[MM3-users] Moderation not working?

Hi Folks, Running a shiny new instance of mailman3, as per the Debian package (version 3.2.2) but the moderation doesn't seem to work. WE got hit by a heap of spammers overnight, even though the 'hold for moderation' bit is set for non-members (and now for members too).

Emails seem just to get straight through.

Any advice on how to debug this? Would upgrading to a later version using pip help?

Peter C