I just got spammed recently as well (it obviously changes the *-owner address during the time so obviously all lists owners will sooner or later be affected), so I've done some research there:

It is better to disallow delivery based on the sender address regexp in combination with subject regexp.

Sender is always /[0-9]+@qq\.com/
Subject is always /.*只要投紸荭宝天天.*/

Feel free to entirely block every email matching the rules above and sent to any @wikimedia.org address.


Kind regards


Danny B.

I’ve added the following to bounce_matching_headers for wikials-l:

  from: .*@qq.com

  X-Spam-Score:[^+]*[+]{6,}

This should hold posts from qq.com addresses as well as messages with a 6 or greater spam score.  Please shout if the issue persists on wikials-l.

Will check out additional lists and follow up in phab shortly.

Best,

—Keith

On Jul 13, 2017, at 1:44 PM, Risker <risker.wp@gmail.com> wrote:

See https://phabricator.wikimedia.org/T170601   - reported from the checkuser-l-owner list.  (Oddly, the only list I moderate that has been spammed like this, that I can tell.)  Please add your comments there.

Risker/Anne

On 13 July 2017 at 13:23, Keith Herron <kherron@wikimedia.org> wrote:

Hi Manuel, Taking a look at this now.

Best,
—Keith

> On Jul 13, 2017, at 1:20 PM, Manuel Schneider <manuel.schneider@wikimedia.ch> wrote:
>
> Dear all,
>
> can someone please block mails coming from qq.com ?
>
> I am getting drowned in mails from random mail addresses
> (numbers)@qq.com, sent to wikials-l-owner@lists.wikimedia.org.
>
> Thanks,
>
>
> Manuel
>
> --
> Wikimedia CH - Verein zur Förderung Freien Wissens
> www.wikimedia.ch
>
> _______________________________________________
> Listadmins mailing list
> Listadmins@lists.wikimedia.org
> https://lists.wikimedia.org/mailman/listinfo/listadmins


_______________________________________________
Listadmins mailing list
Listadmins@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/listadmins

_______________________________________________
Listadmins mailing list
Listadmins@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/listadmins

_______________________________________________
Listadmins mailing list
Listadmins@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/listadmins

_______________________________________________
Listadmins mailing list
Listadmins@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/listadmins