[Mailman-Users] non-subscriber managed to post to a subscriber only list

[Mark Sapiro]

Lindsay Haisley wrote:

>On Mon, 2009-01-26 at 16:49 -0600, Grant Taylor wrote:
>> Is there a way that we can require some of these things (if they exist) 
>> to match each other?  I.e. to require the 'from' and the 'reply-to' to 
>> match?
>
>This might not be such a good idea.  A "Reply-To" header is optional is
>generally used if a reply should be sent to some address _other_ than
>the specified From header address, so if it's present, it may logically
>not match the From header address.  I'm not so sure about the Sender
>header, but I know that it's optional and I believe it's also used to
>further "fine tune" information regarding the origin of an email if it's
>from an organization.


The intent of Sender: is along the lines of

From: The Boss
Sender: The Boss's Secretary

About the only things that you can "normally" expect to match are From:
and envelope sender, but even there, there will be legitimate mail in
which they won't match.

-- 
Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan