Debian Bug report logs - #407530
Self-Approve mails if membery-only setting is just for spam protection

Full log

Message #25 received at [email protected] (full text, mbox, reply):

Received: (at 407530) by bugs.debian.org; 22 Jan 2007 14:31:27 +0000
From [email protected] Mon Jan 22 06:31:27 2007
Return-path: <[email protected]>
Received: from nomeata.de
	([83.133.81.20] helo=quimby.ehbuehl.net ident=Debian-exim)
	by spohr.debian.org with esmtp (Exim 4.50)
	id 1H90Ck-0008N5-R1
	for [email protected]; Mon, 22 Jan 2007 06:31:27 -0800
Received: from p54a0f810.dip.t-dialin.net ([84.160.248.16] helo=otto.ehbuehl.net)
	by quimby.ehbuehl.net with esmtpsa (TLS-1.0:RSA_AES_256_CBC_SHA:32)
	(Exim 4.50)
	id 1H90Cg-0006BK-Co; Mon, 22 Jan 2007 15:31:23 +0100
Received: from jojo by otto.ehbuehl.net with local (Exim 4.63)
	(envelope-from <[email protected]>)
	id 1H90Cd-00019i-VN; Mon, 22 Jan 2007 14:31:20 +0000
Subject: Re: [Pkg-mailman-hackers] Bug#407530: Self-Approve mails if
	membery-only setting is just for spam protection
From: Joachim Breitner <[email protected]>
To: Thijs Kinkhorst <[email protected]>
Cc: [email protected]
In-Reply-To: <[email protected]>
References: <[email protected]>
	 <[email protected]>
	 <[email protected]>
	 <[email protected]>
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
Date: Mon, 22 Jan 2007 14:31:18 +0000
Message-Id: <[email protected]>
Mime-Version: 1.0
X-Mailer: Evolution 2.8.1.1 
Sender: Joachim Breitner <[email protected]>
X-Spam-Score: -2.6 (--)
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
	(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Level: 
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER 
	autolearn=no version=2.60-bugs.debian.org_2005_01_02

Hi,

Am Montag, den 22.01.2007, 13:20 +0100 schrieb Thijs Kinkhorst:
> On Fri, 2007-01-19 at 10:18 +0000, Joachim Breitner wrote:
> > > Thank you for your suggestion. Spam bots register and post on my web
> > > forum which has email verification of registrations. So do you really
> > > think this would help?
> > 
> > If they can do that, they also could confirm the subscription
> > confirmation and then spam the list. But currently, only web spam bots
> > do that, not e-mail spam bots, do they? 
> 
> Since Mailman is a high-profile mailinglist server, I think that the
> simple need to click such a link would be implemented quite quickly. If
> implemented upstream, this feature would reach Debian stable about 1,5
> years from now the earliest, and there's a good chance that bots have
> caught up by then.
> 
> I do not think that the implementation effort offsets the benefits.

Hmm.  I haven’t yet seen e-mail spam direct targeted against mailing
lists. What you describe is a mixture of current web-spam-bots and
e-mail bots. As soon as the e-mail bots indeed start waiting for bounces
and activate links, they might as well register to the mailing lists. 

So I think the feature does not considerably weaken the spam-protection
provided by member-only posting, but does make life easier for both
posters and list master. 

But I can understand your point, so if you think such a feature would
not be worth it, that’s ok.

BTW, are you part of upstream of does upstream read these bug mails?

Greetings,
Joachim

-- 
Joachim "nomeata" Breitner
Debian Developer
  [email protected] | ICQ# 74513189 | GPG-Keyid: 4743206C
  JID: [email protected] | http://people.debian.org/~nomeata

Send a report that this bug log contains spam.