Great Circle Associates Firewalls
(February 1996)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: KNOCK - KNOCK!
From: Alan Olsen <alano @ teleport . com>
Date: Tue, 27 Feb 1996 20:00:19 -0800
To: Ken Hardy <ken @ bridge . com>, firewalls @ Greatcircle . com

At 05:17 PM 2/27/96 -0600, Ken Hardy wrote:

>Is it necessary to make the subscriber list public at all?  I'm getting
>more and more of this kind of cruft in my inbox.  Given that the
>membership in the list is self-selective, allowing only subscribers to
>request the membership list is enhances our privacy not a whit.

If the list is running off of Majordomo, it can.  I run two lists currently
and the who information is only available with a password.

The proper settings in the config is:

private_get       =  yes
private_index     =  yes
private_info      =  yes
private_which     =  yes
private_who       =  yes

Also, there is a hack I have seen which aids in defending against people who
subscribe with false addresses.  It sends a confirmation message to the
subscriber and the subscription does not take effect until they return an
"authentication code".
  

---
Alan Olsen -- alano @
 teleport .
 com -- Contract Web Design & Instruction
        `finger -l alano @
 teleport .
 com` for PGP 2.6.2 key 
                http://www.teleport.com/~alano/ 
  "We had to destroy the Internet in order to save it." - Sen. Exon
"I, Caligula Clinton... In the name of the Senate and the people of Rome!"
   - Bill Clinton signing the CDA with the First Amendment bent over.


Indexed By Date Previous: Firewalls for NT - update
From: pmoen @ sbnsw . com . au
Next: Re: Pentagon displays due respect for hackers
From: Barry Anderson <bwa @ cednsw . telecom . com . au>
Indexed By Thread Previous: Re: KNOCK - KNOCK!
From: Ken Hardy <ken @ bridge . com>
Next: SGI Security Advisory 19960203
From: "SGI Security Coordinator" <agent99 @ boytoy . csd . sgi . com>

Google
 
Search Internet Search www.greatcircle.com