You might not want to ban everyone from yandex.com. It is a huge ISP with many millions of customers from all over Russia, Ukraine, Belarus, and Kazakhstan. It would be equivalent to banning everyone from yahoo.com or similar. 

I'd suggest a bit more specific filtering.

-steve


On Wed, Oct 30, 2013 at 11:03 AM, Yardena Cohen <yardenack@gmail.com> wrote:
On Wed, Oct 30, 2013 at 9:01 AM, Steve Berl <steveberl@gmail.com> wrote:
> The spam From: field says "john re <giovanni-re@yandex.com>"
> The real emails seem to come from "giovanni_re" <john_re@fastmail.us>

The spam emails all came from:

   giovanni-re@yandex.com
   carefullychipped@yandex.com

Neither of these had posted to the list before, and both were banned.
A pattern also became clear after yet another new subscriber showed
up, named:

   yardena.cohen@yandex.com

Creepy! At that point I just decided to ban everything from
yandex.com, which seems to have stopped the problem. There were no
other subscribers from that domain.
_______________________________________________
sudo-discuss mailing list
sudo-discuss@lists.sudoroom.org
http://lists.sudoroom.org/listinfo/sudo-discuss



--
-steve