Linda Murphy wrote:
>
>Then, I sent mail to <list>-outgoing and bypassed Majordomo
>altogether, and the mail was distributed to the list subscribers.
>
>Isn't this a bug?
No, it's a feature...of sendmail. Your -outgoing alias doesn't go
through Majordomo or resend, so there's no way it could be restricted.
>For any list which is restricted or moderated, all I need to do
>is guess the alias name for the :include alias (which is passed
>to resend as the last argument), and '<list>-outgoing' is a
>pretty good guess.
True, that's why I never use -outgoing for my lists and always disable
EXPN in sendmail.
>In fact, if I have a Unix account on the same
>host where majordomo is running, I don't have to guess at all, I
>can simply read the /etc/aliases file and look for the resend for
>the list!
I can trust the users on my system with that, although I realize not
everyone can. The best fix is probably to keep users off your list
serving systems.
>Net-happenings is supposedly a moderated mailing list -- but I
>wonder what would happen if I sent a message to
>net-happenings-outgoing@is.internic.net?
The owner of that list would probably change the alias PDQ. :-)
>Wouldn't it be
>distributed to everyone on the list by the system's MTA
>regardless of the fact that Majordomo thinks it's moderated?
Probably.
>Isn't that a problem?
It's a potential problem, but it's easy to pick hard-to-guess aliases.
>Another question: Can I have a list with an open subscription
>policy but where only the subscribers to the list can send mail
>to the subscribers of the list? (I'm a little new to Majordomo,
>so I'm not sure how I would configure such a list yet.) (This
>kind of list would also be susceptible to the same problem
>described above, I believe).
Sure, resend lets you specify a list of senders, which can be the same
as the list of subscribers.
-Dave
References:
|
|
