[Mailman-Users] List marked private, still accessible from web?

[Mark Sapiro]

Richard Barrett wrote:
>
>On 10 May 2006, at 23:29, Michael Urashka wrote:
>
>>
>> But these pages give a 'Forbidden' error:
>>
>> http://www.somesite.com/pipermail/
>> http://www.somesite.com/pipermail/somelist/
>> http://www.somesite.com/pipermail/somelist/2005-October/
>>
>> Looking in Apache's httpd.conf there's an alias for pipermail into:
>>
>> Alias /pipermail/ "/usr/local/mailman/archives/private/"
>>
>
>This should probably read:
>
>Alias /pipermail/ "/usr/local/mailman/archives/public/"


Richard is correct about this. It should definitely point to the
public/ directory, not the private/ directory.


>> Will changing this (or commenting it out) likely break access to any
>> of the public lists on the same server?


You don't want to comment it out as that will break all public archive
access for sure. You need to make it as Richard says or you will be
able to access private archives via the pipermail URL. Then, if that
doesn't fix the problem, you need to remember this from my first reply
in this thread.


>Running check_perms showed that the /private archives had the +x for
>'other' set so I toggled that to -x.


This will probably break access to your remainin public archive via the
'pipermail' URL. If it doesn't, that's great - leave it o-x, but I
think you'll probably need to put it back to o+x to access public
archives via the 'pipermail URL.


-- 
Mark Sapiro <msapiro at value.net>       The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan