I have a list in which posting is limited to list subscribers only. One
of the list members was hit with a virus and forwarded a post with virus
attachment to the list. 

I'm trying to understand why a post from a non-subscriber (as per the
from address) would have been sent through, when all other posts by
non-subscribers are held for moderation.

I'm no expert by any means, but it looks as if the message ID field was
inserted into the from field. Would this have caused mailman to allow
this post to the list instead of holding it for moderation as a post by
a non-subscriber? 

Many thanks in advance for any help or enlightment you can provide.

/SML



Below are the log entries created by the problem post 
(domain XXXXX'ed) 

-----------------------------------------------------

bounce:Apr 15 11:01:08 2004 (3512) bounce message w/no discernable    
     addresses: <[EMAIL PROTECTED]>

bounce:Apr 15 11:01:08 2004 (3512) forwarding unrecognized, message-id: 
     <[EMAIL PROTECTED]>

post:Apr 15 11:00:41 2004 (3521) post to lamp-user_maillist.lampsig.org 
     from [EMAIL PROTECTED], size=34876, 
     message-id=<[EMAIL PROTECTED]>, success

smtp:Apr 15 11:00:41 2004 (3521)
     <[EMAIL PROTECTED]> 
     smtp for 42 recips, completed in 0.756 seconds




Here are the headers from the post containing the virus Note that the
headers state the the post is from '[EMAIL PROTECTED]' but the log
list the message ID as the from address

-------------------------------------------------------

Received: from XXXXX (XXXXX [IP])
        by XXXXX (8.8.8/8.8.8) with ESMTP id IAA04485
        for <XXXXX>; Thu, 15 Apr 2004 08:01:12 -0700 (PDT)
        (envelope-from [EMAIL PROTECTED])
Received: from localhost ([127.0.0.1] helo=XXXXX)
        by XXXXX with esmtp (Exim 4.24)
        id 1BE8M5-0002pn-Cu; Thu, 15 Apr 2004 11:00:41 -0400
Received: from [IP] (helo=XXXXX)
        by XXXXX with smtp (Exim 4.24) id 1BE8M0-0002pS-N2
        for [EMAIL PROTECTED]; Thu, 15 Apr 2004 11:00:37 -0400
Date: Thu, 15 Apr 2004 08:04:39 -0800
To: [EMAIL PROTECTED]
From: [EMAIL PROTECTED]
Message-ID: <[EMAIL PROTECTED]>

------------------------------------------------------
Mailman-Users mailing list
[EMAIL PROTECTED]
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/

Reply via email to