Re: Over 40k

[Daniel Liston <dliston @ netscape . com>]

This is a "per list" setting that by modifying config_parse.pl you are 
only setting the "default" configuration for a newly created list.

The maxlength value should be configured via the individual <list>.config
files, and is only used IF your list utilizes "resend" in the alias
for the list.

list: "|/pathto/majordomo/wrapper resend -l list list-outgoing"

You also need to make sure your list-outgoing: alias is unreachable by
the general public, and not revealed in the message "Received:" headers.
Otherwise, people can write directly to this address instead of the 
actual list, bypassing ANY configuration rules.

You can prevent sendmail from revealing this address by adding ,nobody to
the delivery address in the alias above like this:

list: "|/pathto/majordomo/wrapper resend -l list list-outgoing,nobody"

Preventing the general public from reaching this address/alias directly
is more difficult.  First, you can hide the name by using something 
other than the default of -outgoing or the generic -list extension.  
These are easy to guess anyway.  Second, with sendmail, you can use the
virtusertable file to tell SMTP connections that the list-outgoing does
not exist (even though it does).  This is how that entry would look:

list-outgoing@your.domain	error:nouser User unknown

If you have live users on the same machine as majordomo, the above
trick does not prevent them from sending to the list members directly.
In fact, unless you take several security precautions, you better trust
every user on the system with YOUR reputation.


Dan Liston

Scott Downing wrote:
> 
> I changed the maxlength value in config_parse.pl to be over 40k, but I'm
> still not allowed to send files over 40k. Is there something else I need
> to do?
> 
> -Scott