On 10/07/2015 06:16 AM, br...@emwd.com wrote: > We keep > seeing dozens of subscription spam coming in from gmail addresses PER > MINUTE with the following format: > > kihuotter+59233...@gmail.com > > We have implemented the form secret function that was introduced in > Mailman 2.16 but it is having no effect on these particular subscription > requests.
When these first started, enabling SUBSCRIBE_FORM_SECRET would help, but there were still many that delayed long enough even with SUBSCRIBE_FORM_MIN_TIME = seconds(8) to get through. Currently, the ones that hit mail.python.org almost always delay long enough. I just checked the vette log and we're currently banning about 18,000 attempts per day. See <https://mail.python.org/pipermail/mailman-users/2015-September/079844.html> > I remember seeing a solution from Mark Sapiro addressing this exact > issue but I can't seem to find it again. There are several threads on this in the archives of this list from August and September, but the above linked post is a good summary. -- Mark Sapiro <m...@msapiro.net> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan ------------------------------------------------------ Mailman-Users mailing list Mailman-Users@python.org https://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://wiki.list.org/x/AgA3 Security Policy: http://wiki.list.org/x/QIA9 Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: https://mail.python.org/mailman/options/mailman-users/archive%40jab.org
