I can't speak for doing it globally but on your own lists you can go to the Subscription rules (under privacy options) and add "^.*$" (no quotes, this bans "everything") to a new line under List of addresses which are banned from membership in this mailing list (the 'ban_list'). It will also ban you from adding people manually but you can temporarily remove it and add back. I've done this on a couple lists I moderate which didn't generally accept new subscriptions anyway atm and has stopped the spam. *James Alexander* Manager, Trust & Safety Wikimedia Foundation On Thu, May 10, 2018 at 3:40 PM Kangah Donatien KOFFI < donatien.kanga(a)gmail.com&gt; wrote:

The regex isn't working for me either. @Leon Liesener: what exactly should I remove in the HTML interface? I'm afraid I will remove too much... Trijnstel ________________________________ Van: Listadmins &lt;listadmins-bounces(a)lists.wikimedia.org&gt; namens Patrick Rother &lt;krd(a)gulu.net&gt; Verzonden: vrijdag 11 mei 2018 19:35 Aan: listadmins(a)lists.wikimedia.org Onderwerp: Re: [List admins] aol.com continues, yahoo.com started Hello. Am 11.05.18 um 00:47 schrieb James Alexander: That doesn't work for "my" lists, there are still subscriptions, and as I deleted more than 500 pending requests manually today, I again kindly request any global solution. Please! _______________________________________________ Listadmins mailing list Listadmins(a)lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/listadmins

I tried commenting out the subscription form for volunteer-supporters [1], as Leon suggested, yet I'm still getting some subscription requests. How are these bots sending through their requests? Also, as someone mentioned in another email, the regex "^.*$" is for subscription, but not for *subscription requests* Has anyone had luck with any other method? [1]: https://lists.wikimedia.org/mailman/listinfo/volunteer-supporters On Fri, May 11, 2018 at 2:17 PM, Leon Liesener &lt;leon.liesener(a)wikipedia.de&gt; wrote: -- <https://about.me/andycyca?promo=email_sig&utm_source=product&utm_medium=email_sig&utm_campaign=gmail_api> Andrés C y C about.me/andycyca <https://about.me/andycyca?promo=email_sig&utm_source=product&utm_medium=email_sig&utm_campaign=gmail_api>

There seems to be a second subscription method which involves a -request suffix. Google suggested the following solution: https://is.richmond.edu/email/mail-lists/block-requests.html TL;DR: an "Auto-response" for subscrition requests can be set up by setting "autorespond_requests" to "Yes, w/ discard". "autorespond_requests_text" allows to configure a text which is being sent to the subscriber as part of the auto-response. Perhaps this helps. Regards, Leon

