Re: [Mailman-Users] Mapping back from pipermail HTML to a specific message in the raw archive?

2015-05-20 Thread Mark Sapiro 
On 05/20/2015 06:56 PM, Skip Montanaro wrote:
> I have a list of spam HTML messages in pipermail archives. I need to clear
> out their content (no great problem there), but I also want to clean the
> corresponding messages in the raw mbox file (zap subject, message body,
> etc, but leave a placeholder message so future archive regeneration doesn't
> mess up article numbers). Looking at one of these messages (HTML source), I
> see nothing like a message id which would allow me to unambiguously
> identify the corresponding raw message. Does something exist? If not, what
> heuristics have people developed to perform this mapping?


The poster's address in the HTML is a link that looks like:

>  HREF="mailto:list%40example.com?Subject=Re%3A%20%Actual_Subject&In-Reply-To=%3CCAKmAgbSRpqwRU1sR8ij36psvSUyrXMWv-AcEVp%3D1%2BCWRZHh4Rg%40mail.gmail.com%3E";
>TITLE="Actual_Subject">poster at example.com
>

The In-Reply-To fragment is the Message-ID.

-- 
Mark Sapiro The highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan
--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org

[Mailman-Users] Mapping back from pipermail HTML to a specific message in the raw archive?

2015-05-20 Thread Skip Montanaro 
I have a list of spam HTML messages in pipermail archives. I need to clear
out their content (no great problem there), but I also want to clean the
corresponding messages in the raw mbox file (zap subject, message body,
etc, but leave a placeholder message so future archive regeneration doesn't
mess up article numbers). Looking at one of these messages (HTML source), I
see nothing like a message id which would allow me to unambiguously
identify the corresponding raw message. Does something exist? If not, what
heuristics have people developed to perform this mapping?

Thanks,

Skip Montanaro
--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Re: [Mailman-Users] Subscription Spam

2015-05-20 Thread Mark Sapiro 
On 05/20/2015 06:44 AM, Brian Carpenter wrote:
> 
> Subscription spam is starting to become an issue with some of our mailing
> lists. Am I correct that the SUBSCRIBE_FORM_SECRET setting will help reduce
> the amount of subscription spam? Are there any other measures that can be
> done to reduce this type of spam? The pattern is one email address trying to
> subscribe to all the mailing lists of domain for several days. Banning the
> address works until a new email address is being used.


Yes, setting SUBSCRIBE_FORM_SECRET has so far been very effective.

Also, see the post at


-- 
Mark Sapiro The highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan
--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org

[Mailman-Users] Subscription Spam

2015-05-20 Thread Brian Carpenter 
Hello My Fellow Mailman Users:

 

Subscription spam is starting to become an issue with some of our mailing
lists. Am I correct that the SUBSCRIBE_FORM_SECRET setting will help reduce
the amount of subscription spam? Are there any other measures that can be
done to reduce this type of spam? The pattern is one email address trying to
subscribe to all the mailing lists of domain for several days. Banning the
address works until a new email address is being used.

 

 



 

Brian Carpenter
Owner



Providing Cloud Services and more for over 15 years.


T: 336.755.0685
E: br...@emwd.com
www.emwd.com



 

 
 



 

--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Re: [Mailman-Users] Migrating a list to a new email address

2015-05-20 Thread Adam McGreggor 
On Wed, May 20, 2015 at 02:38:01PM +0100, David Osborne wrote:
> On 15/05/15 05:32, Bill Christensen wrote:
> >I long ago routed real users to an alternative signup, but the spam
> >keeps coming, unrelenting, and are now anywhere between 1k and 10k per day.
> 
> One of our lists was spammed in a similar way. The approach I took
> was to configure Apache to allow requests to /mailman/subscribe only
> when the referring page was on our server:

I've used mod_security/fail2ban in the past, both work as well as
might be expected.

[…]

> This message and any attachment are intended solely for the addressee
> and may contain confidential information. If you have received this
> message in error, please send it back to me, and immediately delete
> it.

Hum.


-- 
"Celebrity can be malign in that it becomes a form of idolatry, and
 people live their lives vicariously through the rich and famous rather
 than attending to their own lives."
-- John Sentamu
--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Re: [Mailman-Users] Migrating a list to a new email address

2015-05-20 Thread David Osborne 

On 15/05/15 05:32, Bill Christensen wrote:

I have a long running list with thousands of subscribers that needs to
move to a new set of email addresses.

The existing list is announce-only, so doesn't get a whole lot of
traffic - typically at most a few outgoing emails a year.  But some time
back a bot started sending spam registrations via hits to the web server
in the form

  
/mailman/subscribe.cgi/bwbnewsletter?email=@&fullname=&pw=123456789&pw-conf=123456789&language=en&digest=0&email-button=Subscribe.


I long ago routed real users to an alternative signup, but the spam
keeps coming, unrelenting, and are now anywhere between 1k and 10k per day.


One of our lists was spammed in a similar way. The approach I took was 
to configure Apache to allow requests to /mailman/subscribe only when 
the referring page was on our server:


SetEnvIf Referer lists\.my\.domain localreferer


Order deny,allow
Deny from all
Allow from env=localreferer


--
David Osborne
University of Nottingham, UK





This message and any attachment are intended solely for the addressee
and may contain confidential information. If you have received this
message in error, please send it back to me, and immediately delete it. 


Please do not use, copy or disclose the information contained in this
message or in any attachment.  Any views or opinions expressed by the
author of this email do not necessarily reflect the views of the
University of Nottingham.

This message has been checked for viruses but the contents of an
attachment may still contain software viruses which could damage your
computer system, you are advised to perform your own checks. Email
communications with the University of Nottingham may be monitored as
permitted by UK legislation.

--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org