On Thu, Apr 02, 2009 at 03:02:42PM -0400, LukeTucker wrote:
> 
> Hmm came here to report that my melkjug-dev mailing list accepted this mexican vacation spam without me approving it (it was still in the moderation queue, but reached all subscribers)  It looks like this list was spammed successfully too, so I guess I don't need to prove it to you-all :)
> 
> - Luke

Indeed :) I've sent a message to the support list.

Robert

LukeTucker wrote:
> Hmm came here to report that my melkjug-dev mailing list accepted this mexican vacation spam without me approving it (it was still in the moderation queue, but reached all subscribers)  It looks like this list was spammed successfully too, so I guess I don't need to prove it to you-all :)

both melkjug-dev and listen-dev are set up as "public" mailing lists, which 
means that anyone can send mail to the list if they confirm their email 
address.  so far this has been effective at keeping spammers out, since they 
have to receive an email back and then reply again to confirm.  as spammers 
get more aggressive, however, they may start actually doing this.  my guess is 
this is what happened here.

if this continues to be a problem, you can change your list setting so that 
the moderator has to approve all new senders, so folks will no longer be able 
to send w/o explicit approval.

-r