[Mailman-Developers] Fwd: suggested improvement for Mailman's bounce processing

[Barry Warsaw]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Ian, I'm not sure what kind of feedback you're looking for, but this  
one comment stood out to me:

On Aug 11, 2006, at 7:14 AM, Ian Eiloart wrote:

>> 2) Hold the message and send the envelope sender instructions to
>> auto-moderate.  Very friendly to legitimate users but bad for the
>> recipients of joe-jab attacks.  However, using SPF makes this a
>> non-issue.
>
> 3) Hold the message silently, sending no instructions for
>> auto-moderation.  This is not so friendly for legitimately  
>> confused users
>> whose messages go into a vacuum, but the ideal circumstance for
>> announce-only lists which *always* moderate all messages.  Of course,
>> this is just fine for spam control.
>
> Yes, that sucks, but that's where we're left with Mailman. In fact,  
> it's
> one of the main reasons I'm looking for a MLM that does (1). I  
> can't think
> of any case in which (3) is better than (1).

Although I have not implemented it yet, Mailman 2.2 will definitely  
get auto-moderation.  IOW, should a non-member send a message to a  
mailing list, and if that mailing list is so configured, Mailman will  
hold the message and send a message to the From address asking for  
verification of the post.  I'm assuming this is what you mean by  
"auto-moderation".

I'm not worried about joe-jobbing because Mailman could easily send  
just one auto-moderation message per unit of time, or number of posts  
to limit any backspamming.  There are issues related to how long you  
want to hold such auto-moderated posts and such, but I think those  
are all manageable.  There's also the question of how long you want a  
verified non-member to be able to post to a list, but again, this is  
doable (hopefully without introducing a bajillion new admin knobs).

- -Barry

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (Darwin)

iQCVAwUBRNzqInEjvBPtnXfVAQIviwP/TtiHJRvZDOgpGjuK5NS6bmugPZajPLfo
6gYWLWB+e6jdCRrlIOfkYN27lR1NovGzhbZwBP8q3l84aDeNCvyMscCOvaZUjv8m
sFbYe2zDYzYG4yjeuY1XFlfXl2PVlgAwh1LQZ3PyJSq08JltTxYG4X+wTzDJOEJZ
KWDor5pRDJE=
=knT6
-----END PGP SIGNATURE-----