On Mon, Apr 04, 2016 at 05:30:13PM -0700, Andrew Daviel wrote:
> I have an incident where a rejection message was forwarded to a
> list, and on to other members. I don't know if that was even
> mailman, but it got me thinking.

First, that's because the system which originated the rejection is broken.

All mail systems doing anti-spam/anti-virus/anti-whatever
should *always* reject (if they're going to reject) during the
SMTP conversation (a) because that's most effective and efficient
and (b) because that avoids generating a bounce message, which in
turn avoids backscatter such as you've described.

Second, anything coming back should go to the Sender:, which I
believe defaults to:

        LISTNAME-bounces@LISTHOST

I believe that LISTNAME-bounces, in turn, should be sent by the MTA
in play to:

        "|/usr/local/mailman/mail/mailman bounces LISTNAME"

(although I have it set up like this in the sendmail aliases file:

        LISTNAME-bounces:        "|/usr/local/mailman/mail/mailman bounces 
LISTNAME", postmaster@LISTHOST

so that the local postmaster gets a copy of the bounce for examination.)

This doesn't necessarily yield the desired outcome, e.g., it may
result in incrementing the bounce count for a subscriber when that
shouldn't really happen, but at least it avoids forwarding backscatter
to an entire mailing list.

---rsk
------------------------------------------------------
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Reply via email to