[Mailman-Users] Facebook invite not rejected

[Mark Sapiro]

Russell Clemings wrote:

>A Facebook invite from invite+zrdoovf=cerf at facebookmail.com got posted
>to two of our lists last night and I can't figure out why it wasn't
>rejected. It came from a user who was subscribed to both lists, but at
>a gmail address. I suspect he gave Facebook access to his address book
>but as I said that facebookmail.com address is not a subscriber.
>
>generic_nonmember_action is reject
>forward_auto_discards is yes
>accept_these_nonmembers. hold_these_nonmembers,
>reject_these_nonmembers and discard_these_nonmembers are all empty
>
>but ... (listname masked here, the rest is accurate)
>
>/usr/local/cpanel/3rdparty/mailman/logs/post:20404:Nov 15 01:12:06
>2009 (13887) post to listname-talk from
>invite+zrdoozozoigf at facebookmail.com, size=3308,
>message-id=<7f9ef7cb2a8b3dff5957c17d3bb09ace at 10.16.160.197>, success
>/usr/local/cpanel/3rdparty/mailman/logs/post:20405:Nov 15 01:12:07
>2009 (13887) post to listname-teach from
>invite+zrdoovf=cerf at facebookmail.com, size=3332,
>message-id=<708a4ec208c585f01494cd7393f0b309 at 10.16.160.197>, success
>
>Nothing in the other logs (except smtp) and nothing fishy in the
>headers that I can see.


The sender reported in the post log messages above comes from either
the From: header or possibly the Sender: header (if
USE_ENVELOPE_SENDER is set true in mm_cfg.py) of the incoming message.

However, membership tests will test all of the From: header, the
envelope sender (unix From_ or Return-Path:), the Reply-To: header and
the Sender: header, and if any of these contains a member address, the
post is deemed to be from a member.

If the original Reply-To: is stripped by the list, it is lost, but the
other information is in the message in the
archives/private/LISTNAME.mbox/LISTNAME.mbox/ file.

-- 
Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan