I just read this on another list and was wondering if it is true:
I spoke too soon about smartlist - it lets anyone post to it regardless of if they are a subscriber or not and regardless of what the 'access' is set. There is another hole that a person can send messages to a smartlist list by adding -dist to the end of a listname (Ie: testlist-dist@lists.mzaus.com) so I decided not to use SmartList.
... is that the case? I need a lightweight list program but would like to have only people who are subscribed to the list be able to post.
TIA,
-- Mark
In the context of CGI programming Perl is like duct tape whereas C is like 2 part quick hardening epoxy. --smithj@ulv.edu on the oclug list
Mark asked,
| I just read this on another list and was wondering if it is true:
| >I spoke too soon about smartlist - it lets anyone post to it regardless of | >if they are a subscriber or not and regardless of what the 'access' is set.
Not if foreign_submit is set correctly to forbid it. The article from which Mark quoted went on to say,
| >There is another hole that a person can send messages to a smartlist list by | >adding -dist to the end of a listname (Ie: testlist-dist@lists.mzaus.com) so | >I decided not to use SmartList.
and Mark asked,
| ... is that the case?
Not since the advent of choplist several versions ago. A -dist alias is no longer used.
Both those comments were false. I wonder whether their writer is selling list management software and has no scruples about lying about the compe- tition.
smartlist@lists.rwth-aachen.de