the message to another IMAP folder that is just a pipe back into Mailman. -jag On Thu, 2005-12-15 at 03:06 -0600, Brad Knowles wrote: At 6:26 PM -0500 2005-12-14, Barry Warsaw wrote: While in general I think the mailing list is a lousy place to do spam removal (it is better done upstream of the MLM), I do think we could add some useful controls to help here. I can certainly see the advantage in allowing Mailman to take advantage of additional information placed within the headers of the message by the anti-spam processing system (improved in 2.1.6 over previous versions). And I can see the usefulness of having a discard and report as spam option for list owners and moderators, as mentioned by Dale -- basically, just forward the message to a pre-configured e-mail address. However, I would seriously question the usefulness of trying to integrate a full-blown anti-spam system into Mailman (e.g., SpamBayes). IMO, that kind of thing needs to be integrated into the MTA, not Mailman. My bigger concern here is that people understand who sees this discard as spam button, and how it works. This is not something that would be exposed or otherwise available to the regular mailing list recipients, and I believe that it will be important to manage user expectations in this respect. -- Joshua Ginsberg [EMAIL PROTECTED] Free Software Foundation - Senior Systems Administrator signature.asc Description: This is a digitally signed message part ___ Mailman-Developers mailing list Mailman-Developers@python.org http://mail.python.org/mailman/listinfo/mailman-developers Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-developers/archive%40jab.org Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp
Re: [Mailman-Developers] Spam/Scam button
While agreeing that MM is not really a good spam control place, my life would be made easier if:- * Marking a message as spam killed all other messages sent by the same sender address to that and all other lists currently awaiting moderation. * Marking a message as spam killed all other messages sent with the same subject to that and all other lists currently awaiting moderation. Those 2 together would reduce the messages I see in moderation substantially - in general I get multiple lists hit with copies of the same stuff within a few seconds Additionally automatically discarding messages where identical subject combos hit *different* lists on the box and both going to moderation within a short timeframe would also be a great helper. Although frankly I'm tempted to just say sod it and make everything that would be moderated get trashed. Nigel. -- [ Nigel Metheringham [EMAIL PROTECTED] ] [ - Comments in this message are my own and not ITO opinion/policy - ] ___ Mailman-Developers mailing list Mailman-Developers@python.org http://mail.python.org/mailman/listinfo/mailman-developers Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-developers/archive%40jab.org Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp
Re: [Mailman-Developers] Spam/Scam button
Nigel Metheringham wrote: While agreeing that MM is not really a good spam control place, my life would be made easier if:- * Marking a message as spam killed all other messages sent by the same sender address to that and all other lists currently awaiting moderation. * Marking a message as spam killed all other messages sent with the same subject to that and all other lists currently awaiting moderation. If this marking is taking place within the mailman admin webpage structure, this could be accomplished by providing checkboxes for each of these actions, and the default setting would be to have those boxes pre-checked so that when you click the button, those actions happen. The setting should be changeable within the mailman configuration so that one or both of these boxes are not pre-checked if desired by that mailman admin. jc ___ Mailman-Developers mailing list Mailman-Developers@python.org http://mail.python.org/mailman/listinfo/mailman-developers Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-developers/archive%40jab.org Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp
Re: [Mailman-Developers] Spam/Scam button
--On 13 December 2005 19:38:46 -0600 Brad Knowles [EMAIL PROTECTED] wrote: You could add a new List- header which would allow compliant MUAs to give users a single button to click on, but there are currently no MUAs that would support such a feature. There is an extension to Thunderbird which supports List- header URLs. Turns them into clickable links. I'm not sure whether it would work for a new List- header - it might look for only the RFC 2369 defined List- headers. Of course, there's also the issue that such a new List- header has no justification in the RFCs. That is to say, we'd have no reason to believe that anyone would add support for it to any MUA. -- Ian Eiloart Servers Team Sussex University ITS ___ Mailman-Developers mailing list Mailman-Developers@python.org http://mail.python.org/mailman/listinfo/mailman-developers Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-developers/archive%40jab.org Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp
Re: [Mailman-Developers] Spam/Scam button
