Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 27 May 2021 09:04:53 +0800
From:      Philip Paeps <philip@freebsd.org>
To:        "Julian H. Stacey" <jhs@berklix.com>
Cc:        postmaster@FreeBSD.org, Lucas Nali de =?utf-8?q?Magalh=C3=A3es?= <rollingbits@gmail.com>, jake h <jakehfreebsd@gmail.com>, freebsd-current@FreeBSD.org
Subject:   Re: Spam mail being sent via the FreeBSD mailing lists
Message-ID:  <1FCAC5FA-0091-458F-8B93-C2EFF0DE8824@freebsd.org>
In-Reply-To: <202105261451.14QEov8j007524@fire.js.berklix.net>
References:  <202105261451.14QEov8j007524@fire.js.berklix.net>

next in thread | previous in thread | raw e-mail | index | archive | help
On 2021-05-26 22:50:57 (+0800), Julian H. Stacey wrote:
> Kurt Jaeger wrote:
>> Hi!
>>>> On May 25, 2021, at 8:53 PM, jake h <jakehfreebsd@gmail.com> wrote:
>>>> I have recently received several pieces of spam mail, apparently 
>>>> sent via
>>>> this mailing list. These pieces of mail are the usual spam formula; 
>>>> Your
>>>> phone has a virus, Ads, Fake blackmail, so on and so forth.
>>>> Has anyone else noticed these spam emails, or is it just me?
>>> I'm receiving these too. It looks like the servers are bouncing some 
>>> of them just for me, even. And I'm receiving not just from this 
>>> list; also from freebsd-hackers@ and ports@.
>>
>> postmaster@ is aware of the problem, we do not yet have a clear-cut
>> solution and we're investigating.
>> -- 
>> pi@opsec.eu            +49 171 3101372                    Now what ?
>
> I'm on most lists & also seen much spam lately.
>
> Changing Mailman list configs to only allowing postings from 
> subscribed
> addresses could dump nearly all spam;  (I'm a Mailman admin elsewhere 
> ).

This was how the majority of FreeBSD mailing lists were configured.  
Most lists were set to discard postings from non-subscribers.  Some were 
set to hold.  A few were set to reject.

> But @freebsd.org has prefered open lists for near all lists.
> Best only for the initial fresh- after- install- questions@, IMO.

This has not been true for a good while now.  Historically, nearly all 
our lists were indeed open.  In recent years, we've made most lists 
subscriber-only, with some exceptions and whitelists.

> List back end responses to eg isp@ & hackers@ have recently migrated
> from Mailman to Mlmmj, I guess that shouldn't directly affect spam
> protection ?  but it'd be interesting to know what advantage the
> migration might bring @freebsd.org ?

For one thing, running supported software means we can continue 
upgrading our mailservers with fewer worries.  Mailman 2 relies on 
Python 2, which has unfortunately become abandonware.

Philip

-- 
Philip Paeps
Senior Reality Engineer
Alternative Enterprises



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1FCAC5FA-0091-458F-8B93-C2EFF0DE8824>