Page MenuHomePhabricator

Spam from a non-registered email address coming non-moderated to a restricted mailing list
Closed, InvalidPublic


Spam with the following headers got recently to the list:

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;; s=wikimedia;
h=Sender:Content-Transfer-Encoding:Content-Type:Reply-To:List-Subscribe:List-Help:List-Post:List-Archive:List-Unsubscribe:List-Id:Subject:MIME-Version:Message-ID:Date:To:From; bh=bjRD/5Pjg0p4abj1LT35U5VCcm5lwyZ5r0DPMsV4O4g=;
Received: from localhost ([::1]:43286
by with esmtp (Exim 4.84_2)
(envelope-from <>)
id 1iXRJF-0007RP-6L; Wed, 20 Nov 2019 14:50:21 +0000
Received: from ([2620:0:861:3:208:80:154:76]:58546)
by with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
(Exim 4.84_2) (envelope-from <>)
id 1iXRJ3-0007Q6-OH
for; Wed, 20 Nov 2019 14:50:09 +0000
Received: from ([]:12758)
by with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
(Exim 4.89) (envelope-from <>)
id 1iXRIy-0003eP-20
for; Wed, 20 Nov 2019 14:50:04 +0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=key1;;
Received: from WIN-L1V3C6JDBCC ( by id hql99o2j7ssg
for <>;
Wed, 20 Nov 2019 11:07:38 +0000 (envelope-from
From: "=?utf-8?B?TWFya2V0aW5n?=" <>
To: "=?ISO-8859-1?B?d2lraW1lZGlhcGwtbEB3aWtp?=
=?ISO-8859-1?B?cGVkaWEub3Jn?=" <>
Date: Wed, 20 Nov 2019 11:07:32 -0000
Message-ID: <20191120-11073240-1e7c-0@WIN-L1V3C6JDBCC>
X-ProcessInfo: Sent using ZOOMMAIL Process Email DOTNET v11a01 71
X-Abuse-Info: Sent using zoommail,,
X-Abuse-Info: Sent by
X-Orig-message-ID: 127233443
List-Unsubscribe-Post: List-Unsubscribe=One-Click
MIME-Version: 1.0
X-Content-Filtered-By: Mailman/MimeDel 2.1.18
Subject: [WikimediaPL-l] =?utf-8?q?Get_more_web_traffic_and_sales_from_Lin?=
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: The Polish Wikimedia chapter list <>
List-Post: <>
List-Help: <>
Reply-To: The Polish Wikimedia chapter list <>
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
Sender: "WikimediaPL-l" <>

Can somebody explait how did this hapen / how to avoid this? I think, this may be a mailman configuration problem.

Event Timeline

Ankry created this task.Nov 21 2019, 10:07 PM
Restricted Application added a project: SRE. · View Herald TranscriptNov 21 2019, 10:07 PM
Restricted Application added a subscriber: Aklapper. · View Herald Transcript

What does "restricted mailing list" mean exactly when it comes to the settings?

Quiddity closed this task as Invalid.Nov 22 2019, 4:23 PM
Quiddity added a subscriber: Quiddity.

You've got that address listed in the "List of non-member addresses whose postings should be automatically accepted." section ("Lista adresów osób nie będących prenumeratorami, których wiadomości powinny być automatycznie akceptowane."), hence this is working as expected.
Re: How it happened: I would guess that a list-moderator simply selected the wrong checkbox in the moderation screen, in the past. An easy mistake to make.
I have not changed it, or anything else, but it looks like there might be other entries that perhaps should not be listed there?
I suggest you take a close look at the entries in this page: