X2Go Bug report logs - #751
clean up X2Go BTS from SPAM

Package: bugs.x2go.org; Maintainer for bugs.x2go.org is x2go-dev@lists.x2go.org;

Reported by: Mike Gabriel <mike.gabriel@das-netzwerkteam.de>

Date: Tue, 20 Jan 2015 09:05:01 UTC

Severity: important

Full log

Message #70 received at 751@bugs.x2go.org (full text, mbox, reply):

Received: (at 751) by bugs.x2go.org; 29 Feb 2016 09:48:28 +0000
From X2Go-ML-1@baur-itcs.de  Mon Feb 29 10:48:26 2016
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on
	ymir.das-netzwerkteam.de
X-Spam-Level: 
X-Spam-Status: No, score=-1.9 required=3.0 tests=BAYES_00,URIBL_BLOCKED
	autolearn=ham version=3.3.2
Received: from localhost (localhost [127.0.0.1])
	by ymir.das-netzwerkteam.de (Postfix) with ESMTP id C20535DA88
	for <751@bugs.x2go.org>; Mon, 29 Feb 2016 10:48:26 +0100 (CET)
X-Virus-Scanned: Debian amavisd-new at ymir.das-netzwerkteam.de
Received: from ymir.das-netzwerkteam.de ([127.0.0.1])
	by localhost (ymir.das-netzwerkteam.de [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id VUObpxRzkRMy for <751@bugs.x2go.org>;
	Mon, 29 Feb 2016 10:48:20 +0100 (CET)
X-Greylist: delayed 451 seconds by postgrey-1.34 at ymir.das-netzwerkteam.de; Mon, 29 Feb 2016 10:48:19 CET
Received: from mout.kundenserver.de (mout.kundenserver.de [212.227.17.13])
	by ymir.das-netzwerkteam.de (Postfix) with ESMTPS id BD99C5DA95
	for <751@bugs.x2go.org>; Mon, 29 Feb 2016 10:48:19 +0100 (CET)
Received: from [192.168.253.107] ([79.250.122.101]) by
 mrelayeu.kundenserver.de (mreue101) with ESMTPSA (Nemesis) id
 0LuMNz-1ZsIh31iDP-011nJG; Mon, 29 Feb 2016 10:35:46 +0100
Subject: Re: [X2Go-Project] Bug#751: [X2Go-Dev] Bug#751: new DebBugs scripts:
 mbox / cleanbug
To: x2go-project@lists.x2go.org, 751@bugs.x2go.org
References: <handler.751.B751.145642181413624@bugs.x2go.org>
 <20160225194741.Horde.Fje7pDmkUkHOMy73405sRbf@mail.das-netzwerkteam.de>
 <56CF5219.5080504@ionic.de>
 <20160226151724.Horde.urPXS9iYHcoqerezcCV3bXr@mail.das-netzwerkteam.de>
 <56D3C8C1.6080306@ionic.de>
 <20160229050620.Horde.RW3oRjfUZRL5KkkbXkbOJE2@mail.das-netzwerkteam.de>
Reply-To: 751@bugs.x2go.org
From: Stefan Baur <X2Go-ML-1@baur-itcs.de>
Message-ID: <56D410E2.1060305@baur-itcs.de>
Date: Mon, 29 Feb 2016 10:35:30 +0100
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:38.0) Gecko/20100101
 Thunderbird/38.6.0
MIME-Version: 1.0
In-Reply-To: <20160229050620.Horde.RW3oRjfUZRL5KkkbXkbOJE2@mail.das-netzwerkteam.de>
Content-Type: multipart/signed; micalg=pgp-sha256;
 protocol="application/pgp-signature";
 boundary="BNV4un65VC18o5ViT7sjj1uWNTnbtqdJp"
X-Provags-ID: V03:K0:z3g/aVVPG9sw6N140HqpCN3HzA8AM7P0fIj3UMp6ICI2jyL8LXd
 nEvi8mB6vbLZTnSR6FPF7eUtGGCSusKYzIgb8zIBO+jnvBtEofzfQlxN51b5EGx8UFh8oO9
 bT7giEhuXbOqdaSOQhwZFndXVcbr1vsuKejArds7/i3CpGi1tvzJ310htRsING7E2D+Y8H/
 y9RhqaVD9RCbIMOo6Zd0w==
X-UI-Out-Filterresults: notjunk:1;V01:K0:KWouwZeboRA=:Wq4hA0R9+BCLuMlDiw4iyU
 Kpf1s7teliVyGo9EBduwV1Dozh5zIdtEtW7BquPIOCzezmJRuST3Mwlseg94E8DTJfVRiBc03
 pILSToses98MUhzHGtFzxbMCx/wwbVQD0IjXNE41wndKGCkEFDYfvfTFoEDTalbpPosSZoclt
 cJphBfFYtU6mJxQlq8DI+vhCnMvxFB49e/LlcJpkliNhaUy8k3BtFRfnlQeoqa0A5EbvtRoHM
 ZTDM9aAeQbfgyTPUnZJvXq2f9iePTTIN0AKmLrwSAcZG/08wTlwTHTD6pRScxnw13ub160R+x
 7HldCXReZrzKVbGkrXoDbPIR59HMv9F3BZ//YsT2fCSpDRr8vjUnwxzguBd9SSzZcszlu8uIe
 fz82P/9yceyKwmq5RFp6kn6SUjiD45wi4EEb11XbsbmNpSYUJFTTPIxqwj5gcPY+8n3eRQGU2
 RR+S9hVrm/foX32eYt2AeGgRbdOcjjBsGTOdfQJhdgTmxVwAiEtJPAZ5DFZXnpaX7Mg44GE9L
 Qj9L/j2T6cKIRYTVHTes9t9VA33M6Poh7x1TGkbWfV5asfTzbGwvESQXOUfysNEtHGcXuEjiT
 s7fF7fgpIaeGQ8UgP3tcmUShw8zNEdxWqRfY08lDNqTk7XXkbNlbVZhl4Tphi9tQj+oH66daD
 bK1iXaRs89FpyAnou4Ct94/Omgfxw6ODu562EctvKdX9ZpDr7tdH8aWPOZGeU/aMEayc=

