Re: [Mailman-Users] Best way to slow down all the spam to my lists?

2019-12-14 Thread Stephen J. Turnbull
Chromatest J. Pantsmaker writes:

 > I had sent some test email from gmail and several hours later those
 > test messages didn't pass.  Maybe I goofed something along the way.

If the GMail address used to send is the same as the address
subscribed to the test list, you won't see it because GMail
deduplicates aggressively.  There is no way to fix this in GMail.  If
you are testing from GMail you *must* use a separate address as the
recipient.

Check the Mailman and the Postfix logs to see what your Mailman host
thinks is happening.

Steve
--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org


Re: [Mailman-Users] Best way to slow down all the spam to my lists?

2019-12-14 Thread Keith Seyffarth
"Stephen J. Turnbull"  writes:

> Chromatest J. Pantsmaker writes:
>
>  > I had sent some test email from gmail and several hours later those
>  > test messages didn't pass.  Maybe I goofed something along the way.
>
> If the GMail address used to send is the same as the address
> subscribed to the test list, you won't see it because GMail
> deduplicates aggressively.  There is no way to fix this in GMail.  If
> you are testing from GMail you *must* use a separate address as the
> recipient.

Also, if you are testing greylisting from a GMail account, GMail tends
to retry messages from another random outgoing server, so it may take
considerable time before GMail happens to randomly pick an outgoing
server it has already used and greylisting can confirm the same message
from the same user at the same server... (It would be nice if GMail
would assign an outgoing message to one server and just retry from
there)

Keith

-- 

from my mac to yours...

Keith Seyffarth
mailto:w...@weif.net
https://www.weif.net/ - Home of the First Tank Guide!
https://www.rpgcalendar.net/ - the Montana Role-Playing Calendar

http://www.miscon.org/ - Montana's Longest Running Science Fiction Convention
--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org


Re: [Mailman-Users] Best way to slow down all the spam to my lists?

2019-12-14 Thread Grant Taylor via Mailman-Users

On 12/13/19 9:02 PM, Mark Sapiro wrote:
As postgrey learns, it will remember triplets (sender, sending IP, 
recipient) and not delay them and in addition will whitelist domains 
that retry successfully more than a few times.


The bigger senders are doing things now (more than ever) that they 
weren't doing 15+ years ago.  Now farms of servers will try to contact 
you.  The message may first try from one IP, then from another IP, then 
from a 3rd  It may eventually try from the same IP and make it through.


I think most grey list solutions have an option to specify the network 
(frequently configured a a /24) for the sending IP.  This significantly 
helps with different servers in the same server farm trying to resend 
messages.


Another option that doesn't have this (state based) limitation is 
nolisting.  (TCP RST from first MX and subsequent MX(s) accept email.)




--
Grant. . . .
unix || die



smime.p7s
Description: S/MIME Cryptographic Signature
--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org


Re: [Mailman-Users] Best way to slow down all the spam to my lists?

2019-12-14 Thread Keith Seyffarth
Grant Taylor via Mailman-Users  writes:

> On 12/13/19 9:02 PM, Mark Sapiro wrote:
>> As postgrey learns, it will remember triplets (sender, sending IP, 
>> recipient) and not delay them and in addition will whitelist domains 
>> that retry successfully more than a few times.
>
> The bigger senders are doing things now (more than ever) that they 
> weren't doing 15+ years ago.  Now farms of servers will try to contact 
> you.  The message may first try from one IP, then from another IP, then 
> from a 3rd  It may eventually try from the same IP and make it through.
>
> I think most grey list solutions have an option to specify the network 
> (frequently configured a a /24) for the sending IP.  This significantly 
> helps with different servers in the same server farm trying to resend 
> messages.

Some greylisting solutions also allow you to whitelist a domain or
subdomain, but this can result in spammers spoofing that domain getting
through...

Keith


-- 

from my mac to yours...

Keith Seyffarth
mailto:w...@weif.net
https://www.weif.net/ - Home of the First Tank Guide!
https://www.rpgcalendar.net/ - the Montana Role-Playing Calendar

http://www.miscon.org/ - Montana's Longest Running Science Fiction Convention
--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org


Re: [Mailman-Users] Best way to slow down all the spam to my lists?

2019-12-14 Thread Richard Damon
On 12/14/19 4:29 PM, Keith Seyffarth wrote:
> Grant Taylor via Mailman-Users  writes:
>
>> On 12/13/19 9:02 PM, Mark Sapiro wrote:
>>> As postgrey learns, it will remember triplets (sender, sending IP, 
>>> recipient) and not delay them and in addition will whitelist domains 
>>> that retry successfully more than a few times.
>> The bigger senders are doing things now (more than ever) that they 
>> weren't doing 15+ years ago.  Now farms of servers will try to contact 
>> you.  The message may first try from one IP, then from another IP, then 
>> from a 3rd  It may eventually try from the same IP and make it through.
>>
>> I think most grey list solutions have an option to specify the network 
>> (frequently configured a a /24) for the sending IP.  This significantly 
>> helps with different servers in the same server farm trying to resend 
>> messages.
> Some greylisting solutions also allow you to whitelist a domain or
> subdomain, but this can result in spammers spoofing that domain getting
> through...
>
> Keith
>
>
Unless you only whitelist domains which use SPF, then SPF will catch the
spoofers.

-- 
Richard Damon

--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org