[EMAIL PROTECTED] wrote:

You don't even need to mark the list as moderated.  Simply use a shell
script to filter all incoming mail, via the .courier mechanism, before
running couriermlm.

well, that sounds easy, but I don�t know where to start on that. How would such a script look like? On what criteria should the newsletter author be authenticated? Simple checks against from-address will easiliy be forged, don�t? I am totally blocked on that.

I missed the beginning of this thread, but this sounds like something I was facing myself recently. If there is a real threat of people posting to the list maliciously, then making it moderated is your best protection. However, if you're primarily just worried about blocking random spammers and accidental postings, one of the following two solutions might work for you (credit goes to Sam for much of this; I got some tips from him off-list):

Solution #1. Use a private posting address that only certain people know
about. For example, if your list is called [EMAIL PROTECTED], you can make
the private posting address [EMAIL PROTECTED] by:

a. Clearing the regular .courier file (make it an empty blank line).
b. Creating a file called .courier-privatepost with the following contents:

| unset DTLINE; sed '1,/^$/s/news-privatepost@/news@/ig' | couriermlm
msg /path/to/list/dir

(Don't put line breaks in the actual file!)

You will only tell the people you want to be able to post about the
address [EMAIL PROTECTED] No-one else will ever see it. Note
that this is not foolproof protection, as if someone ever finds out your
private posting address, they will be able to post to the list. However,
if you choose something hard to guess and only post messages over a
secure connection, it's pretty good.

Solution #2. Use a whitelist. This is not as secure as #1, since it can
be fooled by a forged From line, but if you don't need tight security,
here are the steps:

a. Create a file called .whitelist in the list directory that contains
the addresses allowed to post to the list.
b. Put the following in the .courier file:

| if grep -i "^\${SENDER:-}$" /path/to/listdir/.whitelist &>/dev/null;
then couriermlm msg /path/to/listdir; fi

(Again, no linebreaks in the actual file)

m.





-------------------------------------------------------
This SF.net email is sponsored by OSDN's Audience Survey.
Help shape OSDN's sites and tell us what you think. Take this
five minute survey and you could win a $250 Gift Certificate.
http://www.wrgsurveys.com/2003/osdntech03.php?site=8
_______________________________________________
courier-users mailing list
[EMAIL PROTECTED]
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users

Reply via email to