[Message part 1 (text/plain, inline)]
Am 29.02.2016 um 06:06 schrieb Mike Gabriel:
> On  Mo 29 Feb 2016 05:27:45 CET, Mihai Moldovan wrote:
> 
>> On 26.02.2016 04:17 PM, Mike Gabriel wrote:
>>> It never was an automated process and it possibly should be. But you
>>> don't want to open the complete x2go-dev ML for arbitrary posting...
>>
>> I think I do - partly. I'll have to check if mailman can pass-through
>> messages
>> based on specific headers. If it does, "whitelisting" "Resent-Sender:
> 
> It can do white-listing.
> 
>> owner@bugs.x2go.org" sounds like a good automation point. I don't expect
>> spammers to send this header. :)
> 
> Yeah. Makes sense.

I would like to veto this, unless I'm misunderstanding something here.

FYI: The current situation is that I'm whitelisting all first-time
submitters manually, along with a GPG signed "ping" message telling them
to please subscribe to the list.

While most of the spam indeed goes to x2go-*, there are spam messages
targeted at <bugnumber>@bugs.x2go.org.
These clog our BTS, and, if I'm understanding your suggestion correctly,
would also hit x2go-dev - along with any malware attachments they may
have, as those messages get auto-forwarded from
<bugnumber>@bugs.x2go.org to x2go-dev.

So, automatic whitelisting, while it would be a huge time-saver for me,
is out of the question, for sanity, safety and security reasons.

If I misunderstood your suggestion, please point out my errors to me.

-Stefan

-- 
BAUR-ITCS UG (haftungsbeschränkt)
Geschäftsführer: Stefan Baur
Eichenäckerweg 10, 89081 Ulm | Registergericht Ulm, HRB 724364
Fon/Fax 0731 40 34 66-36/-35 | USt-IdNr.: DE268653243


[signature.asc (application/pgp-signature, attachment)]

Send a report that this bug log contains spam.

X2Go Developers <owner@bugs.x2go.org>. Last modified: Fri Apr 26 14:55:24 2024; Machine Name: ymir.das-netzwerkteam.de

X2Go Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.