[Mailman-Users] How hard is it to spoof an email?

[Mark Sapiro]

Jp Possenti wrote:

>I have a couple of questions regarding that FAQ link:
>
>1. Setting the max_num_recipients to 1 will mean that any time I make a
>newsletter to the public, I need to login and approve that request, correct?


Maybe. See below.


>I am just confused about the wording of the command. Does that mean that the
>message will go through but just to 1 person in the list and the other say
>499 people will not receive it?


No, it means that any message that is sent to the list with more than 0
(1 or more) addresses in the To: and Cc: headers combined, that
message will be held for moderator approval unless it contains an
Approved: header.

Note that it is quite possible to send a message with 0 addresses in
To: and Cc: which is why if you choose this option, you need to also
set require_explicit_destination to Yes so that posts with 0
recipients will be held too.


>2.  For setting everyone's moderation bit on, I can figure that out as it's
>an option under General -> Additional settings.


Actually that's emergency moderation. Normally what you do is set
default_member_moderation to Yes on Privacy options...->Sender filters
so ne members are moderated and then set all existing members
moderated under Additional Member Tasks on Membership
Management...->Membership List.


>But for the second part
>regarding posting using an approved:header I don't see that option anywhere.


This works with either option above. It is not a list setting. In order
to bypass moderation of a post that would normally be held for any of
the above reasons, you can put a header

Approved: list_password

in the message you send to the list. You can also put this in the first
line of the body of the post (as long as it's plain text). The header
will be removed, and as long as the list_password is correct, the post
will bypass the hold and will be delivered directly to the list.

-- 
Mark Sapiro <msapiro at value.net>       The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan