[Mailman-Users] Mail Lists, Authorized Posters and Virus/Worm Access

[George Theall]

On Wed, May 05, 2004 at 01:28:59AM -0700, Bob Bowers wrote:

> In my community last week, someone gained access to a mail list with 
> hundreds of subscribers by mimicking an email address authorized to post to 
> the list (moderation bit set OFF). 

The shortcoming of this approach to moderation is discussed in the FAQ:

    http://www.python.org/cgi-bin/faqw-mm.py?req=show&file=faq03.011.htp

> What resulted was that a worm of the W32Beagle variety was 
> sent to many hundreds of subscribers. 

Sorry to hear that.  As others have mentioned, you might want to explore
setting up anti-virus filtering on your mail server and/or restrict the
types of attachments your mailing list(s) allow. 


George
-- 
theall at tifaware.com
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://mail.python.org/pipermail/mailman-users/attachments/20040505/5507d6e5/attachment.pgp