Great Circle Associates Majordomo-Users
(June 1999)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: How to prevent people from posting to the :include alias list?
From: "Dave Atkins" <dave @ ecomdesigns . com>
Date: Fri, 4 Jun 1999 16:20:01 -0700
To: <Majordomo-Users @ GreatCircle . COM>
Importance: Normal

I set up majordomo and got it working, but if I examine the headers of an
email:

-----
Return-Path: <sender@edevotionals.com>
Received: (from majordomo@localhost)
	by waimea.ecomdesigns.com (8.9.3/8.9.3) id PAA27009
	for deanschurch1-j316; Fri, 4 Jun 1999 15:34:48 -0700
X-Authentication-Warning: waimea.ecomdesigns.com: majordomo set sender to
sender@edevotionals.com using -f
Received: (from root@localhost)
	by waimea.ecomdesigns.com (8.9.3/8.9.3) id PAA27001;
	Fri, 4 Jun 1999 15:34:47 -0700
Date: Fri, 4 Jun 1999 15:34:47 -0700
Message-Id: <199906042234.PAA27001@waimea.ecomdesigns.com>
To: deanschurch1@edevotionals.com
From: "Dean's Church" <dean@ecomdesigns.com>
Subject: New Headline
Sender: sender@edevotionals.com
Precedence: bulk
Reply-To: Dean Ebesu <dean@ecomdesigns.com>
Status:
-----

I can see that the "real" name of the list is "deanschurch1-j316"

which is setup in the aliases file thus:

-----
deanschurch1:  "|/usr/local/majordomo-1.94.4/wrapper resend -l deanschurch1
dean
schurch1-j316"
deanschurch1-j316: :include:/usr/local/majordomo-1.94.4/lists/deanschurch1"
deanschurch1-owner:  dean@ecomdesigns.com
deanschurch1-request: dean@ecomdesigns.com
owner-deanschurch1: dean@ecomdesigns.com
-----

I made the :included list -j316 instead of just -list so people would not be
able to guess it...but then it appears in the header anyway. What is to
prevent people from seeing this and going around the approve requirements of
the list?

Isn't it true that if people know about this line in the aliases file:

deanschurch1-j316: :include:/usr/local/majordomo-1.94.4/lists/deanschurch1"

they don't need to know your list password? How can you hide this?

Dave Atkins
Chief Technology Officer
eCommerce Designs, LLC
Phone: 925-734-8719, Fax: 415-704-3437
dave@ecomdesigns.com
http://www.ecomdesigns.com




Follow-Ups:
Indexed By Date Previous: welcome message
From: widget <widget@wurldlink.net>
Next: MajorD won't accept my passwords
From: JASON NOLAN <jason.nolan@utoronto.ca>
Indexed By Thread Previous: welcome message
From: widget <widget@wurldlink.net>
Next: Re: How to prevent people from posting to the :include alias list?
From: Theo Van Dinter <felicity@kluge.net>

Google
 
Search Internet Search www.greatcircle.com