[Mailman-Users] Re: spam

Will Yardley william+mm at hq.newdream.net
Thu Oct 17 05:04:04 CEST 2002


J C Lawrence wrote:
> On Tue, 15 Oct 2002 15:42:33 -0700 (PDT) alex wetmore <alex at phred.org> wrote:

> > It is very easy to forge the From: line in email.  If a spammer forges
> > the From: line to have a user which is on your list then it will go
> > through.  This isn't really a problem that Mailman itself can solve.
> 
> v2.1 authenticates on envelope as well.

Does it do this by default? This sounds like a bad idea as forging the
envelope-sender is pretty trivial (and common), and there's no reason
that the envelope-sender needs to match the 'From:' header.

-- 
Will Yardley
input: william < @ hq . newdream . net . >





More information about the Mailman-Users mailing list