[Mailman-Users] List security: approved line got mailed out to list users

2007-01-26 Thread Jacob Sam-La Rose
Hi. I've got my list configured as an announcement-only list, and the first few mailings I've sent have gone through exactly as planned. I use Approved: password as the first line to approve mailings. I inadvertently sent email to the list from one of my other email addresses, and when

Re: [Mailman-Users] List security: approved line got mailed out to listusers

2007-01-26 Thread Mark Sapiro
Jacob Sam-La Rose wrote: I've got my list configured as an announcement-only list, and the first few mailings I've sent have gone through exactly as planned. I use Approved: password as the first line to approve mailings. I inadvertently sent email to the list from one of my other email

Re: [Mailman-Users] List security: approved line got mailed out to listusers

2007-01-26 Thread Jacob Sam-La Rose
Thanks for the response, Mark. I'm only just getting used to the concept of community via mailing list (I'm more used to user forums...!) On 26 Jan 2007, at 19:00, Mark Sapiro wrote: Jacob Sam-La Rose wrote: I've got my list configured as an announcement-only list, and the first few

Re: [Mailman-Users] List security: approved line got mailed out to listusers

2007-01-26 Thread Brad Knowles
At 10:59 PM + 1/26/07, Jacob Sam-La Rose wrote: What Mailman version is this? 2.1.9.cp2 That's a cPanel version number. Please see FAQ 6.11. Do you have a copy of the message from the list - complete with all headers? If nothing else, if the list is archived, this copy will be in

Re: [Mailman-Users] List security: approved line got mailed out to listusers

2007-01-26 Thread Mark Sapiro
Jacob Sam-La Rose wrote: Headers: Subject: FYI (important): any email to / Jacob this morning... Date: 26 January 2007 11:00:05 GMT To: [EMAIL PROTECTED] As Brad points out in another reply, these don't look like raw message headers for a few reasons, not the least

Re: [Mailman-Users] List security

2004-05-07 Thread Stephen J. Turnbull
Kai == Kai Schaetzl [EMAIL PROTECTED] writes: Kai So, put Approved: password in the first line or as a Kai header. Note, this will be parsed away and NOT distributed to Kai the list, don't worry! Well, worry a little. It's cleartext, so unless you're using a VPN/ encrypted

[Mailman-Users] List security

2004-05-06 Thread Sean
Hi, I'm running a list on Mailman 2.1.3 and I am looking to secure my list as much as possible. I saw this in FAQ 3.11 (http://www.python.org/cgi-bin/faqw-mm.py?req=showfile=faq03.011.htp): A more secure alternative is for your approved posters to add an Approved header to their postings

Re: [Mailman-Users] List security

2004-05-06 Thread Kai Schaetzl
Sean wrote on Thu, 6 May 2004 12:12:18 -0400 (EDT): A more secure alternative is for your approved posters to add an Approved header to their postings as a header, or as the first line of the post). I'd like to implement this but I'm uncertain to go about it. I'm pretty certain the

Re: [Mailman-Users] List Security

2002-10-23 Thread Jon Parise
On Wed, Oct 23, 2002 at 08:45:46AM +0200, Dan Richter wrote: I was using Majordomo, but I got scared off when I realized that anyone could bypass the list posting restrictions by posting to the correct alias. (The normal list alias processes, then redirects to a second alias which blindly

Re: [Mailman-Users] List Security

2002-10-23 Thread J C Lawrence
On Wed, 23 Oct 2002 08:45:46 +0200 Dan Richter [EMAIL PROTECTED] wrote: I was using Majordomo, but I got scared off when I realized that anyone could bypass the list posting restrictions by posting to the correct alias. (The normal list alias processes, then redirects to a second alias which

Re: [Mailman-Users] List Security

2002-10-23 Thread Dan Richter
Mailman doesn't use secret aliased. That's good. Mailman v2.0 authenticates on From: or envelope (you pick). Mailman v2.1 authenticates on From: and envelope. Pardon me for being a pain here, but isn't it ridiculously easy to forge a From:, and also rather easy to forge an envelope? Now

Re: [Mailman-Users] List Security

2002-10-23 Thread admin
Mailman v2.1 authenticates on From: and envelope. What is used? Pardon me for being a pain here, but isn't it ridiculously easy to forge a From:, and also rather easy to forge an envelope? Now I'll be humble and admit that I don't even know what an envelope is. So my question about the

Re: [Mailman-Users] List Security

2002-10-23 Thread J C Lawrence
On Wed, 23 Oct 2002 19:00:06 +0200 Dan Richter [EMAIL PROTECTED] wrote: Pardon me for being a pain here, but isn't it ridiculously easy to forge a From:, and also rather easy to forge an envelope? From: is trivial under many MTAs. Envelope requires understanding SMTP and driving that

[Mailman-Users] List Security

2002-10-23 Thread Dan Richter
I was using Majordomo, but I got scared off when I realized that anyone could bypass the list posting restrictions by posting to the correct alias. (The normal list alias processes, then redirects to a second alias which blindly transmits.) The blind forward alias shows up in the headers, so I

Re: [Mailman-Users] List Security

2002-10-23 Thread admin
I had that- question and in current of the week tried to get here answer, but alas, nobody not was able on this answer, come to go to majordomo I was using Majordomo, but I got scared off when I realized that anyone could bypass the list posting restrictions by posting to the correct alias.