I just read this on another list and was wondering if it is true:
I spoke too soon about smartlist - it lets anyone post to it regardless of if they are a subscriber or not and regardless of what the 'access' is set. There is another hole that a person can send messages to a smartlist list by adding -dist to the end of a listname (Ie: testlist-dist@lists.mzaus.com) so I decided not to use SmartList.
... is that the case? I need a lightweight list program but would like to have only people who are subscribed to the list be able to post. TIA, -- Mark In the context of CGI programming Perl is like duct tape whereas C is like 2 part quick hardening epoxy. --smithj@ulv.edu on the oclug list
Mark asked, | I just read this on another list and was wondering if it is true: | >I spoke too soon about smartlist - it lets anyone post to it regardless of | >if they are a subscriber or not and regardless of what the 'access' is set. Not if foreign_submit is set correctly to forbid it. The article from which Mark quoted went on to say, | >There is another hole that a person can send messages to a smartlist list by | >adding -dist to the end of a listname (Ie: testlist-dist@lists.mzaus.com) so | >I decided not to use SmartList. and Mark asked, | ... is that the case? Not since the advent of choplist several versions ago. A -dist alias is no longer used. Both those comments were false. I wonder whether their writer is selling list management software and has no scruples about lying about the compe- tition.
participants (3)
-
Charlie Summers
-
David W. Tamkin
-
Mark Symonds