Ken Woodward wrote:
> I don't remember Majordomo docs warning about someone being able to bypass
> the resend by addressing the -list alias and I didn't know enough about
> aliases.
I didn't realize when we were setting this up, but we happened upon a very
good way of preventing this from happening. It does however, require two
machines. All port 25 traffic comes into one specific machine. If
anything matches either majordomo or the list name (and ONLY those two),
then it gets aliased to another machine running sendmail/majordomo. People
can send all they want to *-list but it will never get to the list machine
because there are no *-list aliases defined on the main machine. When we
first set it up I thought it was kinda stupid. I didn't realize how secure
it was until just now.
--
Blue skies... Cannonball http://www.mrball.net
* Anti spam filter: I am not root@localhost *
* In the land of Redmond, where the shadows lie. *
Follow-Ups:
References:
|
|
