Today every user@redhat.com subscriber to elfutils-devel@lists.fedoraproject.org got their subscription disabled. This was because elfutils-devel received some spam and forwarded it on. Then it got: host ext-mx.corp.redhat.com[10.4.123.10] said: 554 5.7.1 This was rejected because it looks like spam (in reply to end of DATA command) This made it decide to disable each subscriber. It would be good if lists.fedorahosted.org mailers setup could be coordinated with redhat.com mailers at least to the extent that they recognize the same spam, or something.
roland said that this list does not require subscription in order to post. This is unusual for redhat.com or fp.org mailing lists so our mail infrastructure is not well setup to deal with this. Here are my recommendations:
1) All lists should require subscription. Those who do not wish to subscribe should be suggested to subscribe then turn on nomail so they receive nothing. Then they can freely post.
2) If they refuse to require subscription then we need to implement some spam filtering controls. Currently redhat.com sets non-standard spam headers. Mailman is not configured to act upon those spam headers. This particular list should probably be more aggressive about sending suspected spam into the moderation queue than other lists.
3) Red Hat IS/IT should modify their configuration to not scan mail coming from lists.fedoraproject.org. Doing so would be redundant as it was already scanned inbound from the public Internet.
we do not have any spam filters on list mail
Login to comment on this ticket.