PSA: If you run a Ghost blog, turn on spam protection for signups as soon as possible. Details here: ghost.org/changelog/si... There's an ongoing spam attack with email-to-sms domains, see my Mailgun dashboard, and how after 2 weeks of regular deliveries the traffic (and my usage invoice) shoots up. - ThreadSky

peterszasz.com • 34 days ago

PSA: If you run a Ghost blog, turn on spam protection for signups as soon as possible. Details here: https://ghost.org/changelog/signup-spam-protection/ There's an ongoing spam attack with email-to-sms domains, see my Mailgun dashboard, and how after 2 weeks of regular deliveries the traffic (and my usage invoice) shoots up.

Comments

peterszasz.com•34 days ago

This is the blocklist I use now, which seemingly stopped the attack:

https://txt.att.net
https://tmomail.net
https://vtext.com
https://mymetropcs.com
https://msg.telus.com
https://pcs.rogers.com
https://fido.ca
https://txt.freedommobile.ca
https://sms.sasktel.com
https://txt.bell.ca
https://email.uscc.net

preslav.me•33 days ago

Thanks for putting this together 🙏
I ahave also just recently noticed a significantly higher bill on Mailgun as a result of the same thing. Upgrading all my Ghost sites, and hoping that this will resolve it.

peterszasz.com•33 days ago

Whatever you do, just don't contact Mailgun about this... 😰

https://forum.ghost.org/t/mailgun-permanently-disabled-account-due-to-spam-signups/54775

preslav.me•33 days ago

On a different note, I think Ghost should just stop using dubious mail delviery services like Mailgun, and rely on plain old SMTP over Gmail. I have been using Gmail with Ghost for all my newsletter sending, but for some reason, signups still require Mailgun.

peterszasz.com•33 days ago

It's interesting, I thought you can move transactional mails like signups to any SMTP but newsletter sending can only work with Mailgun (because of all the delivery and opening stats they provide).

preslav.me•31 days ago

Mailgun is a disaster. I sent out a newsletter yesterday, and only about a third of my subscribers actually received it. Sign up confirmation emails dont get sent, either.

Mailgun stats say all mails have been accepted and delivered. However, I asked around, and none of my contacts has ... 1/2

preslav.me•31 days ago

... received the newsletter. I have a "honeypot" email I use for verification, and I didn't get anything there, either. Nothing in spam. Nowehere to be found.

peterszasz.com•31 days ago

That sucks and honestly I don’t have much trust in Mailgun either to assist in debugging. This is a great opportunity for a competitor to provide the same API to allow swap-in replacement of Ghost users.

Comments

Posting Rules

Reply