Re: [Mailman-Users] Best way to slow down all the spam to my lists?
I had sent some test email from gmail and several hours later those test messages didn't pass. Maybe I goofed something along the way. On Fri, Dec 13, 2019 at 9:04 PM Mark Sapiro wrote: > On 12/13/19 7:23 PM, Chromatest J. Pantsmaker wrote: > > I think I'll look into this next. It seems that the postgrey > > implementation that I followed from a previous email has stopped the > spam, > > but it's also stopped all other mail also! doh! > > > If postgrey is working as it should, it will initially respond to all > mail with a 4xx (retryable) status. The theory is spambots won't retry, > but legitimate MTAs will, usually after a delay of up to 15 minutes or > so, but some more than an hour. > > As postgrey learns, it will remember triplets (sender, sending IP, > recipient) and not delay them and in addition will whitelist domains > that retry successfully more than a few times. > > Thus, after time, the delayed mail will become less frequent. > > -- > Mark Sapiro The highway is for gamblers, > San Francisco Bay Area, Californiabetter use your sense - B. Dylan > -- > Mailman-Users mailing list Mailman-Users@python.org > https://mail.python.org/mailman/listinfo/mailman-users > Mailman FAQ: http://wiki.list.org/x/AgA3 > Security Policy: http://wiki.list.org/x/QIA9 > Searchable Archives: > http://www.mail-archive.com/mailman-users%40python.org/ > Unsubscribe: > https://mail.python.org/mailman/options/mailman-users/chromatest%40chromatest.net > -- Mailman-Users mailing list Mailman-Users@python.org https://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://wiki.list.org/x/AgA3 Security Policy: http://wiki.list.org/x/QIA9 Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: https://mail.python.org/mailman/options/mailman-users/archive%40jab.org
Re: [Mailman-Users] Best way to slow down all the spam to my lists?
On 12/13/19 7:23 PM, Chromatest J. Pantsmaker wrote: > I think I'll look into this next. It seems that the postgrey > implementation that I followed from a previous email has stopped the spam, > but it's also stopped all other mail also! doh! If postgrey is working as it should, it will initially respond to all mail with a 4xx (retryable) status. The theory is spambots won't retry, but legitimate MTAs will, usually after a delay of up to 15 minutes or so, but some more than an hour. As postgrey learns, it will remember triplets (sender, sending IP, recipient) and not delay them and in addition will whitelist domains that retry successfully more than a few times. Thus, after time, the delayed mail will become less frequent. -- Mark Sapiro The highway is for gamblers, San Francisco Bay Area, Californiabetter use your sense - B. Dylan -- Mailman-Users mailing list Mailman-Users@python.org https://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://wiki.list.org/x/AgA3 Security Policy: http://wiki.list.org/x/QIA9 Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: https://mail.python.org/mailman/options/mailman-users/archive%40jab.org
Re: [Mailman-Users] Best way to slow down all the spam to my lists?
