[Mailman-Users] how to disable main mailman-request and mailman list without stopping mailman functionality

2020-01-27 Thread Jelle de Jong

Hello everybody,

I am seeing our mail...@lists.company.nl being used to try to spam 
people and receiving mail delivery failures from 
mailman-requ...@lists.company.nl attempts.


I removed the mailman mailinglist but that ended up disabling mailman 
and all of the mailinglsit from working. I created the mailman 
mailinglist again and the spam started again.


I looked at the the options but can not find the right ones that might help?

PS. I had mailman not advertised by default but some Debian update a 
while back seem to have made it advertised. I disabled the advertising 
of the list but the spam keeps coming. Maybe disable advertising by 
default for the mailman default list?


What are the recommended steps?

Kind regards,

Jelle de Jong
--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org


Re: [Mailman-Users] how to disable main mailman-request and mailman list without stopping mailman functionality

2020-01-27 Thread Mark Sapiro

On 1/26/20 9:03 AM, Jelle de Jong wrote:


PS. I had mailman not advertised by default but some Debian update a 
while back seem to have made it advertised. I disabled the advertising 
of the list but the spam keeps coming. Maybe disable advertising by 
default for the mailman default list?



First, advertised or not, it is well known that every Mailman 2.1 
installation has a site list, usually called mailman. Also the 
mail...@example.com address is exposed on both the listinfo and admin 
overview pages in the web UI.




What are the recommended steps?


It depends on how your MTA deliveres to Mailman. If it uses aliases, you 
can change the mailman-request alias in mailman's aliases, but if 
Mailman automatically generates these, that may get undone. A better 
approach is to put an alias for the mailman-request and maybe other 
mailman- addresses in an alias file that is processed before Mailman's 
aliases or delivery. You can use these to send the mail to /dev/null or 
to some user or mailbox if you want to see the mail.


--
Mark Sapiro The highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan
--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org