[Mailman-Developers] Fwd: suggested improvement for Mailman's bounce processing
Barry Warsaw
barry at python.org
Fri Aug 11 22:35:41 CEST 2006
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Ian, I'm not sure what kind of feedback you're looking for, but this
one comment stood out to me:
On Aug 11, 2006, at 7:14 AM, Ian Eiloart wrote:
>> 2) Hold the message and send the envelope sender instructions to
>> auto-moderate. Very friendly to legitimate users but bad for the
>> recipients of joe-jab attacks. However, using SPF makes this a
>> non-issue.
>
> 3) Hold the message silently, sending no instructions for
>> auto-moderation. This is not so friendly for legitimately
>> confused users
>> whose messages go into a vacuum, but the ideal circumstance for
>> announce-only lists which *always* moderate all messages. Of course,
>> this is just fine for spam control.
>
> Yes, that sucks, but that's where we're left with Mailman. In fact,
> it's
> one of the main reasons I'm looking for a MLM that does (1). I
> can't think
> of any case in which (3) is better than (1).
Although I have not implemented it yet, Mailman 2.2 will definitely
get auto-moderation. IOW, should a non-member send a message to a
mailing list, and if that mailing list is so configured, Mailman will
hold the message and send a message to the From address asking for
verification of the post. I'm assuming this is what you mean by
"auto-moderation".
I'm not worried about joe-jobbing because Mailman could easily send
just one auto-moderation message per unit of time, or number of posts
to limit any backspamming. There are issues related to how long you
want to hold such auto-moderated posts and such, but I think those
are all manageable. There's also the question of how long you want a
verified non-member to be able to post to a list, but again, this is
doable (hopefully without introducing a bajillion new admin knobs).
- -Barry
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (Darwin)
iQCVAwUBRNzqInEjvBPtnXfVAQIviwP/TtiHJRvZDOgpGjuK5NS6bmugPZajPLfo
6gYWLWB+e6jdCRrlIOfkYN27lR1NovGzhbZwBP8q3l84aDeNCvyMscCOvaZUjv8m
sFbYe2zDYzYG4yjeuY1XFlfXl2PVlgAwh1LQZ3PyJSq08JltTxYG4X+wTzDJOEJZ
KWDor5pRDJE=
=knT6
-----END PGP SIGNATURE-----
More information about the Mailman-Developers
mailing list