[Mailman-Users] Trying to tighten up my security...

[Mark Sapiro]

Jon D. Slater wrote:
>
>I installed the patch, and tested it (by trying to send an e-mail to the
>group from an e-mail that I knew wasn't in the group).  It was rejected (as
>expected).
>
>I just had an e-mail get through from a non-member!
>
>The e-mail is from: "Bernardo Spicer" <BernardoSpicer at 1000000000.com>
>
>Who is definitely *not* on any of my lists.
>
>The group sender filter is set to 'Reject' postings from non-members for
>which no explicit action is defined.
>
>But, I was still notified.  Here's the full header of the message that
>requested approval:
>
>Received: from mxs.mail.ru ([203.146.112.225])
>	by steeplechase-hoa.org (8.13.7/8.13.4) with ESMTP id k6K3TmZt017041
>	for <designreview at steeplechase-hoa.org>; Wed, 19 Jul 2006 21:30:03
>-0600
>Message-Id: <200607200330.k6K3TmZt017041 at steeplechase-hoa.org>
>From: "Bernardo Spicer" <BernardoSpicer at 1000000000.com>
>To: <designreview at steeplechase-hoa.org>
>Subject: RE: wave surface
>Date: Thu, 20 Jul 2006 03:40:10 -0420
>MIME-Version: 1.0
>X-Priority: 3
>X-MSMail-Priority: Normal
>X-Mailer: Microsoft Outlook Express 6.00.2800.1478
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1478
>Content-Type: multipart/related; type="multipart/alternative";
>boundary="----=_NextPart_000_006A_01C6ABE8.DFCD64A0"
>
>
>Why did I get a request to approve this message?


What was the reason in the approval notice you received (it's also in
the 'vette' log).

Do you have any header_filter_rules defined (in Privacy
options...->Spam filters) with Hold action? These are applied before
membership tests.


Also, it's not relevant to this issue, but I am still interested in the
entry from the 'error' log from the admindb "bug" from the first patch
attempt.

-- 
Mark Sapiro <msapiro at value.net>       The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan