[ mailman-Bugs-914249 ] Virus posts to moderated lists

[SourceForge.net]

Bugs item #914249, was opened at 2004-03-11 10:28
Message generated for change (Comment added) made by karres
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=100103&aid=914249&group_id=103

Category: security/privacy
Group: 2.1 (stable)
Status: Open
Resolution: None
Priority: 5
Submitted By: Ted Peterson (knighted)
Assigned to: Nobody/Anonymous (nobody)
Summary: Virus posts to moderated lists

Initial Comment:
The W32.Beagle virus has been able to post multiple 
times to a moderated Mailman 2.1.3 mailing list, so 
emergency moderation of the list has been enabled.
At least two other people, as reported on 
mailman-users, have had this trouble since last 
Friday, March 5th, when W32.Beagle was spreading.

The virus was posting using a moderator address, so 
that moderator was removed.  The moderator bit is 
and was turned on for all users, including the now 
*sole* moderator.  I can send the mbox archive 
headers to anybody who is interested.  

Mail:  ted <at> ire.org
--Ted



----------------------------------------------------------------------

Comment By: dk (karres)
Date: 2004-03-11 11:20

Message:
Logged In: YES 
user_id=995621

More generally we have only moderated, read-only lists for
our users.  All incoming, non-member messages should be
discarded.  We are seeing a few virus laden messages from
obvious non-members getting past the non-member filters.

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=100103&aid=914249&group_id=103