On Wed, Aug 05, 2009 at 11:54:44AM -0400, Carlos Williams wrote:
I am wanting to implement MailMan for my company LAN. I am currently running my email server on Postfix. I am wondering if someone can answer these questions for me. If I install MailMan / Apache on my mail server, will the MailMan list be visible by anyone on the web who can access my mail server via Apache?
"visible" in which regard? via Apache, it's possible to restrict access to subnets, for example. Firewall rules can also be invoked.
(in short: depends how you set it up.)
Presumably Postfix supports some sort of ACLs, which may "help" in keeping your list(s) to people/addresses you've explicitly whitelisted, or something similar. Or just rely on Mailman's handling of non-members.
I am worried about spammers using MailMan to harvest valid email addresses. Even though it appears from the reading I have done that non-members can't send to the list w/o moderator approval, I still don't want the vulnerability of exposing my subscribed members email addresses.
restrict seeing subscribers to admins only? use "strong" passwords, perhaps. Disable access to specific mailman scripts from non-trusted addresses? don't have archives available to the public internet?
Can someone please tell me if this is possible
Should be...
and or how I should consider configuring MailMan for my LAN?
... although most of what you're after, as I understand it, is not within Mailman itself, but down to webserver/firewall/MTA configuration (well, that's how I might go about sorting out a 'private' installation)
--
Have you always been revolutionary socialists?'' No, we vote Conservative.'' (Simon Hoggart, interviewing a middle-class
couple at a reading of Tony Benn's speeches)