I just got spammed recently as well (it obviously changes the *-owner address during the time so obviously all lists owners will sooner or later be affected), so I've done some research there:
It is better to disallow delivery based on the sender address regexp in combination with subject regexp.
Sender is always /[0-9]+@qq.com/ Subject is always /.*只要投紸荭宝天天.*/
Feel free to entirely block every email matching the rules above and sent to any @wikimedia.org address.
Kind regards
Danny B.
---------- Původní e-mail ---------- Od: Keith Herron kherron@wikimedia.org Komu: List for discussions and announcements related to lists.wikimedia.org listadmins@lists.wikimedia.org Datum: 13. 7. 2017 19:50:47 Předmět: Re: [List admins] Urgent: Block *@qq.com because of massive spam wave to -owner address "
I’ve added the following to bounce_matching_headers for wikials-l:
from: .*@qq.com
X-Spam-Score:[^+]*[+]{6,}
This should hold posts from qq.com(http://qq.com/)%C2%A0addresses%C2%A0as well as messages with a 6 or greater spam score. Please shout if the issue persists on wikials-l.
Will check out additional lists and follow up in phab shortly.
Best,
—Keith
" On Jul 13, 2017, at 1:44 PM, Risker <risker.wp@gmail.com (mailto:risker.wp@gmail.com)> wrote:
See https://phabricator.wikimedia.org/T170601 (https://phabricator.wikimedia.org/T170601)%C2%A0%C2%A0 - reported from the checkuser- l-owner list. (Oddly, the only list I moderate that has been spammed like this, that I can tell.) Please add your comments there.
Risker/Anne
On 13 July 2017 at 13:23, Keith Herron <kherron@wikimedia.org (mailto:kherron@wikimedia.org)> wrote: "Hi Manuel, Taking a look at this now.
Best, —Keith
On Jul 13, 2017, at 1:20 PM, Manuel Schneider <manuel.schneider@wikimedia.
ch(mailto:manuel.schneider@wikimedia.ch)> wrote:
Dear all,
can someone please block mails coming from qq.com(http://qq.com/) ?
I am getting drowned in mails from random mail addresses (numbers)@qq.com(http://qq.com/), sent to wikials-l-owner@lists.wikimedia.
org(mailto:wikials-l-owner@lists.wikimedia.org).
Thanks,
Manuel
-- Wikimedia CH - Verein zur Förderung Freien Wissens www.wikimedia.ch(http://www.wikimedia.ch/)
Listadmins mailing list Listadmins@lists.wikimedia.org(mailto:Listadmins@lists.wikimedia.org) https://lists.wikimedia.org/mailman/listinfo/listadmins
(https://lists.wikimedia.org/mailman/listinfo/listadmins)
_______________________________________________ Listadmins mailing list Listadmins@lists.wikimedia.org(mailto:Listadmins@lists.wikimedia.org) https://lists.wikimedia.org/mailman/listinfo/listadmins (https://lists.wikimedia.org/mailman/listinfo/listadmins)
"
_______________________________________________ Listadmins mailing list Listadmins@lists.wikimedia.org(mailto:Listadmins@lists.wikimedia.org) https://lists.wikimedia.org/mailman/listinfo/listadmins
"
_______________________________________________ Listadmins mailing list Listadmins@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/listadmins "