I think I'll look into this next. It seems that the postgrey implementation that I followed from a previous email has stopped the spam, but it's also stopped all other mail also! doh! On Fri, Dec 13, 2019 at 6:40 PM Gary R. Schmidt wrote: > On 12/12/19 12:46 PM, Chromatest J. Pantsmaker wrote: > > I'm the system admin (though I'm not great at it). I have a problem > with > > spam. Hundreds of spam messages are posted to my lists each week. > They're > > non-subscribers so they don't go to the lists, but they *do* go to > me, the > > list owner which floods my inbox. > > > > I'm looking at the page on how to use SpamAssassin: > > > > https://wiki.list.org/DOC/4.23%20How%20do%20I%20use%20SpamAssassin%20with%20Mailman%3F?action=show > > > > > > Is that the best way to do what I need? > > If so, what's the best method to use in my case? > > My system: > > Mailman 2.1.20 > > Apache2 / 2.4.18 > > Postfix 3.1.0 > > Ubuntu 16.04.1 LTS > > With Postfix, you should activate the built-in SPAM control, "postscreen". > > The details on how to use it are in POSTCSCREEN_README when you install > from source, I don't where/if Ubuntu puts it, or if they build it for > their distro, but it just works. "man postscreen" should get you started. > > I have it checking spamhaus.org, spamcop.net, and barracudacentral.org > for blacklisting. > > I sometimes add IP ranges to "/etc/postfix/postscreeen_access.cidr", > (they've mainly been from Brazil, Korea, and China), when I notice a new > source that the blacklists haven't yet found, blocking out vast swathes > of the internet doesn't trouble me. > > Cheers, > Garyb-) > -- > Mailman-Users mailing list Mailman-Users@python.org > https://mail.python.org/mailman/listinfo/mailman-users > Mailman FAQ: http://wiki.list.org/x/AgA3 > Security Policy: http://wiki.list.org/x/QIA9 > Searchable Archives: > http://www.mail-archive.com/mailman-users%40python.org/ > Unsubscribe: > https://mail.python.org/mailman/options/mailman-users/chromatest%40chromatest.net > -- Mailman-Users mailing list Mailman-Users@python.org https://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://wiki.list.org/x/AgA3 Security Policy: http://wiki.list.org/x/QIA9 Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: https://mail.python.org/mailman/options/mailman-users/archive%40jab.org
Re: [Mailman-Users] Best way to slow down all the spam to my lists?
On 12/12/19 12:46 PM, Chromatest J. Pantsmaker wrote: > I'm the system admin (though I'm not great at it). I have a problem with > spam. Hundreds of spam messages are posted to my lists each week. They're > non-subscribers so they don't go to the lists, but they *do* go to me, the > list owner which floods my inbox. > > I'm looking at the page on how to use SpamAssassin: > https://wiki.list.org/DOC/4.23%20How%20do%20I%20use%20SpamAssassin%20with%20Mailman%3F?action=show > > > Is that the best way to do what I need? > If so, what's the best method to use in my case? > My system: > Mailman 2.1.20 > Apache2 / 2.4.18 > Postfix 3.1.0 > Ubuntu 16.04.1 LTS With Postfix, you should activate the built-in SPAM control, "postscreen". The details on how to use it are in POSTCSCREEN_README when you install from source, I don't where/if Ubuntu puts it, or if they build it for their distro, but it just works. "man postscreen" should get you started. I have it checking spamhaus.org, spamcop.net, and barracudacentral.org for blacklisting. I sometimes add IP ranges to "/etc/postfix/postscreeen_access.cidr", (they've mainly been from Brazil, Korea, and China), when I notice a new source that the blacklists haven't yet found, blocking out vast swathes of the internet doesn't trouble me. Cheers, Garyb-) -- Mailman-Users mailing list Mailman-Users@python.org https://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://wiki.list.org/x/AgA3 Security Policy: http://wiki.list.org/x/QIA9 Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: https://mail.python.org/mailman/options/mailman-users/archive%40jab.org
Re: [Mailman-Users] Best way to slow down all the spam to my lists?
On Fri, Dec 13, 2019 at 11:16 AM Chromatest J. Pantsmaker < chromat...@chromatest.net> wrote: > I'm the system admin (though I'm not great at it). I have a problem with > spam. Hundreds of spam messages are posted to my lists each week. They're > non-subscribers so they don't go to the lists, but they *do* go to me, the > list owner which floods my inbox. I use RBL’s and the Spamassassin milter in Postfix with great success David > -- IBM i on Power Systems: For when you can't afford to be out of business! I'm riding in the American Diabetes Association's Tour de Cure to raise money for diabetes research, education, advocacy, and awareness. You can make a tax-deductible donation to my ride by visiting https://mideml.diabetessucks.net. You can see where my donations come from by visiting my interactive donation map ... https://mideml.diabetessucks.net/map (it's a geeky thing). I may have diabetes, but diabetes doesn't have me! -- Mailman-Users mailing list Mailman-Users@python.org https://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://wiki.list.org/x/AgA3 Security Policy: http://wiki.list.org/x/QIA9 Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: https://mail.python.org/mailman/options/mailman-users/archive%40jab.org
Re: [Mailman-Users] Best way to slow down all the spam to my lists?
