On Fri, 8 Apr 2005 14:55 +0100, Sujit Choudhury wrote to majordomo-users:
> we have majordomo set up as follows:
> listname: "|/usr/local/majordomo/wrapper resend -l \
> listname listname-out,nobody"
>
> Is there any reason why we need the listname-out,nobody?
If you don't do that, the address of your listname-out alias appears in
the headers of outgoing list messages. If a spammer picks up on that,
you'll get spam sent directly to the listname-out alias. Resend is
bypassed, so the list's restrict_post setting has no effect.
If you use sendmail, you can add another layer of protection against this
by adding the following to your virtusertable:
listname-out@yourdomain error:nouser User unknown
This tells sendmail to reject mail sent directly to
listname-out@yourdomain, but normal alias expansion still occurs so mail
sent to listname@yourdomain isn't affected.
--
Chip Old (Francis E. Old) E-Mail: fold@bcpl.net
BCPL Network Administrator Phone: 410-887-6180
BCPL.NET Internet Services Manager FAX: 410-887-2091
320 York Road
Towson, MD 21204-5179 USA
References:
|
|