Thank you for the suggestion, but that doesn't work either sadly. Trijnstel ________________________________ Van: Listadmins &lt;listadmins-bounces(a)lists.wikimedia.org&gt; namens Leon Liesener &lt;leon.liesener(a)wikipedia.de&gt; Verzonden: zaterdag 12 mei 2018 02:30 Aan: List for discussions and announcements related to lists.wikimedia.org Onderwerp: Re: [List admins] aol.com continues, yahoo.com started There seems to be a second subscription method which involves a -request suffix. Google suggested the following solution: https://is.richmond.edu/email/mail-lists/block-requests.html TL;DR: an "Auto-response" for subscrition requests can be set up by setting "autorespond_requests" to "Yes, w/ discard". "autorespond_requests_text" allows to configure a text which is being sent to the subscriber as part of the auto-response. Perhaps this helps. Regards, Leon Am 12.05.2018 um 02:10 schrieb Andy Cruz y Corro <andycyca@gmail.com<mailto:andycyca@gmail.com>>: I tried commenting out the subscription form for volunteer-supporters [1], as Leon suggested, yet I'm still getting some subscription requests. How are these bots sending through their requests? Also, as someone mentioned in another email, the regex "^.*$" is for subscription, but not for *subscription requests* Has anyone had luck with any other method? [1]: https://lists.wikimedia.org/mailman/listinfo/volunteer-supporters On Fri, May 11, 2018 at 2:17 PM, Leon Liesener <leon.liesener@wikipedia.de<mailto:leon.liesener@wikipedia.de>> wrote: That depends. In case you have the default page design the code snippet should look like <div class="box-content" id="subscribe"> <h3 class="title title01">Subscribe</h3> <MM-Subscribe-Form-Start> <table> <tr><td>Your e-mail address:</td><td><MM-Subscribe-Box></td></tr> <tr><td>Your name (optional):</td><td><mm-fullname-box></td></tr> <!-- Optional Password Fields (can leave out for public lists as Mailman auto-generates) --> <!-- Password reminders can always be requested through web interface --> <!-- Most likely only to be used with lists with private archives or subscription lists --> <!-- <tr><td>Password:</td><td><MM-New-Password-Box></td></tr> --> <!-- <tr><td>Confirm Password:</td><td><MM-Confirm-Password></td></tr> --> <!-- Part of the multilingual selector below --> <tr><td>Preferred language:</td><td><MM-list-langs></td></tr> </table> <p><MM-Reminder></p> <p><mm-digest-question-start> Would you like to receive list mail batched in a daily digest? <MM-Undigest-Radio-Button> No <MM-Digest-Radio-Button> Yes <mm-digest-question-end></p> <!-- MM-List-Subscription-Msg gives extra details about the subscription rules of the list --> <!-- This is optional, and will include variations between subscription rules (confirm vs confirm and approve) --> <!-- On the majority of lists this can be commented out as subscription rules will simply be confirm --> <MM-List-Subscription-Msg> <p style="text-align: center"><MM-Subscribe-Button><MM-Form-End></p> </div> which would remove the entire "Subscribe" section, including the subscription form. Regards, Leon Am 11.05.2018 um 20:25 schrieb Trijnstel wp <trijnstel@hotmail.com<mailto:trijnstel@hotmail.com>>: The regex isn't working for me either. @Leon Liesener: what exactly should I remove in the HTML interface? I'm afraid I will remove too much... Trijnstel ________________________________ Van: Listadmins <listadmins-bounces@lists.wikimedia.org<mailto:listadmins-bounces@lists.wikimedia.org>> namens Patrick Rother <krd@gulu.net<mailto:krd@gulu.net>> Verzonden: vrijdag 11 mei 2018 19:35 Aan: listadmins@lists.wikimedia.org<mailto:listadmins@lists.wikimedia.org> Onderwerp: Re: [List admins] aol.com<http://aol.com> continues, yahoo.com<http://yahoo.com> started Hello. Am 11.05.18 um 00:47 schrieb James Alexander: That doesn't work for "my" lists, there are still subscriptions, and as I deleted more than 500 pending requests manually today, I again kindly request any global solution. Please! _______________________________________________ Listadmins mailing list Listadmins@lists.wikimedia.org<mailto:Listadmins@lists.wikimedia.org> https://lists.wikimedia.org/mailman/listinfo/listadmins _______________________________________________ Listadmins mailing list Listadmins@lists.wikimedia.org<mailto:Listadmins@lists.wikimedia.org> https://lists.wikimedia.org/mailman/listinfo/listadmins _______________________________________________ Listadmins mailing list Listadmins@lists.wikimedia.org<mailto:Listadmins@lists.wikimedia.org> https://lists.wikimedia.org/mailman/listinfo/listadmins -- [https://thumbs.about.me/thumbnail/users/a/n/d/andycyca_emailsig.jpg?_149248…] <https://about.me/andycyca?promo=email_sig&utm_source=product&utm_medium=email_sig&utm_campaign=gmail_api> Andrés C y C about.me/andycyca <https://about.me/andycyca?promo=email_sig&utm_source=product&utm_medium=email_sig&utm_campaign=gmail_api> _______________________________________________ Listadmins mailing list Listadmins@lists.wikimedia.org<mailto:Listadmins@lists.wikimedia.org> https://lists.wikimedia.org/mailman/listinfo/listadmins

We need the mailman server codes to be amended so as to provide a mass delete option for admins as well as a masking mechanism based on email id extensions. Imho On Sun, May 13, 2018 at 11:12 AM, Patrick Rother &lt;krd(a)gulu.net&gt; wrote: -- Warm regards, Ashwin Baindur ------------------------------------------------------

Dear colleagues, Do you continue to receive subscription requests from aol/yahoo? It seems to have stopped? Best regards, M. 2018-05-14 20:50 GMT+02:00 Patrick Rother &lt;krd(a)gulu.net&gt;et>:

I do receive them, number of aol.com is almost nill, yahoo.com are very low and gmail.com are surging. Got ~30 in last 12 hours. Regards, Dhaval On Wed, 16 May 2018, 10:40 MA, &lt;strigiwm(a)gmail.com&gt; wrote:

They've started using @dublin.com ones, but the rate is very slow I guess thanks due to the Puppet changes we did rate-limiting the requests. If this domain is "weird" so to speak, we could ban it altogether from our servers. Best regards, M. 2018-05-16 13:51 GMT+02:00 Andre Klapper &lt;aklapper(a)wikimedia.org&gt;rg>:

2018-05-11 19:35 GMT+02:00 Patrick Rother &lt;krd(a)gulu.net&gt;et>: Ditto, wiki-IT just had ~120/140 requests in the last 18 hours... I think we should take drastic measures at a global level for a couple of days, of course asking WMF permission and communicating that we're doing it because of an ongoing attack. -- Luca "Sannita" Martinelli http://it.wikipedia.org/wiki/Utente:Sannita

Sow... how to ban the yahoo addresses? Cause a complete ban isn't optimal for us, I'd rather have a specific ban. Vriendelijke groet, Ciell 2018-05-11 15:59 GMT+02:00 MA &lt;strigiwm(a)gmail.com&gt;om>: