[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Spam on Debian lists



Joel Rees <joel.rees@gmail.com> writes:

> On Fri, Apr 21, 2017 at 6:52 AM, Patrick Bartek <nemommxiv@gmail.com> wrote:
>> On Thu, 20 Apr 2017 22:40:56 +0200 Jochen Spieker <ml@well-adjusted.de>
>> wrote:
>>
>>> fc:
>>> >
>>> > Actually -- does anyone monitor this list for this type of stuff?
>>>
>>> You have no idea *how much* spam is blocked by the work of the list
>>> masters. But it's not that anybody monitors all of the almost 300
>>> Debian lists¹ with thousands of posts each day.
>>>
>>> > I see these types of things come through periodically -- and 1
>>> > delete on the front end could prevent a lot of woe.
>>>
>>> Your help is appreciated:
>>> https://wiki.debian.org/Teams/ListMaster/ListArchiveSpam
>>>
>>> Obviously, this only affects the archive after all subscribers already
>>> received the spam message. Moderating all Debian lists is not a job
>>> that anybody wants to do (and it wouldn't even be appreciated).
>>>
>>> > *Even more so* -- it seems like unauthorized users can email this
>>> > list?
>>> >
>>> > Why not just restrict it to people who have subscribed?
>>>
>>> Because this excludes use cases that are deemed valid by the list
>>> masters.
>>
>> Like what?
>>
>> Why not this:  To post or reply to the list, you must be
>> a subscriber; but to read/browse (even search archives, etc.), you
>> do not. This is the way most of the lists I've been involved with have
>> been set up.  Works quite well controlling spurious posting by 'bots.
>> One list I used required annual renewal..
>
> How do you limit posts to subscribers?
>
> Login?
> Subscriber list?

Yes, that's easily done -- check the From: against the subscriber list.

That isn't perfect; a list I administer gets occasional spam from the
forged email address of a subscriber; the list is so incredibly low
volume that it's OK for me to just moderate it.  That wouldn't be the
case here.

> What happens when you need an answer, but you don't have access to a
> functional machine that you can trust?
>
> Also, I think there is a web forum that functions more or less as you describe:
>
> http://forums.debian.net/


Reply to: