[Mailman-Users] Is there a security hole in Mailman?

Jeff Donsbach jeff.donsbach at gmail.com
Sun Feb 12 18:10:04 CET 2006


On 2/12/06, Jon D. Slater <Jon.Slater at lpbroadband.net> wrote:
> Hi All,
>
> Is there a security hole in Mailman?
>
>
> How are the evil spammers harvesting my list names when they aren't on the
> 'listinfo' page?
>

>From the address book(s) of one or some of you subscribers infected
with a virus/worm?

>
> And, more importantly, is there a way to prevent it?  (BTW, I'm also using
> SPAM ASSASSIN and a lot of these SPAM messages still get through.)
>

Is your list set for "subscribers only" posting? Set your list to hold
posts from non-members for moderation.

Keep feeding the spam messages to "sa-learn".

Jeff D



More information about the Mailman-Users mailing list