[Mailman-Users] how to prevent postings with faked moderator emailadress

[John Dell]

Brad Knowles wrote:
> At 2:36 PM +0100 2004/02/27, Tobias Bielohlawek wrote:
> 
>>  But as you know, emailadresses can be faked and so it is possible that
>>  somebody else  can post to the list.
> 
> 
>     Yup.
> 
>>  Is there any way to make the list more secure?
> 
> 
>     I think there were some PGP signing hacks made a long time ago, but 
> I don't think they've been updated in years.  You'd probably have to 
> either bring them up-to-date, or downgrade your mailman installation 
> severely.
> 
>>  e.g. the moderator has to put a password into his posting or subject!?
> 
> 
>     Other than the PGP handling, I'm not aware of anything.

we had that problem, so I made it so every posting has to be manually 
approved by the moderator (including postings from the moderator!). 
IOW, everybody gets the moderator bit set.  Fortunately, this only 
happened on a low-volume announce only list.

John