Hello, In the Message; Subject : Re: We can get rid of SPAM MAIL! Message-ID : <673374ba-3a2d-4a24-b1de-4ec7270088c8@gmx.es> Date & Time: Thu, 13 Jun 2024 19:24:17 +0200 [CER] == "Carlos E. R. via openSUSE Users" <users@lists.opensuse.org> has written: CER> On 2024-06-13 18:37, David T-G wrote: DTG> > Masaru, et al -- DTG> > DTG> > ...and then Masaru Nomiya said... DTG> > % DTG> > % In factory ML and buldservice ML, there exist ham mails with DTG> > % X-MailFrom:bar@gmail.com. DTG> > % So, I changed the script as follows; DTG> > ... DTG> > % DTG> > % :0 DTG> > % unsure/. DTG> > % } DTG> > DTG> > Yes, that's a better answer. Sadly, the best you can do is "we can DTG> > isolate hyperkitty-interface posters". That may be enough for you even DTG> > if it doesn't solve the general problem (which I agree is messy). DTG> > DTG> > But YAY to find something that works at least enough. It's a start :-) CER> You simply have to flag on two strings: CER> User-Agent: HyperKitty onhttps://lists.opensuse.org/ CER> From: *@gmail.com CER> The current wave of spammers match on both. But there are also honest users CER> which match the same criteria. I could post here easily, on this thread, and CER> match. [...] I write precisely because there is a misunderstanding. Mailman (3.3.9), the mail management software used by openSUSE, is operated by appending the Mail From information received from the smtp server to the X-MailFrom field.The feature is very useful. Incidentally, mails delivered from Mailman (2.1.9), which is owned by ffmpeg ML, do not have an X-MailFrom field, because the RFC does not mandate the setting of the X-MailFrom field. The X-MailFrom field indicates the sign up information of the mail contributor. Mail from registrants to this site will have the information starting with SRS0 and ending with subscribed user's address, and mail posted via HyperKitty will have the contributor's address. This may be a response to the fact that openSUSE allows submissions from HyperKitty (ffmpeg does not). Therefore, the first thing to suspect spam is when a personal address is set in the X-MailFrom field. Unfortunately, we cannot immediately delete a mail just because it is a personal address. Some of the regular contributors to this ML use HyperKitty from time to time, and there are also regular contributors to the factory ML and buildservice ML who post via HyperKitty using non-openSUSE accounts. As David also points out, the only method we can adopt is to "quarantine anything suspicious". But I am convinced that it is advantageous enough for me. However, I can only say that for the time being..... Best Regards. --- ┏━━┓彡 Masaru Nomiya mail-to: m.nomiya+suse @ gmail.com ┃＼／彡 ┗━━┛ " Hassabis says that no one really knows for sure that AI will become a major danger. But he is certain that if progress continues at its current pace, there isn’t much time to develop safeguards. "I can see the kinds of things we're building into the Gemini series right, and we have no reason to believe that they won't work," he says." -- "Google DeepMind's CEO Says Its Next Algorithm Will Eclipse ChatGPT" --