[Mailman-Developers] monthly password reminder bounce reaction

[Barry Warsaw]

On Jun 3, 2009, at 12:50 AM, Mark Sapiro wrote:

> XXX We used to classify bounces to the site list as bounce events
> for every list, but this caused severe problems.  Here's the
> scenario: aperson at example.com is a member of 4 lists, and a list
> owner of the foo list.  example.com has an aggressive spam filter
> which rejects any message that is spam or contains spam as an
> attachment.  Now, a spambot sends a piece of spam to the foo list,
> but since that spambot is not a member, the list holds the message
> for approval, and sends a notification to aperson at example.com as
> list owner.  That notification contains a copy of the spam.  Now
> example.com rejects the message, causing a bounce to be sent to the
> site list's bounce address.  The bounce runner would then dutifully
> register a bounce for all 4 lists that aperson at example.com was a
> member of, and eventually that person would get disabled on all
> their lists.  So now we ignore site list bounces.  Ce La Vie for
> password reminder bounces.

I hope we've all learned by now never to bounce spam back to the  
"original" sender!

-Barry

-------------- next part --------------
A non-text attachment was scrubbed...
Name: PGP.sig
Type: application/pgp-signature
Size: 832 bytes
Desc: This is a digitally signed message part
URL: <http://mail.python.org/pipermail/mailman-developers/attachments/20090604/3e89b6a3/attachment.pgp>