-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Ian, I'm not sure what kind of feedback you're looking for, but this
one comment stood out to me:
On Aug 11, 2006, at 7:14 AM, Ian Eiloart wrote:
- Hold the message and send the envelope sender instructions to auto-moderate. Very friendly to legitimate users but bad for the recipients of joe-jab attacks. However, using SPF makes this a non-issue.
- Hold the message silently, sending no instructions for
auto-moderation. This is not so friendly for legitimately
confused users whose messages go into a vacuum, but the ideal circumstance for announce-only lists which *always* moderate all messages. Of course, this is just fine for spam control.Yes, that sucks, but that's where we're left with Mailman. In fact,
it's one of the main reasons I'm looking for a MLM that does (1). I
can't think of any case in which (3) is better than (1).
Although I have not implemented it yet, Mailman 2.2 will definitely
get auto-moderation. IOW, should a non-member send a message to a
mailing list, and if that mailing list is so configured, Mailman will
hold the message and send a message to the From address asking for
verification of the post. I'm assuming this is what you mean by
"auto-moderation".
I'm not worried about joe-jobbing because Mailman could easily send
just one auto-moderation message per unit of time, or number of posts
to limit any backspamming. There are issues related to how long you
want to hold such auto-moderated posts and such, but I think those
are all manageable. There's also the question of how long you want a
verified non-member to be able to post to a list, but again, this is
doable (hopefully without introducing a bajillion new admin knobs).
- -Barry
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (Darwin)
iQCVAwUBRNzqInEjvBPtnXfVAQIviwP/TtiHJRvZDOgpGjuK5NS6bmugPZajPLfo 6gYWLWB+e6jdCRrlIOfkYN27lR1NovGzhbZwBP8q3l84aDeNCvyMscCOvaZUjv8m sFbYe2zDYzYG4yjeuY1XFlfXl2PVlgAwh1LQZ3PyJSq08JltTxYG4X+wTzDJOEJZ KWDor5pRDJE= =knT6 -----END PGP SIGNATURE-----