Re: Can an account be made available only locally?

[Mark Hartman]

Title: Re: Can an account be made available only locally?

Charles,

Yes, you can do this.

On the "List" screen in the Admin application, the "Work Lists" field is

the name of the actual SIMS accounts for distribution.  Let's say that your

list name is my-list, and you want to hide it by using the name obfuscated-

list - the accounts that are normally my-list.d and my-list.m should now

be named obfuscated-list.d and obfuscated-list.m, and "obfuscated-list"

should appear in the "Work Lists" field.

This isn't all you have to do to keep things secure, however, since SIMS

gives away information unless you have multiple recipients of a message.

SO...

In the "Folders" item in the Preferences menu of the AutoShare Admin

application, point at a new folder called "List submissions" that you

should create in your SIMS folder.  This folder should be opened (I make

it a pop-up folder to make sure), and the following two AppleScripts

should be attached to it:

on closing folder window for this_folder
        tell application "Finder"
               open this_folder
        end tell
end closing folder window for

This script keeps the window open, which is required to automatically

run folder-attached scripts.

property dummyEMail : "[EMAIL PROTECTED]"

property submittedFolder : ""
on adding folder items to this_folder after receiving added_items
  open added_items
end adding folder items to

on open added_items
   set submittedFolder to (path to system folder as string) & "SIMS Folder:Submitted:"

        repeat with theItem in added_items

                if the last character of (theItem as text) is not ":" then
                      try
                             set theList to (extract string list from (theItem as text) id 8192)
                     on error errtxt number errnum
                           tell application "Finder"
                                       select theItem
                                  move selection to folder submittedFolder
                                end tell
                        end try
                try
                             if the (count of items in theList) is 1 then
                                    set theList to theList & {dummyEMail}
                                   add string list theList to (theItem as text) id 8192 with replacing allowed
                             end if
                          tell application "Finder"
                                       select theItem
                                  move selection to folder submittedFolder
                                end tell
                        on error errtxt number errnum
                           tell application "Finder"

                                        delete theItem

                                end tell
                        end try
        end if
  end repeat
end open

This script adds the additional recipient in the variable "dummyEMail" to

every list submission; you should set up the named account so that it

simply discards mail.  This has the effect of removing any recipient info

from the headers so that no one can tell that "obfuscated-list" is involved.

Hope this helps; let me know.

Regards

Mark Hartman

At 2:33 PM -0500 1/20/03, Chuck Martin wrote:

I have an AutoShare list server on my SIMS box, and just discovered that the W32/Sobig@MM work appears to have discovered how to send itself to my list without going through the list server by directing mail at the list distribution account. I didn't even know it would accept outside email. Is there a way to disable its ability to accept email from outside, so that only the list server can use it?

############################################################# This message is sent to you because you are subscribed to the mailing list <[EMAIL PROTECTED]>. To unsubscribe, E-mail to: <[EMAIL PROTECTED]> To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]> To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]> Send administrative queries to <[EMAIL PROTECTED]>