[Mailman-Users] bots subscribing to lists via web forms to avoidmember-only restrictions

[Brad Knowles]

On 1/6/08, Jeffrey Goldberg wrote:

>  I suspect that with a Confirm subscription policy (which is the
>  minimum anyone should run) there really isn't too much to worry about
>  in that we can always end up requiring approval for subscriptions (or
>  moderate) associated with domains that show a history of allowing
>  spammers to send subscription requests.

In my experience, just confirming subscriptions is not enough.  There 
are a few spammers who will get through that test.  So far, I have 
not yet seen much in the way of spammers who get through that filter 
as well as the moderation filter for new subscribers, but it's 
probably just a matter of time.

-- 
Brad Knowles <brad at shub-internet.org>
LinkedIn Profile: <http://tinyurl.com/y8kpxu>