[Mailman-Users] Re: spam
william+mm at hq.newdream.net
Thu Oct 17 05:04:04 CEST 2002
J C Lawrence wrote:
> On Tue, 15 Oct 2002 15:42:33 -0700 (PDT) alex wetmore <alex at phred.org> wrote:
> > It is very easy to forge the From: line in email. If a spammer forges
> > the From: line to have a user which is on your list then it will go
> > through. This isn't really a problem that Mailman itself can solve.
> v2.1 authenticates on envelope as well.
Does it do this by default? This sounds like a bad idea as forging the
envelope-sender is pretty trivial (and common), and there's no reason
that the envelope-sender needs to match the 'From:' header.
input: william < @ hq . newdream . net . >
More information about the Mailman-Users