On Wed, 20 Apr 1994, Paul Crossman wrote:
> >and they're "in", at least, as far as posting email is concerned,
> >via SMTP (Simple Mail-Transport Protocol). They can't delete or
> >edit anything, but they *can* post mail to anybody, anywhere,
> >using any name they wish.
> >So, using this command Joe Joker can enter, and then set
> >MAIL FROM: your_name
> >RCPT TO: your_list_alias
> >DATA: .....
> Another free consult for the list...
> You can get around this by installing tcp_wrappers and wrapping sendmail. Mail
> will not go out instantly, but outside users can't play with your sendmail port
If it is that easy to post to a private list, then is it also
easy/possible for these non members to READ the list traffic/messages?