Can we make lists invite only?
Hi there.
I've been using Mailman 2.1 for ages and I love it but recently I have a problem with thousands of messages per day from spammers sending subscription requests.
On the Privacy options section I set 'advertised' to 'No' and 'subscribe_policy' to 'Require approval' but that doesn't work to stop the subscription emails.
Is there a way to make a list 'invite only'? I tried to find such an option but was unable to do so...
Regards, John Elliot V
|_|O|_| ProgClub |_|_|O| Because every programmer needs a good club! |O|O|O| https://www.progclub.org/
On April 18, 2021 6:43:53 AM PDT, John Elliot V | ProgClub <jj5@progclub.org> wrote:
On the Privacy options section I set 'advertised' to 'No' and 'subscribe_policy' to 'Require approval' but that doesn't work to stop the subscription emails.
What Mailman version is this?
Recent and not so recent versions have multiple ways to harden the subscribe form but they all require server access to configure.
Is there a way to make a list 'invite only'? I tried to find such an option but was unable to do so...
You can always edit the listings page via the web admin UI and remove the subscribe form.
-- Mark Sapiro <mark@msapiro.net> Sent from my Not_an_iThing with standards compliant, open source software.
On April 19, 2021 5:49:37 AM PDT, Mark Sapiro <mark@msapiro.net> wrote:
You can always edit the listings page via the web admin UI and remove the subscribe form.
s/listings/listinfo/
-- Mark Sapiro <mark@msapiro.net> Sent from my Not_an_iThing with standards compliant, open source software.
Hi Mark,
Thanks for your reply.
On 19/4/21 10:49 pm, Mark Sapiro wrote:
On April 18, 2021 6:43:53 AM PDT, John Elliot V | ProgClub <jj5@progclub.org> wrote:
On the Privacy options section I set 'advertised' to 'No' and 'subscribe_policy' to 'Require approval' but that doesn't work to stop the subscription emails.
What Mailman version is this?
2.1.26.
Recent and not so recent versions have multiple ways to harden the subscribe form but they all require server access to configure.
I have total access to the server, including via the web interface and command line.
Is there a way to make a list 'invite only'? I tried to find such an option but was unable to do so...
You can always edit the listings page via the web admin UI and remove the subscribe form.
Ah, right. I suspect that won't work because at this stage the spammers already have a copy of the form so removing it from the web won't necessarily work. It would be good if there was a server side block I could put in place...
-- |_|O|_| ProgClub |_|_|O| Because every programmer needs a good club! |O|O|O| https://www.progclub.org/
On 4/19/21 7:29 PM, John Elliot V | ProgClub wrote:
You can always edit the listings page via the web admin UI and remove the subscribe form.
Ah, right. I suspect that won't work because at this stage the spammers already have a copy of the form so removing it from the web won't necessarily work. It would be good if there was a server side block I could put in place...
If you set SUBSCRIBE_FORM_SECRET in mm_cfg.py, a saved form won't work.
See the description of SUBSCRIBE_FORM_SECRET, and also CAPTCHAS and RECAPTCHA_* in Defaults.py
-- Mark Sapiro <mark@msapiro.net> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan
On 21/4/21 4:22 am, Mark Sapiro wrote:
If you set SUBSCRIBE_FORM_SECRET in mm_cfg.py, a saved form won't work.
See the description of SUBSCRIBE_FORM_SECRET, and also CAPTCHAS and RECAPTCHA_* in Defaults.py
SUBSCRIBE_FORM_SECRET seems to have done the trick!
Thanks Mark.
-- |_|O|_| ProgClub |_|_|O| Because every programmer needs a good club! |O|O|O| https://www.progclub.org/
participants (2)
-
John Elliot V | ProgClub -
Mark Sapiro