Inadvertent Postings - Approved Header; how does it work?

All--
Sorry for the ridiculously simple question, but I'm pretty sure I don't quite understand how to prevent inadvertent postings; and we just managed to send a moderately embarrassing post.
I want to use the Approved: <password> header in the message body to help with inadvertent postings as well as block most inappropriate posts. Will the following settings work?
Mailman 2.1.9 on Red Hat Linux.
All subscribers (including myself) have the moderation flag set ON.
My address is also listed as a List-Admin (which is appropriate)
Another user's address is listed as a List-Mod (which I think is appropriate)
This moderator's address happens to be in the accept_these_nonmembers list as well.
Other settings: default_member_moderation=YES member_moderation_action=HOLD generic_nonmember_action=HOLD
Test: SUCCESS! If I send a post without any subject or body from my list-admin address, the post is held for moderation.
But, should I be clearing out the accept_these_nonmembers list as well? Does receiving a post from an address in this list supercede/evade the moderation flag? Once correctly set, EVERYONE MUST use the Approved:<password> header, correct?
-- Drew Tenenholz

Drew Tenenholz wrote:
I want to use the Approved: <password> header in the message body to help with inadvertent postings as well as block most inappropriate posts. Will the following settings work?
- Mailman 2.1.9 on Red Hat Linux.
- All subscribers (including myself) have the moderation flag set ON.
Good.
My address is also listed as a List-Admin (which is appropriate)
Another user's address is listed as a List-Mod (which I think is appropriate)
This moderator's address happens to be in the accept_these_nonmembers list as well.
Other settings: default_member_moderation=YES member_moderation_action=HOLD generic_nonmember_action=HOLD
Test: SUCCESS! If I send a post without any subject or body from my list-admin address, the post is held for moderation.
But, should I be clearing out the accept_these_nonmembers list as well? Does receiving a post from an address in this list supercede/evade the moderation flag? Once correctly set, EVERYONE MUST use the Approved:<password> header, correct?
If you want everyone to be required to use an Approved: header to post, accept_these_nonmembers should be empty. If a non-member is in accept_these_nonmembers with the above settings, a post from that non-member (or a spoof of that non-member's address) will be accepted.
With accept_these_nonmembers empty, any post with a valid Approved: header, whether or not from a member, will be accepted and all others will be held.
-- Mark Sapiro <mark@msapiro.net> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan
participants (2)
-
Drew Tenenholz
-
Mark Sapiro