1351683 - Spam on community-poland mailing list

Status: RESOLVED INVALID

(Infrastructure & Operations :: Infrastructure: Mail, task)

Description

[Stefan Plewako [:stef]]

Some time ago (2 months maybe) I started receiving much more moderation notifications about spam messages (few a day) - not sure why.

But recently (27.03.2017) one managed to slip through, https://mail.mozilla.org/pipermail/community-poland/2017/000541.html (because of mailing list address in From header?)

It would be great if we could find out why such message was accepted automatically, test prevention method (adding mailing list address to discard list?) and delete the message.

Additionally it would be good to know if something important was changed recently (like this year) in a way messages are delivered to mailing list that could change volume of spam hitting the list.

Comment 1

[Stefan Plewako [:stef]]

(In reply to Stefan Plewako [:stef] from comment #0)
> But recently (27.03.2017) one managed to slip through,
> https://mail.mozilla.org/pipermail/community-poland/2017/000541.html
> (because of mailing list address in From header?)
> 
> It would be great if we could find out why such message was accepted
> automatically, test prevention method (adding mailing list address to
> discard list?) and delete the message.

I forgot that we have e-mail whitelist for few Mozilla related domains - that would explain auto accept part. As we don't get that many messages from nonsubscribers on those domains I could remove whitelist entirely.

But if there is no protection against e-mail spoofing (?) than how sender/accept_these_nonmembers could be reliably used? (and how about protections based on e-mail addresses checks?)

> Additionally it would be good to know if something important was changed
> recently (like this year) in a way messages are delivered to mailing list
> that could change volume of spam hitting the list.

Comment 2

[Stefan Plewako [:stef]]

Let's remove https://mail.mozilla.org/pipermail/community-poland/2017/000541.html message at least.

Comment 3

[Ed Lim [:limed]]

(In reply to Stefan Plewako [:stef] from comment #2)
> Let's remove
> https://mail.mozilla.org/pipermail/community-poland/2017/000541.html message
> at least.

Removed the message and regenerated archive

Comment 4

[Stefan Plewako [:stef]]

Great, thank you. Do you think anything else in this bug could be actionable?

Comment 5

[Greg Cox [:gcox]]

Mailman was decom'ed, there's nothing left to do here.