Filter messages with high X-Spam-Score on the mailing lists which don't already, like wikipedia-l
Closed, ResolvedPublic
Actions

Assigned To

None

Authored By

	Nemo_bis
	Mar 22 2017, 8:55 AM

Description

I'm seeing various messages with X-Spam-Score above 10 or even 12 being delivered from mailing lists:

P5103 mailman X-Spam-Score example

1	Date: Wed, 22 Mar 2017 12:32:12 +0800
2	Message-ID: <1734573761.20170322073212@gmx.net>
3	Content-Language: en-us
4	MIME-Version: 1.0
5	X-Content-Filtered-By: Mailman/MimeDel 2.1.18
6	Subject: [Wikipedia-l] =?utf-8?q?that=27s_interesting?=
7	[...]
8	X-Spam-Score: 10.4 (++++++++++)
9	X-Spam-Report: Spam detection software, running on the system "fermium.wikimedia.org",
10	has identified this incoming email as possible spam. The original
11	message has been attached to this so you can view it or label
12	similar future email. If you have any questions, see
13	the administrator of that system for details.
14
15	Content preview: Hey friend, Here are some interesting facts you may be interested
16	in, I think this information could be helpful, read it here http://full.north-shore-pest-control.com/7a7b
17	My best to you, alex.here [...]
18
19	Content analysis details: (10.4 points, 4.0 required)
20
21	pts rule name description
22	---- ---------------------- --------------------------------------------------
23	1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist
24	[URIs: north-shore-pest-control.com]
25	3.6 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
26	[14.187.125.101 listed in zen.spamhaus.org]
27	0.7 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
28	1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.
29	[14.187.125.101 listed in bb.barracudacentral.org]
30	1.5 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server
31	[14.187.125.101 listed in dnsbl.sorbs.net]
32	0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
33	(alex.here[at]gmx.net)
34	1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

I normally point admins to https://wikitech.wikimedia.org/wiki/Mailman#Spam_scores and they act quickly, but https://lists.wikimedia.org/mailman/listinfo/wikipedia-l has no active admin. Can a mailman admin update the rules for wikipedia-l please?

Details

	Subject	Repo	Branch	Lines +/-
	Make mailman filter messages with high X-Spam-Score by default	operations/puppet	production	+7 -0

Customize query in gerrit

Related Objects

Mentioned In: T170601: Massive spam to -owner mailing lists from *@qq.com emails
T160529: Sender email spoofing
Mentioned Here: P5103 mailman X-Spam-Score example

Event Timeline

Nemo_bis created this task.Mar 22 2017, 8:55 AM

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptMar 22 2017, 8:55 AM

Aklapper closed this task as a duplicate of T160883: wikinews-l's spam filter (score) does not work.Mar 22 2017, 1:25 PM

I have no idea why this was closed, but https://lists.wikimedia.org/mailman/listinfo/wikipedia-l still needs action.

Nemo_bis renamed this task from Filter messages with high X-Spam-Score on some mailing lists to Filter messages with high X-Spam-Score on some mailing lists like wikipedia-l.Apr 5 2017, 7:23 PM

Nemo_bis triaged this task as Medium priority.

If necessary, for wikipedia-l, I can offer to be an admin.

Again: https://lists.wikimedia.org/pipermail/wikipedia-l/2017-April/031802.html

I would like the mailman admins to propose a viable process to get at least the biggest lists fixed. I don't fancy the idea of opening dozens of calls for list owners.

wikispecies-l also needs action (owner already contacted with no response). https://lists.wikimedia.org/pipermail/wikispecies-l/2017-May/thread.html

Nemo_bis mentioned this in T160529: Sender email spoofing.May 3 2017, 7:33 AM

Nemo_bis merged a task: T58525: Improve spam filtering for Mailman mailing lists.

Nemo_bis added subscribers: Risker, • JohnLewis, Ijon and 14 others.

revi subscribed.May 3 2017, 7:33 AM

Current proposed patch: https://gerrit.wikimedia.org/r/#/c/350429/ (to use DEFAULT_BOUNCE_MATCHING_HEADERS in the global mailman configuration).

Nemo_bis renamed this task from Filter messages with high X-Spam-Score on some mailing lists like wikipedia-l to Filter messages with high X-Spam-Score on the mailing lists which don't already, like wikipedia-l.May 3 2017, 7:40 AM

jayvdb subscribed.May 3 2017, 8:13 AM

Fae subscribed.May 3 2017, 8:37 AM

• Deskana unsubscribed.May 3 2017, 2:19 PM

Gestrid subscribed.May 6 2017, 2:22 PM

• herron subscribed.Jun 6 2017, 9:04 PM

MarcoAurelio subscribed.Jun 7 2017, 8:16 PM

Change 350429 merged by Herron:
[operations/puppet@production] Make mailman filter messages with high X-Spam-Score by default

https://gerrit.wikimedia.org/r/350429

Hi @Nemo_bis a quick update -- https://gerrit.wikimedia.org/r/#/c/350429/ was merged this morning. Thanks for the patch!

• herron mentioned this in T170601: Massive spam to -owner mailing lists from *@qq.com emails.Jul 13 2017, 6:15 PM

KTC subscribed.Jul 14 2017, 3:54 PM

• herron closed this task as Resolved.Jul 31 2017, 2:18 PM

Filter messages with high X-Spam-Score on the mailing lists which don't already, like wikipedia-lClosed, ResolvedPublicActions

Description

Details

Related Objects

Event Timeline

Filter messages with high X-Spam-Score on the mailing lists which don't already, like wikipedia-l
Closed, ResolvedPublic
Actions