Re: [Mailman-Users] Customize "From" when munging it for DMARC?

[Stephen J. Turnbull]

Jordan Brown writes:

 > Alas, no.  I've seen too many messages intended to be private sent to
 > the entire list with that configuration; I would never use it.

Good for you!  I'm sorry that means that the suggestion is useless to
you, though.

Steve
--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Re: [Mailman-Users] Distributed mass subscribe attack?

[Mark Sapiro]

On 08/08/2017 10:22 AM, David Gibbs wrote:
> 
> Anyone else noticing a distributed mass subscribe attack going on their
> lists?
> 
> I've noticed a massive number of attempts a small subset of email
> addresses, with modifiers (address+modif...@example.com), going on.
> 
> It appears the address is valid ... so it appears to be some kind of hit
> job to flood someone's inbox.
> 
> Luckily the address's are trivial to block using 'ban_list'.


I've seen this on mail.python.org in the past but not recently. Both the
form you mention and a local-p...@gmail.com form with dots interspersed
in the local part (which gmail ignores). I agree that it appears to be
some kind of hit job to flood someone's inbox.

It is this kind of attack that motivated the GLOBAL_BAN_LIST feature in
MM 2.1.21.

What I've seen recently is massive non-member posts in chinese to
maulman-us...@mailman3.org from addresses of the form
string_of_dig...@qq.com and some at 163.com. After waking up to 2000+
held message notifications a while back, I now block these with a
Postfix header_checks rule

/^From:.*<.*[0-9]{4}.*@(qq|163)\.com>/ REJECT Go away you F*ing mail bomber

I am still seeing a few from various @163.com addresses, but I am now
(temporarily?) discarding non-member posts, so I only see them in logs
if I look.

-- 
Mark Sapiro The highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan
--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Re: [Mailman-Users] Mailman 3 on FreeBSD

[Mark Sapiro]

John Poltorak wrote:

> Is it possible to run Mailman 3 on FreeBSD?


I don't know of anything that would be an issue. I know MM 3 has been
successfully installed on Mac OS X/Darwin.

A better place for this inquiry would be mailman-us...@mailman3.org

or mailman-develop...@python.org
.

-- 
Mark Sapiro The highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan
--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Re: [Mailman-Users] Distributed mass subscribe attack?

[Barry S. Finkel]

On 8/8/2017 12:22 PM, David Gibbs wrote:

Folks:

Anyone else noticing a distributed mass subscribe attack going on their 
lists?


I've noticed a massive number of attempts a small subset of email 
addresses, with modifiers (address+modif...@example.com), going on.


It appears the address is valid ... so it appears to be some kind of hit 
job to flood someone's inbox.


Luckily the address's are trivial to block using 'ban_list'.

The hosts they are using appear to be from all over the place, although 
they do seem to be favoring hosts serviced by virtua.com.br.


david





I would report this to  mail-ab...@cert.br .

--Barry Finkel
--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org

[Mailman-Users] Distributed mass subscribe attack?

[David Gibbs]

Folks:

Anyone else noticing a distributed mass subscribe attack going on their lists?

I've noticed a massive number of attempts a small subset of email addresses, 
with modifiers (address+modif...@example.com), going on.

It appears the address is valid ... so it appears to be some kind of hit job to 
flood someone's inbox.

Luckily the address's are trivial to block using 'ban_list'.

The hosts they are using appear to be from all over the place, although they do 
seem to be favoring hosts serviced by virtua.com.br.

david


--
IBM i on Power Systems: For when you can't afford to be out of business!

I'm riding a metric century (100 km / 65 miles) in the American Diabetes 
Association's Tour de Cure to raise money for diabetes research, education, 
advocacy, and awareness.  You can make a tax deductible donation to my ride by 
visiting http://gmane.diabetessucks.net.  My goal is $6000 but any amount is 
appreciated.

You can see where my donations come from by visiting my interactive donation 
map ... http://gmane.diabetessucks.net/map (it's a geeky thing).

I may have diabetes, but diabetes doesn't have me!

--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org

[Mailman-Users] Mailman 3 on FreeBSD

[John Poltorak]

Is it possible to run Mailman 3 on FreeBSD?

If anyone has it working can you say if I should simply follow the normal
installation instructions or are there any gotchas?
--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org