Yes, if you want to override the moderator on a moderated mailing list
don't email to LIST@SITE, but mail to LIST-outgoing@SITE
To defeat this, the admin should replace "LIST-outgoing" with
"LIST-secretword" and make sure that people can't find out what
"secretword" is. For example:
1. Configure Sendmail to not display it in the Received: headers.
2. Make sure your /etc/aliases file can't be accessed by
untrustworthy users. (this may mean running your
mailing lists on a machine that only lets you in)
3. Disable EXPN and VRFY (this should be done anyway).
--tal
--
Tom Limoncelli -- tal@dnrc.bell-labs.com (work) -- tal@plts.org (play)
"A bend in the road is not the end of the road
unless you fail to make the turn."
Follow-Ups:
References:
|
|
