Re: Security problem with 94.4

[Bill Ott <billott @ theotts . org>]

Rainer Sokoll wrote:
> On Mon, Jun 26, 2006 at 08:22:25AM -0400, Bill Ott wrote:
>
>   
> > I just discovered that even though my list is restricted to list member, 
> > anyone can send mail to the list by appending "-list"to the end of the 
> > list name. I know this is a config problem on my part but have found no 
> > mention of the fix on the net. Any help is appreciated.  You can try it 
> > at phonelist @
theotts .
org  as phonelist-list @
theotts .
org
> >     
>
> Dou you have phonelist-list in your aliases file?
>
> Rainer
>
>   
es, as I understood the need. Here is my aliases for phonelist

###### definitions for majordomo list phonelist ##
phonelist-owner:  billott @
theotts .
org
owner-phonelist:  phonelist-owner
phonelist-approval:  phonelist-owner
phonelist:  "| /var/lib/majordomo/wrapper resend -l phonelist 
phonelist-list"
phonelist-list  :include:/var/lib/majordomo/lists/phonelist
phonelist-request:  "| /var/lib/majordomo/wrapper majordomo -l phonelist"


--
Regards,
Bill Ott

Email: Mailto://billott @
theotts .
org
Website: http://www.theotts.org