Can we make lists invite only?
Hi there.
I've been using Mailman 2.1 for ages and I love it but recently I have a problem with thousands of messages per day from spammers sending subscription requests.
On the Privacy options section I set 'advertised' to 'No' and 'subscribe_policy' to 'Require approval' but that doesn't work to stop the subscription emails.
Is there a way to make a list 'invite only'? I tried to find such an option but was unable to do so...
Regards, John Elliot V
On April 18, 2021 6:43:53 AM PDT, John Elliot V | ProgClub jj5@progclub.org wrote:
On the Privacy options section I set 'advertised' to 'No' and 'subscribe_policy' to 'Require approval' but that doesn't work to stop the subscription emails.
What Mailman version is this?
Recent and not so recent versions have multiple ways to harden the subscribe form but they all require server access to configure.
Is there a way to make a list 'invite only'? I tried to find such an option but was unable to do so...
You can always edit the listings page via the web admin UI and remove the subscribe form.
On April 19, 2021 5:49:37 AM PDT, Mark Sapiro mark@msapiro.net wrote:
You can always edit the listings page via the web admin UI and remove the subscribe form.
s/listings/listinfo/
Hi Mark,
Thanks for your reply.
On 19/4/21 10:49 pm, Mark Sapiro wrote:
On April 18, 2021 6:43:53 AM PDT, John Elliot V | ProgClub jj5@progclub.org wrote:
On the Privacy options section I set 'advertised' to 'No' and 'subscribe_policy' to 'Require approval' but that doesn't work to stop the subscription emails.
What Mailman version is this?
2.1.26.
Recent and not so recent versions have multiple ways to harden the subscribe form but they all require server access to configure.
I have total access to the server, including via the web interface and command line.
Is there a way to make a list 'invite only'? I tried to find such an option but was unable to do so...
You can always edit the listings page via the web admin UI and remove the subscribe form.
Ah, right. I suspect that won't work because at this stage the spammers already have a copy of the form so removing it from the web won't necessarily work. It would be good if there was a server side block I could put in place...
On 4/19/21 7:29 PM, John Elliot V | ProgClub wrote:
You can always edit the listings page via the web admin UI and remove the subscribe form.
Ah, right. I suspect that won't work because at this stage the spammers already have a copy of the form so removing it from the web won't necessarily work. It would be good if there was a server side block I could put in place...
If you set SUBSCRIBE_FORM_SECRET in mm_cfg.py, a saved form won't work.
See the description of SUBSCRIBE_FORM_SECRET, and also CAPTCHAS and RECAPTCHA_* in Defaults.py
On 21/4/21 4:22 am, Mark Sapiro wrote:
If you set SUBSCRIBE_FORM_SECRET in mm_cfg.py, a saved form won't work.
See the description of SUBSCRIBE_FORM_SECRET, and also CAPTCHAS and RECAPTCHA_* in Defaults.py
SUBSCRIBE_FORM_SECRET seems to have done the trick!
Thanks Mark.
participants (2)
-
John Elliot V | ProgClub -
Mark Sapiro