Hi,
just a quick status update after about a day of investigations and work on
it:
* At about 16:30 UTC we have lowered down the spam score neccessary for the
mail to be rejected. This has decreased the number of spams passing through
to about one third. So at least some progress for the time being. We couldn'
t decrease the threshold further though as it could affect some regular
emails.
* We were testing various further filterings via matching of various things
(since some used checkpoints in subjects varied during the time), because we
didn't want to cut off the entire @qq.com. So the frequency of spams
randomly oscillated.
* At about 23:00 UTC we have tested the solution which seemed to finally
catch everything properly as desired. So now there should be no such spams
passing through, however, if senders will change the structure of the
subject, mails will pop up again, although - due to the first point - still
in lower frequency.
* Should that happen, we are considering rejecting all mails from @qq.com
(or <numbers>(a)qq.com) sent to any *-owner(a)lists.wikimedia.org address for
the time being until narrower solution is set.
(We == Keith & myself.)
Please let us know if you're experiencing any further spams of this type
since now.
Kind regards
Danny B.