I've just been cleaning up a list that I administer and suddenly it came to me that we could have a report Scam/Spam button for such items being sent to Mailman lists. Where would you have this button? In the admindb interface? In the post itself somewhere? Would this be feasible? I know gmail has such a feature - I don't quite know the process it follows once it is reported. Ay. There's the rub. To whom would it be reported, and what might they do with it once reported? Where I see the biggest advantage of this is that individual mail users are not going to / seldom do go to the trouble of reporting because it is too much trouble. Do be able to do so at the click of a button, would exponentially increase the number of senders being reported. Yes, but as with all distributed effort spam control measures, who is going to police the mob-ocracy? A good idea, to be sure. But there remain many sticky details to iron out. -jag -- Joshua Ginsberg [EMAIL PROTECTED] Free Software Foundation - Senior Systems Administrator signature.asc Description: This is a digitally signed message part ___ Mailman-Developers mailing list Mailman-Developers@python.org http://mail.python.org/mailman/listinfo/mailman-developers Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-developers/archive%40jab.org Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp
Re: [Mailman-Developers] Spam/Scam button
On Tue, 2005-12-13 at 14:33 +0200, Rui Correia wrote: I've just been cleaning up a list that I administer and suddenly it came to me that we could have a report Scam/Spam button for such items being sent to Mailman lists. A long while ago, I did an experimental integration of Spambayes with Mailman that had a similar concept. Essentially it let you train ham and spam for its bayesian filter. I'm sure the patch is still on SF, but off-hand I don't know whether it still applies to CVS. While in general I think the mailing list is a lousy place to do spam removal (it is better done upstream of the MLM), I do think we could add some useful controls to help here. -Barry signature.asc Description: This is a digitally signed message part ___ Mailman-Developers mailing list Mailman-Developers@python.org http://mail.python.org/mailman/listinfo/mailman-developers Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-developers/archive%40jab.org Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp
Re: [Mailman-Developers] Spam/Scam button
On Wed, 2005-12-14 at 16:38 +0900, Tokio Kikuchi wrote: I think you are talking about: http://sourceforge.net/tracker/index.php?func=detailaid=1008865group_id=103atid=300103 Hopefully, we will be back to the MAIN CVS tree for the development of mailman-2.2 after the release of 2.1.7. This should be the chance that the patch is integrated in the 2.2 release. There's also http://sourceforge.net/tracker/index.php?func=detailaid=713522group_id=103atid=300103 which is my Spambayes integration patch. I do think mailman-developers is a reasonable place to discuss this. We can talk about whether it's even reasonable to have anti-spam defenses in Mailman, and if so whether we want to pick one such product to support, or have a pluggable architecture (possibly shipping one by default). I also think there are interesting usability/user interface questions to ask, as well as whether spam filters should be per-list, site-wide, or domain-wide. -Barry signature.asc Description: This is a digitally signed message part ___ Mailman-Developers mailing list Mailman-Developers@python.org http://mail.python.org/mailman/listinfo/mailman-developers Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-developers/archive%40jab.org Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp
Re: [Mailman-Developers] Spam/Scam button
On Wed, 2005-12-14 at 10:21 +, Ian Eiloart wrote: There is an extension to Thunderbird which supports List- header URLs. Turns them into clickable links. I'm not sure whether it would work for a new List- header - it might look for only the RFC 2369 defined List- headers. Of course, there's also the issue that such a new List- header has no justification in the RFCs. That is to say, we'd have no reason to believe that anyone would add support for it to any MUA. And technically, we'd have to add them as X-List-* headers, so it's very doubtful MUAs would support them. -Barry signature.asc Description: This is a digitally signed message part ___ Mailman-Developers mailing list Mailman-Developers@python.org http://mail.python.org/mailman/listinfo/mailman-developers Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-developers/archive%40jab.org Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp
Re: [Mailman-Developers] Spam/Scam button
On 12/14/05 3:32 PM, Barry Warsaw [EMAIL PROTECTED] wrote: I do think mailman-developers is a reasonable place to discuss this. We can talk about whether it's even reasonable to have anti-spam defenses in Mailman, and if so whether we want to pick one such product to support, or have a pluggable architecture (possibly shipping one by default). I also think there are interesting usability/user interface questions to ask, as well as whether spam filters should be per-list, site-wide, or domain-wide. We're happy with spam and virus defenses in the MTA which receives from the world and does the spam and virus work before handing off the messages to the MTA on the Mailman machine. The Mailman machine can't be reached on port 25 (or 587 or 465) from the world. If anything is shipped with Mailman (beyond tuneups to what is there now, which we mostly don't have to use), we'd likely want it able to be turned off. --John ___ Mailman-Developers mailing list Mailman-Developers@python.org http://mail.python.org/mailman/listinfo/mailman-developers Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-developers/archive%40jab.org Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp
Re: [Mailman-Developers] Spam/Scam button
On Tue, Dec 13, 2005 at 12:55:30PM -0500, Joshua Ginsberg wrote: Would this be feasible? I know gmail has such a feature - I don't quite know the process it follows once it is reported. Ay. There's the rub. To whom would it be reported, and what might they do with it once reported? Perhaps spamcop? This can be done simply by forwarding the offending spam as an attachment to a spamcop email address that you are given for submissions. Regards, Msquared... ___ Mailman-Developers mailing list Mailman-Developers@python.org http://mail.python.org/mailman/listinfo/mailman-developers Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-developers/archive%40jab.org Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp
