[Cialug] Easy fixes for today's list spam

[Matt]

If being admin for the mailing list just means checking in on some web 
interface and unmoderating new users who have proven by post that they 
aren't spammers, then I can help.  I haven't much else to do all day, 
and have plenty of storage space to hold a message archive.

-- Matt

On 03/31/2011 09:10 AM, Josh More wrote:
> I have unsubscribed the sender.
>
> Sorry it took so long.  Turns out that the spam that was sent to the list was caught in my own spam trap, so I never saw it.
>
> I have temporarily set the list to require admin approval for new members.  If it is not too burdensome, I may keep it this way.  I also disabled the auto-discovery of the list, so hopefully it's harder for the spam bots to find us.
>
> I will not be turning on spamhaus, XBL or blocking broken DNS.  It's not that I think it's a bad idea, it's that I no longer have time in my life to be an email admin.  I will, however, re-iterate my invite to the group for anyone out there that wants to serve as a co-admin with Kevin and me.  It would be nice to get some help here.
>
>
> Josh More | Senior Security Consultant - CISSP, GIAC-GSLC Gold, GIAC-GCIH
> Alliance Technologies | www.AllianceTechnologies.net
> 400 Locust St., Suite 840 | Des Moines, IA 50309
> 515.245.7701 | 888.387.5670 x7701
>
> Blog: Don't just blame the bad guys, it's your fault too
> http://www.alliancetechnologies.net/blogs/morej
>
> How are we doing? Let us know here:
> http://www.alliancetechnologies.net/forms/alliance-technologies-feedback-survey
>
> ________________________________________
> From: cialug-bounces at cialug.org [cialug-bounces at cialug.org] on behalf of Nicolai [nicolai-cialug at chocolatine.org]
> Sent: Wednesday, March 30, 2011 21:23
> To: cialug at cialug.org
> Subject: [Cialug] Easy fixes for today's list spam
>
> Just a suggestion, given the spam emails sent to the list today.
>
> If the admins implement the following changes, 100% of the messages from
> the spammer will be blocked, assuming those messages exhibit similar
> characteristics to the ones already sent.
>
> 1. Use Spamhaus dnsbl lists, XBL at a minimum.  Zen would have caught
> all three spamruns; XBL would have blocked two.
>
> 2. Block senders with broken DNS.  This would have blocked all three
> spamruns.
>
> 3. (Unsubscribing the sender)
>
> Any chance the admins can fix this?  As well as removing the
> superfluous lug@ list?
>
> Nicolai
>
> Sent from my mail client
> _______________________________________________
> Cialug mailing list
> Cialug at cialug.org
> http://cialug.org/mailman/listinfo/cialug
> _______________________________________________
> Cialug mailing list
> Cialug at cialug.org
> http://cialug.org/mailman/listinfo/cialug