[Mailman-Users] Easy question for this crowd

[Chip Davis]

No, and No.  Apparently you missed my original post (5/30 11:57AM) on 
this topic where I asked if my RE that would do exactly that.

> I've supported a dozen Mailman listservers for over a dozen years. This doesn't represent much real effort most of the time.  I've had to block specific users often and specific domains rarely, but this is the first time I've had to block an entire TLD.
> 
> Recently I've been gifted with an inordinate amount of UCE from many different domains under the '.icu' TLD.
> 
> Since Python RE's are _almost_ the same as the UNIX RE's I used many years ago, if I put
> 
> ^@.*\.icu$
> 
> in discard_these_nonmembers, will it block all domains in that TLD?
> 
> And not block anyone else?

Thanks to Mark's help crafting the proper RE, I haven't had an '.icu' 
UCE in over 15 hours (knock wood).

For a more general solution for all of my lists, I'm looking into his 
suggestion of using a Spam Filter that triggers on the SpamAssassin 
score header inserted by my ISP.

Thanks, Mark for you patience and help.

-Chip-

On 6/1/2019 3:42 PM, Phil Stracchino wrote:
> On 6/1/19 1:44 PM, Chip Davis wrote:
>> <sigh> I guess my question wasn't so "easy" after all ... :-(
>>
>> What was a daily trickle is now a flood of UCE from different domains
>> in the .icu TLD.  I hope someone can suggest some sort of prophylaxis
>> that I haven't tried.
> 
> Do you get any actual, legitimate mail from .icu?  Do you have any real
> subscribers from .icu?  If not, I'd consider just blocking the entire
> TLD.  I've blocked several of the new shit TLDs from which I was
> receiving nothing but spam, and it's enormously reduced my volume of spam.
> 
>