[Mailman-Developers] Spam/Scam button
Hi All I've just been cleaning up a list that I administer and suddenly it came to me that we could have a report Scam/Spam button for such items being sent to Mailman lists. Would this be feasible? I know gmail has such a feature - I don't quite know the process it follows once it is reported. Where I see the biggest advantage of this is that individual mail users are not going to / seldom do go to the trouble of reporting because it is too much trouble. Do be able to do so at the click of a button, would exponentially increase the number of senders being reported. Regards, Rui Rui Correia Advocacy, Media and Language Consultant 38 Finch St, Ontdekkers Park, Roodepoort, Johannesburg, South Africa Tel/ Fax (+27-11) 766-4336 Cell (+27) (0) 83-368-1214 ___ Mailman-Developers mailing list Mailman-Developers@python.org http://mail.python.org/mailman/listinfo/mailman-developers Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-developers/archive%40jab.org Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp
Re: [Mailman-Developers] Spam/Scam button
At 2:33 PM +0200 2005-12-13, Rui Correia wrote: I've just been cleaning up a list that I administer and suddenly it came to me that we could have a report Scam/Spam button for such items being sent to Mailman lists. Where would this button exist? Who would use it, and how? Where I see the biggest advantage of this is that individual mail users are not going to / seldom do go to the trouble of reporting because it is too much trouble. Do be able to do so at the click of a button, would exponentially increase the number of senders being reported. Mailman does not provide the end-user MUA functionality. It is not possible for Mailman to pop up a button in Exchange saying Report this message as spam?, nor is it possible to support all MUAs in this manner. You could add a new List- header which would allow compliant MUAs to give users a single button to click on, but there are currently no MUAs that would support such a feature. Moreover, to whom would they report the message as spam -- the mail servers operated by their own providers, or the mail server(s) operated by the mailing list host? How do you prevent abuse of such a button by an attacker? There are a lot of questions you'd have to answer before you could come up with a reasonable scheme for creating a new List- header that would perform the desired function while avoiding the creation of any new major weaknesses. -- Brad Knowles, [EMAIL PROTECTED] Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety. -- Benjamin Franklin (1706-1790), reply of the Pennsylvania Assembly to the Governor, November 11, 1755 LOPSA member since December 2005. See http://www.lopsa.org/. ___ Mailman-Developers mailing list Mailman-Developers@python.org http://mail.python.org/mailman/listinfo/mailman-developers Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-developers/archive%40jab.org Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp
Re: [Mailman-Developers] Spam/Scam button
At 7:38 PM -0600 2005-12-13, Brad Knowles wrote: At 2:33 PM +0200 2005-12-13, Rui Correia wrote: I've just been cleaning up a list that I administer and suddenly it came to me that we could have a report Scam/Spam button for such items being sent to Mailman lists. Where would this button exist? Who would use it, and how? BTW, this thread is operational in nature, and doesn't really belong on this list. If you wanted to discuss Python code that you've written to help implement such features, then this would be the appropriate place to continue this discussion. Otherwise, this thread should be re-started on mailman-users. -- Brad Knowles, [EMAIL PROTECTED] Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety. -- Benjamin Franklin (1706-1790), reply of the Pennsylvania Assembly to the Governor, November 11, 1755 LOPSA member since December 2005. See http://www.lopsa.org/. ___ Mailman-Developers mailing list Mailman-Developers@python.org http://mail.python.org/mailman/listinfo/mailman-developers Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-developers/archive%40jab.org Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp
Re: [Mailman-Developers] Spam/Scam button
At 11:11 PM -0500 2005-12-13, Dale Newfield wrote: Not only is this suggestion appropriate for this list, but I also think I recall a previous discussion where the idea was hashed out. Unless you're talking about Python code you've developed to implement this feature, or commenting on Python code that someone else has developed to implement this feature, I'm pretty certain that this discussion belongs on mailman-users and not here. When we get down to the point where we're talking about going to the archives of the list to see the previous discussion on this topic, and to see the patch that was produced, etc... then we are definitely into mailman-users territory and not mailman-developers. If Barry or JC disagree, then I'm willing to bow to their greater knowledge on this topic, since they've been moderators of this list longer than I have. If Tokio or Mark disagree, I'm willing to bow to their greater knowledge because I know they've been hacking on the code longer than I've been associated with the project. Anyone else is going to have to work pretty hard to convince me. -- Brad Knowles [EMAIL PROTECTED] Python.org Postmaster Team ___ Mailman-Developers mailing list Mailman-Developers@python.org http://mail.python.org/mailman/listinfo/mailman-developers Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-developers/archive%40jab.org Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp