> Perharps, my configuration is not correct, but it seems that when somebody
> knows the admin_passwd , he is able to do a lot of thing even if he's not
> the owner of the list. So majordomo doesn't verify who send the approve
> command.
No it doesn't. It's a lot easier to forge mail headers than it is to guess
the admin password, so adding the extra check wouldn't buy you any real
security.
If your admin password has leaked out, you should change the password.
--
::: Lazlo (lazlo@swcp.com; http://www.swcp.com/lazlo)
::: Internet Music Wantlists: http://www.swcp.com/lazlo/Wantlists
|
|
