[Mailman-Users] non-subscriber managed to post to a subscriberonly list

[Grant Taylor]

On 01/26/09 16:38, Lindsay Haisley wrote:
> Both of these reflect the envelope sender address used in the SMTP 
> dialog with the mail server.

*nod*

> You can restrict the set of headers used to identify subscribers 
> using the SENDER_HEADERS variable in mm_cfg.py, as Mark indicated. 
>  By default (in Defaults.py) this is:
> 
> SENDER_HEADERS = ('from', None, 'reply-to', 'sender')
> 
> You can eliminate the envelope sender address from the mix by setting 
> this simply to:
> 
> SENDER_HEADERS = ('from', 'reply-to')
> 
> or drop 'reply-to' if you want to be even more restrictive.

I like this idea much better.

Is there a way that we can require some of these things (if they exist) 
to match each other?  I.e. to require the 'from' and the 'reply-to' to 
match?



Grant. . . .