Yeah, I wanted to avoid that because non-subscribers often email the list trying to contact the list admins or organization representatives instead. I've tried the first link above up through step 4. Step 5 is adding an additional filter to Spam Assassin and doesn't appear to be directly connected to the first four steps. On Fri, Dec 13, 2019 at 11:18 AM Richard Damon wrote: > On 12/12/19 12:46 PM, Chromatest J. Pantsmaker wrote: > > I'm the system admin (though I'm not great at it). I have a problem with > > spam. Hundreds of spam messages are posted to my lists each week. > They're > > non-subscribers so they don't go to the lists, but they *do* go to me, > the > > list owner which floods my inbox. > > > > I'm looking at the page on how to use SpamAssassin: > > > https://wiki.list.org/DOC/4.23%20How%20do%20I%20use%20SpamAssassin%20with%20Mailman%3F?action=show > > > > > > Is that the best way to do what I need? > > If so, what's the best method to use in my case? > > My system: > > Mailman 2.1.20 > > Apache2 / 2.4.18 > > Postfix 3.1.0 > > Ubuntu 16.04.1 LTS > > If you can't get earlier filtering to get the rate low enough, you may > need to just change the option > > Action to take for postings from non-members for which no explicit > action is defined. > (Details for generic_nonmember_action) > > To discard so you don't get the messages (don't set it to reject or you > will be backscattering). It does say that you won't see messages that > should go to the list but the send used the wrong account. > > -- > Richard Damon > > -- > Mailman-Users mailing list Mailman-Users@python.org > https://mail.python.org/mailman/listinfo/mailman-users > Mailman FAQ: http://wiki.list.org/x/AgA3 > Security Policy: http://wiki.list.org/x/QIA9 > Searchable Archives: > http://www.mail-archive.com/mailman-users%40python.org/ > Unsubscribe: > https://mail.python.org/mailman/options/mailman-users/chromatest%40chromatest.net > -- Mailman-Users mailing list Mailman-Users@python.org https://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://wiki.list.org/x/AgA3 Security Policy: http://wiki.list.org/x/QIA9 Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: https://mail.python.org/mailman/options/mailman-users/archive%40jab.org
Re: [Mailman-Users] Best way to slow down all the spam to my lists?
On 12/13/2019 10:17 AM, Richard Damon wrote: To discard so you don't get the messages (don't set it to reject or you will be backscattering). It does say that you won't see messages that should go to the list but the send used the wrong account. That's another good/final option, drop non-list-member email into the bit-bucket (or block hole if you prefer). Later, z! -- Mailman-Users mailing list Mailman-Users@python.org https://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://wiki.list.org/x/AgA3 Security Policy: http://wiki.list.org/x/QIA9 Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: https://mail.python.org/mailman/options/mailman-users/archive%40jab.org
Re: [Mailman-Users] Best way to slow down all the spam to my lists?
On 12/12/19 12:46 PM, Chromatest J. Pantsmaker wrote: > I'm the system admin (though I'm not great at it). I have a problem with > spam. Hundreds of spam messages are posted to my lists each week. They're > non-subscribers so they don't go to the lists, but they *do* go to me, the > list owner which floods my inbox. > > I'm looking at the page on how to use SpamAssassin: > https://wiki.list.org/DOC/4.23%20How%20do%20I%20use%20SpamAssassin%20with%20Mailman%3F?action=show > > > Is that the best way to do what I need? > If so, what's the best method to use in my case? > My system: > Mailman 2.1.20 > Apache2 / 2.4.18 > Postfix 3.1.0 > Ubuntu 16.04.1 LTS If you can't get earlier filtering to get the rate low enough, you may need to just change the option Action to take for postings from non-members for which no explicit action is defined. (Details for generic_nonmember_action) To discard so you don't get the messages (don't set it to reject or you will be backscattering). It does say that you won't see messages that should go to the list but the send used the wrong account. -- Richard Damon -- Mailman-Users mailing list Mailman-Users@python.org https://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://wiki.list.org/x/AgA3 Security Policy: http://wiki.list.org/x/QIA9 Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: https://mail.python.org/mailman/options/mailman-users/archive%40jab.org
Re: [Mailman-Users] Best way to slow down all the spam to my lists?
