[Mailman-Users] spam discard expressions

[Robert Heller]

At Wed, 20 Sep 2017 11:59:37 -0800 Jim Dory <james at dorydesign.com> wrote:

> 
> Apparently our host provider performs spam tests only on outgoing, rather
> than incoming - since my spamassassin blacklists don't have any effect.
> 
> So I've discovered the filters offered in Mailman after being completely
> buried by spammers trying to post to our subscriber only list.
> 
> I've started putting these in Sender Filters:
> 
> ^[^@]+ at bcira\.com$
> ^[^@]+ at airablo\.com$
> ^[^@]+ at bfklaw\.com$
> ^[^@]+ at bettella\.com$
> ^[^@]+ at areallycool\.com$
> ^[^@]+ at aristo-tec\.com$
> ^[^@]+ at benallgood\.com$
> ^[^@]+ at al-meshkah\.com$
> ^[^@]+ at atoccs\.stream$
> ^[^@]+ at authors\.com$
> ^[^@]+ at aulson\.com$
> ^[^@]+ at atmyx\.bid$
> ^[^@]+ at airtecperforms\.com$
> 
> but what is the syntax for blocking domains ending in
> .loan
> .stream
> .trade

^[^@]+ at .+\.loan$
^[^@]+ at .+\.stream$
^[^@]+ at .+\.trade$
 
etc.

Just replace the "host" part with .+ (== 1 or more of any character) and 
replace com with loan, stream, trade, etc.  Thus, for example:

^[^@]+ at .+\.loan$

matches any of these:

someidiot at getaloan.loan
freemoney at instantloan.loan
brreakyourlegs at loanshark.loan

(and many more).

> 
> etc, other than .com.
> 
> I've been reading up on python expressions but at first reading it is a bit
> overwhelming - hoping for a simple example.
> 
> I've also started adding in words under Spam filters such as:
> 
> ^Subject: .*Phentermine
> ^Subject: .*F\*buddy
> ^Subject: .*H00kup
> ^Subject: .*InstaF\*ck
> ^Subject: .*Instacheat
> 
> Wondering if anyone would care to share their lists of filters - or a good
> resource?
> 
> thanks, Jim
> ------------------------------------------------------
> Mailman-Users mailing list Mailman-Users at python.org
> https://mail.python.org/mailman/listinfo/mailman-users
> Mailman FAQ: http://wiki.list.org/x/AgA3
> Security Policy: http://wiki.list.org/x/QIA9
> Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
> Unsubscribe: https://mail.python.org/mailman/options/mailman-users/heller%40deepsoft.com
> 
>                                                            

-- 
Robert Heller             -- 978-544-6933
Deepwoods Software        -- Custom Software Services
http://www.deepsoft.com/  -- Linux Administration Services
heller at deepsoft.com       -- Webhosting Services