On Wed, 27 May 2020, Jeffrey Westgate wrote:
We've been running a mailman server, pushing more than 45 lists, for as long as I've been here, and recently spammers and phishers have found us.
If you are running 45 lists then I would expect that you have a decent mail server (MTA) ahead of that. In that case, your first defence should be there. Enable RBL rejections. Is SpamAssassin tagging received emails? Enter a rule into Mailman to reject messages with a high spam level. I set a rejection rule based on asterisks in X-Spam-Level: which is easy.
Also, my mailhost firewall blocks traffic from .cn, .kr, .ro, ru addresses which eliminates a lot of spam and hacking attempts. I don't normally expect to get any traffic from those countries so this is an easy choice for me with great results. ymmv.
Check your MTA and find out what it can do for you first. ------------------------------------------------------ Mailman-Users mailing list -- mailman-users@python.org To unsubscribe send an email to mailman-users-le...@python.org https://mail.python.org/mailman3/lists/mailman-users.python.org/ Mailman FAQ: http://wiki.list.org/x/AgA3 Security Policy: http://wiki.list.org/x/QIA9 Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/ https://mail.python.org/archives/list/mailman-users@python.org/
