I just got spammed recently as well (it obviously changes the *-owner
address during the time so obviously all lists owners will sooner or later
be affected), so I've done some research there:

It is better to disallow delivery based on the sender address regexp in 
combination with subject regexp.

Sender is always /[0-9]+@qq\.com/
Subject is always /.*只要投紸荭宝天天.*/

Feel free to entirely block every email matching the rules above and sent to
any @wikimedia.org address.


Kind regards


Danny B.

---------- Původní e-mail ----------
Od: Keith Herron <[email protected]>
Komu: List for discussions and announcements related to lists.wikimedia.org
<[email protected]>
Datum: 13. 7. 2017 19:50:47
Předmět: Re: [List admins] Urgent: Block *@qq.com because of massive spam
wave to -owner address
"


I’ve added the following to bounce_matching_headers for wikials-l:





  from: .*@qq.com

  X-Spam-Score:[^+]*[+]{6,}





This should hold posts from qq.com(http://qq.com/) addresses as well as
messages with a 6 or greater spam score.  Please shout if the issue persists
on wikials-l.




Will check out additional lists and follow up in phab shortly.





Best,

—Keith




"
On Jul 13, 2017, at 1:44 PM, Risker <[email protected]
(mailto:[email protected])> wrote:




See https://phabricator.wikimedia.org/T170601
(https://phabricator.wikimedia.org/T170601)   - reported from the checkuser-
l-owner list.  (Oddly, the only list I moderate that has been spammed like
this, that I can tell.)  Please add your comments there.







Risker/Anne




On 13 July 2017 at 13:23, Keith Herron <[email protected]
(mailto:[email protected])> wrote:
"Hi Manuel, Taking a look at this now.

Best,
—Keith



> On Jul 13, 2017, at 1:20 PM, Manuel Schneider <manuel.schneider@wikimedia.
ch(mailto:[email protected])> wrote:
>
> Dear all,
>
> can someone please block mails coming from qq.com(http://qq.com/) ?
>
> I am getting drowned in mails from random mail addresses
> (numbers)@qq.com(http://qq.com/), sent to [email protected].
org(mailto:[email protected]).
>
> Thanks,
>
>
> Manuel
>
> --
> Wikimedia CH - Verein zur Förderung Freien Wissens
> www.wikimedia.ch(http://www.wikimedia.ch/)
>
> _______________________________________________
> Listadmins mailing list
> [email protected](mailto:[email protected])
> https://lists.wikimedia.org/mailman/listinfo/listadmins
(https://lists.wikimedia.org/mailman/listinfo/listadmins)


_______________________________________________
Listadmins mailing list
[email protected](mailto:[email protected])
https://lists.wikimedia.org/mailman/listinfo/listadmins
(https://lists.wikimedia.org/mailman/listinfo/listadmins)


"


_______________________________________________
Listadmins mailing list
[email protected](mailto:[email protected])
https://lists.wikimedia.org/mailman/listinfo/listadmins

"


_______________________________________________
Listadmins mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/listadmins
"
_______________________________________________
Listadmins mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/listadmins

Reply via email to