On Mon, 2009-01-26 at 15:26 -0700, Steve Lindemann wrote: > Thanks! Got it! They spoofed a legitimate list member on the > Return-Path:, which also showed up on the first ("From ") message header > line.
Both of these reflect the envelope sender address used in the SMTP dialog with the mail server. > I don't suppose there's anything we can do about this other than change > that particular user's email address... is there? You can restrict the set of headers used to identify subscribers using the SENDER_HEADERS variable in mm_cfg.py, as Mark indicated. By default (in Defaults.py) this is: SENDER_HEADERS = ('from', None, 'reply-to', 'sender') You can eliminate the envelope sender address from the mix by setting this simply to: SENDER_HEADERS = ('from', 'reply-to') or drop 'reply-to' if you want to be even more restrictive. -- Lindsay Haisley |"Fighting against human | PGP public key FMP Computer Services | creativity is like | available at 512-259-1190 | trying to eradicate |<http://pubkeys.fmp.com> http://www.fmp.com | dandelions" | | (Pamela Jones) | ------------------------------------------------------ Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://wiki.list.org/x/AgA3 Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/archive%40jab.org Security Policy: http://wiki.list.org/x/QIA9