Thanks for the responses Carl and Bruce, I've been getting about 20 per day. Some days more. The noise is way higher than the signal level here. It's a low-used email list. I'll try out filtering at the MTA level and see how it goes. On Fri, Dec 13, 2019 at 10:34 AM Carl Zwanzig wrote: > On 12/12/2019 9:46 AM, Chromatest J. Pantsmaker wrote: > > I'm the system admin (though I'm not great at it). I have a problem with > > spam. Hundreds of spam messages are posted to my lists each week. > > (What's a acceptable level? I wouldn't spend many hours just to eliminate > 3 > spams a day.) > > > Is that the best way to do what I need? > > I'd go for #1, filtering at the MTA level, so that mailman generally has > less to do, for some ideas- > > https://www.howtoforge.com/spam-control-for-postfix > https://www.linuxbabe.com/mail-server/block-email-spam-postfix > > By implementing some of these, you may decide that spam-assassin isn't > necessary. > > Later, > > z! > > -- > Mailman-Users mailing list Mailman-Users@python.org > https://mail.python.org/mailman/listinfo/mailman-users > Mailman FAQ: http://wiki.list.org/x/AgA3 > Security Policy: http://wiki.list.org/x/QIA9 > Searchable Archives: > http://www.mail-archive.com/mailman-users%40python.org/ > Unsubscribe: > https://mail.python.org/mailman/options/mailman-users/chromatest%40chromatest.net > -- Mailman-Users mailing list Mailman-Users@python.org https://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://wiki.list.org/x/AgA3 Security Policy: http://wiki.list.org/x/QIA9 Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: https://mail.python.org/mailman/options/mailman-users/archive%40jab.org
Re: [Mailman-Users] Best way to slow down all the spam to my lists?
On 12/12/2019 9:46 AM, Chromatest J. Pantsmaker wrote: I'm the system admin (though I'm not great at it). I have a problem with spam. Hundreds of spam messages are posted to my lists each week. (What's a acceptable level? I wouldn't spend many hours just to eliminate 3 spams a day.) Is that the best way to do what I need? I'd go for #1, filtering at the MTA level, so that mailman generally has less to do, for some ideas- https://www.howtoforge.com/spam-control-for-postfix https://www.linuxbabe.com/mail-server/block-email-spam-postfix By implementing some of these, you may decide that spam-assassin isn't necessary. Later, z! -- Mailman-Users mailing list Mailman-Users@python.org https://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://wiki.list.org/x/AgA3 Security Policy: http://wiki.list.org/x/QIA9 Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: https://mail.python.org/mailman/options/mailman-users/archive%40jab.org
[Mailman-Users] Best way to slow down all the spam to my lists?
I'm the system admin (though I'm not great at it). I have a problem with spam. Hundreds of spam messages are posted to my lists each week. They're non-subscribers so they don't go to the lists, but they *do* go to me, the list owner which floods my inbox. I'm looking at the page on how to use SpamAssassin: https://wiki.list.org/DOC/4.23%20How%20do%20I%20use%20SpamAssassin%20with%20Mailman%3F?action=show Is that the best way to do what I need? If so, what's the best method to use in my case? My system: Mailman 2.1.20 Apache2 / 2.4.18 Postfix 3.1.0 Ubuntu 16.04.1 LTS -- Mailman-Users mailing list Mailman-Users@python.org https://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://wiki.list.org/x/AgA3 Security Policy: http://wiki.list.org/x/QIA9 Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: https://mail.python.org/mailman/options/mailman-users/archive%40jab.org
