Re: [Mailman-Users] How to blocking malicious subscription requests?

2017-09-05 Thread Jay R. Ashworth
- Original Message - > From: "Mark Sapiro" > On 09/05/2017 09:45 AM, Grant Taylor via Mailman-Users wrote: >> >> Is Mailman aware of user+detail? Or does is it naively view the entire >> userpart as distinct? Thus allowing as many many subscriptions using >> detail

Re: [Mailman-Users] How to blocking malicious subscription requests?

2017-09-05 Thread Mark Sapiro
On 09/05/2017 09:45 AM, Grant Taylor via Mailman-Users wrote: > > Is Mailman aware of user+detail? Or does is it naively view the entire > userpart as distinct? Thus allowing as many many subscriptions using > detail as possible? > > I know of at least one very major mail provider (possibly

Re: [Mailman-Users] How to blocking malicious subscription requests?

2017-09-05 Thread Grant Taylor via Mailman-Users
On 09/05/2017 08:55 AM, Ian Kelling wrote: There is at least one very major mail provider where joe+any_string@domain goes to the inbox of joe by default, Is Mailman aware of user+detail? Or does is it naively view the entire userpart as distinct? Thus allowing as many many subscriptions

Re: [Mailman-Users] How to blocking malicious subscription requests?

2017-09-05 Thread tlhackque via Mailman-Users
On 05-Sep-17 10:55, Ian Kelling wrote: > There is at least one very major mail provider where > joe+any_string@domain goes to the inbox of joe by default, allowing bad > people to get my mailman instance to send many subscription mails to > joe+random_string@domain, messing up joe's inbox, because

Re: [Mailman-Users] How to blocking malicious subscription requests?

2017-09-05 Thread David Gibbs
On 9/5/2017 9:55 AM, Ian Kelling wrote: There is at least one very major mail provider where joe+any_string@domain goes to the inbox of joe by default, allowing bad people to get my mailman instance to send many subscription mails to joe+random_string@domain, messing up joe's inbox, because

[Mailman-Users] How to blocking malicious subscription requests?

2017-09-05 Thread Ian Kelling
There is at least one very major mail provider where joe+any_string@domain goes to the inbox of joe by default, allowing bad people to get my mailman instance to send many subscription mails to joe+random_string@domain, messing up joe's inbox, because mailman just sees different addresses. Can