Majordomo uses "hidden" aliases to actually send mail
to the members of the lists (typically listname-out).
Anyone who knows the name of the list can send mail to
the members directly. Sendmail version 8 makes it easier
for recipients to discover this name since it is very
good at recording envelope information in the
"Received" headers.
Protecting this list becomes more important
with moderated lists.
My current idea for a "solution" is give majordomo
a separate aliase file. The separte alise file
can use "listname" as the address for resend to
use for actually delivering mail. When resend
invokes sendmail it will use the alternate (private)
alias file.
Are there better way of doing this?
What about having resend talk to port 25 directly and
expand the alias itself? Comments, ideas?
arnold
Follow-Ups:
|
|
