LSTSRV-L Archives

LISTSERV Site Administrators' Forum

LSTSRV-L

Options: Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Topic: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
"A.Omer Koker" <[log in to unmask]>
Thu, 14 Sep 2006 05:50:00 +0300
text/plain (58 lines)
Actually no, what gets distributed to the lists depends on what your
Listserv security policy is.  So if you set it as an open list for anyone to
post anything then yes.  I strongly suggest against this!   

If you have a filter before that youll get rid of all the spam that gets
sent to the list and listowner adr and free listserv from replying to
everyone (saying not-auth or wrong command, etc.) and then dealing with
potential loops and complaints from actual account owners.

If you have spamassasin. The main advantage is youll save your time cleaning
up list owner and other privilaged listserv accounts.  If you have the app I
mentioned on its own or coupled with spamassasin it will offer additional
benefits especially if you also serve real user accounts.

All solutions have advantages and disadvantages.  As mileage may vary with
actual use and experience I hope I was able to shed some light on your
question...


Best,
Omer.


The flow with spamassasin integrated;
1- joe@box sends mail to list adr
2- spamassasin marks it as spam, delivers to app
3- app does the challenge (over mail) / response (over web)
4- joe@box (if a real user) recieves challenge email
5- if joe@box actually sent the message clicks the link
5- app whitelists user account in a way that spamassasin can use
6- app hands original message to listserv for processing as per listserv
security policy of that list.



> -----Original Message-----
> From: LISTSERV site administrators' forum 
> [mailto:[log in to unmask]] On Behalf Of Pete Weiss
> Sent: 14 Eylül 2006 Perşembe 01:32
> To: [log in to unmask]
> Subject: Re: What do you do with spam
> 
> At 17:37 9/13/2006 Wednesday, A.Omer Koker wrote:
> 
> >4a- if Joe clicks on the special link the app then goes on 
> to deliver 
> >(to
> >listserv) the original message Joe sent as well as add Joe 
> to a whitelist.
> >This way the next time Joe@box sends an email to ANY 
> list/user on your 
> >domain his mail gets delivered directly to listserv.
> 
> 
> So once I'm whitelisted, I can be immediately spoofed by some 
> malware and have it distributed to the lists?
> 

ATOM RSS1 RSS2