From nobody Thu May 27 01:04:53 2021 X-Original-To: freebsd-current@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 189F2D7E3B9 for ; Thu, 27 May 2021 01:05:02 +0000 (UTC) (envelope-from philip@freebsd.org) Received: from smtp.freebsd.org (smtp.freebsd.org [IPv6:2610:1c1:1:606c::24b:4]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "smtp.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4Fr8k56gnyz59Bf; Thu, 27 May 2021 01:05:01 +0000 (UTC) (envelope-from philip@freebsd.org) Received: from weatherwax.trouble.is (weatherwax.trouble.is [IPv6:2a00:1098:82:3a::1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "weatherwax.trouble.is", Issuer "R3" (verified OK)) (Authenticated sender: philip/mail) by smtp.freebsd.org (Postfix) with ESMTPSA id B3DBE3336C; Thu, 27 May 2021 01:05:01 +0000 (UTC) (envelope-from philip@freebsd.org) Received: from rincewind.trouble.is (rincewind.trouble.is [95.216.22.234]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256 client-signature ECDSA (P-256) client-digest SHA256) (Client CN "rincewind.trouble.is", Issuer "R3" (verified OK)) by weatherwax.trouble.is (Postfix) with ESMTPS id 4Fr8k464nJz1tgF; Thu, 27 May 2021 01:05:00 +0000 (UTC) Received: by rincewind.trouble.is (Postfix, authenticated sender philip) id 4Fr8k16Hbkz5fpW; Thu, 27 May 2021 01:04:57 +0000 (UTC) From: Philip Paeps To: "Julian H. Stacey" Cc: postmaster@FreeBSD.org, Lucas Nali de =?utf-8?q?Magalh=C3=A3es?= , jake h , freebsd-current@FreeBSD.org Subject: Re: Spam mail being sent via the FreeBSD mailing lists Date: Thu, 27 May 2021 09:04:53 +0800 X-Clacks-Overhead: GNU Terry Pratchett X-Mailer: MailMate (1.14r5807) Message-ID: <1FCAC5FA-0091-458F-8B93-C2EFF0DE8824@freebsd.org> In-Reply-To: <202105261451.14QEov8j007524@fire.js.berklix.net> References: <202105261451.14QEov8j007524@fire.js.berklix.net> List-Id: Discussions about the use of FreeBSD-current List-Archive: https://lists.freebsd.org/archives/freebsd-current List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-current@freebsd.org MIME-Version: 1.0 Content-Type: text/plain; format=flowed; markup=markdown X-ThisMailContainsUnwantedMimeParts: N On 2021-05-26 22:50:57 (+0800), Julian H. Stacey wrote: > Kurt Jaeger wrote: >> Hi! >>>> On May 25, 2021, at 8:53 PM, jake h wrote: >>>> I have recently received several pieces of spam mail, apparently >>>> sent via >>>> this mailing list. These pieces of mail are the usual spam formula; >>>> Your >>>> phone has a virus, Ads, Fake blackmail, so on and so forth. >>>> Has anyone else noticed these spam emails, or is it just me? >>> I'm receiving these too. It looks like the servers are bouncing some >>> of them just for me, even. And I'm receiving not just from this >>> list; also from freebsd-hackers@ and ports@. >> >> postmaster@ is aware of the problem, we do not yet have a clear-cut >> solution and we're investigating. >> -- >> pi@opsec.eu +49 171 3101372 Now what ? > > I'm on most lists & also seen much spam lately. > > Changing Mailman list configs to only allowing postings from > subscribed > addresses could dump nearly all spam; (I'm a Mailman admin elsewhere > ). This was how the majority of FreeBSD mailing lists were configured. Most lists were set to discard postings from non-subscribers. Some were set to hold. A few were set to reject. > But @freebsd.org has prefered open lists for near all lists. > Best only for the initial fresh- after- install- questions@, IMO. This has not been true for a good while now. Historically, nearly all our lists were indeed open. In recent years, we've made most lists subscriber-only, with some exceptions and whitelists. > List back end responses to eg isp@ & hackers@ have recently migrated > from Mailman to Mlmmj, I guess that shouldn't directly affect spam > protection ? but it'd be interesting to know what advantage the > migration might bring @freebsd.org ? For one thing, running supported software means we can continue upgrading our mailservers with fewer worries. Mailman 2 relies on Python 2, which has unfortunately become abandonware. Philip -- Philip Paeps Senior Reality Engineer Alternative Enterprises