Posting to the list is inadequate.  I'm a digest subscriber.  This should
have been documented in the release notes - it's a major security hole now.

Lee

-------
Date: Sat, 6 Jul 2002 15:37:10 -0400
From: Sanford Whiteman <[EMAIL PROTECTED]>
Subject: Re: [IMail Forum] Warning to runners of LISTSERV's using IMAIL and
the 7.11 patch
Reply-To: [EMAIL PROTECTED]
> Unbeknownst to me, and unannounced in their release notes, iMail has
> modified the rules for posters in their latest patch.

FTR,  John's  announcement to the list did signal changes to IMAILSRV,
though not as in-depth as you'd have liked:

> - If a user is in posters.lst for a list they will always be able to
> post to that list

> I  found this out the hard way after a spammer subscribed to my list
> and  spammed  my  viruswarning  list  with  a Nigerian $$ scam - all
> within  6  hours  of  the  patch  being  released  and applied on my
> machine.

Yuck.  That  sucks.  Another  way  to  prevent this, unless the return
address was actually valid and monitored, is to use Declude Confirm.

Thanks for the info.

-Sandy

Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/

Please visit the Knowledge Base for answers to frequently asked
questions:  http://www.ipswitch.com/support/IMail/

Reply via email to