On 4/1/23 08:09, Jeremy Stanley wrote:

We recently migrated a bunch of lists from 2.1 to 3.3.7 and have started to get spammers posting via HyperKitty (because I guess that's easier for them than SMTP). It looks like I should be able to set posts from HyperKitty to be automatically moderated by creating a header filter on "User-Agent" matching "HyperKitty" but is there a better/easier way?

Typically, these would be non-members posting from HyperKitty and then being automatically subscribed.

Set Default action to take when a member posts to the list to Hold for moderation so that all posts from members you haven't seen before are held. Then when handling a held post, if it is spam set the posters moderation action to discard and discard the message; if it is on topic, set the posters moderation action to default processing and accept the message.

Also, for things which already went out to the list, obviously I can ban the spammer but what's the cleanest solution for removing their posts from list archives so that we don't further their goals by continuing to publish their handiwork?

List owners should be able to delete messages and threads from HyperKitty, but they can't. See <https://gitlab.com/mailman/hyperkitty/-/issues/261>. You need to be a superuser to do this. If you are logged in as a user with Superuser status there will be a Delete this thread link in the thread view and a Delete this message link in the message view. You can use the django-admin createsuperuser command to create superusers. Also, anyone who is a superuser can set this for any user via the Django admin web UI.

-- Mark Sapiro <mark@msapiro.net> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan