Re: nonmember=reject settings

[Ian Kelling]

Bob Proulx <bob@proulx.com> writes:

> Karl Berry wrote:
>> They all have listhelper enabled. Question is, is it worth trying to
>> engage the list owners in discussion? (Not to me.) Silently change them
>> back to hold? Do nothing? Some of them have explicitly-written messages
>> to rejected addresses. Obviously "backscatter" is not in these list
>> owners' vocabulary :(.
>
> I think we should reset any list that has set a reject action and set
> them back to hold.  I think this should be done routinely as by cron
> so that it is done automatically.  That way if new lists pop up then
> we will find them as they occur and take corrective action.
>
> As to discussing with the owners who made that setting I think this is
> more of an education item.  They don't know what they don't know.  And
> the problem it creates is global in scope and affects everyone.
> Therefore I think it must be actively enforced.  The cron probably
> should send them some automated text that points them to a web page
> that we could keep updated with education and reasons for what
> backscatter spam is and the problems it causes.  I don't know if
> something like that already exists.
>
> Thanks for finding these.  How would we go about automating the
> correction of this bad configuration?
>
> Bob

 I really dislike that there is this expectation that you have to sub,
but its not true for 99% of our discussion lists. I'd like to plaster
some messages saying "you don't need to subscribe to post here!" in
various places. Yes, I'm all for automatically changing these. When I
did the big dmarc changes, I had planned to do a cronjob to
automatically undo any bad dmarc settings.

To correct these we need to loop over all the lists and check their
config i have some good code to do it and am happy to implement it.

The question I have is, which lists are ok to leave as nonmember=reject,
if any? Announce lists? How about nonmember = discard?

- Ian