[Mailman-Users] Handling bogus subscribe requests

[Mark Sapiro]

On 01/12/2016 08:18 AM, Rosenbaum, Larry M. wrote:
>>From the "NEWS" file:
> 
>     - There is a new mm_cfg.py setting SUBSCRIBE_FORM_SECRET ...


This is only partially effective against this attack.

On the @python.org lists we see this attack come and go and even with
SUBSCRIBE_FORM_MIN_TIME = 10 seconds, enough of the bot subscribes delay
long enough to get through.

-- 
Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan