[Mailman-Users] Trying to tighten up my security...

[Jon D. Slater]

Okay... Next hitch...

I installed the patch, and tested it (by trying to send an e-mail to the
group from an e-mail that I knew wasn't in the group).  It was rejected (as
expected).

I just had an e-mail get through from a non-member!

The e-mail is from: "Bernardo Spicer" <BernardoSpicer at 1000000000.com>

Who is definitely *not* on any of my lists.

The group sender filter is set to 'Reject' postings from non-members for
which no explicit action is defined.

But, I was still notified.  Here's the full header of the message that
requested approval:

Received: from mxs.mail.ru ([203.146.112.225])
	by steeplechase-hoa.org (8.13.7/8.13.4) with ESMTP id k6K3TmZt017041
	for <designreview at steeplechase-hoa.org>; Wed, 19 Jul 2006 21:30:03
-0600
Message-Id: <200607200330.k6K3TmZt017041 at steeplechase-hoa.org>
From: "Bernardo Spicer" <BernardoSpicer at 1000000000.com>
To: <designreview at steeplechase-hoa.org>
Subject: RE: wave surface
Date: Thu, 20 Jul 2006 03:40:10 -0420
MIME-Version: 1.0
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1478
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1478
Content-Type: multipart/related; type="multipart/alternative";
boundary="----=_NextPart_000_006A_01C6ABE8.DFCD64A0"


Why did I get a request to approve this message?

Thanks!!!

Jon


> -----Original Message-----
> From: Mark Sapiro [mailto:msapiro at value.net]
> Sent: Monday, July 17, 2006 4:57 PM
> To: Jon D. Slater
> Subject: RE: [Mailman-Users] Trying to tighten up my security...
> 
> >Since I'm running 2.1.8 (instead of 2.1.6 as the patch requires), I made
> the
> >changes by hand, which broke MM.  So now I've put it all back the way it
> was
> >and, at least, MM is back...  (Without the patch.)
> 
> 
> The 2.1.6 listinclusion patch applies cleanly to 2.1.8 without change.
> 
> cd path/to/2.1.8mailman/Mailman
> patch -p2 < path_to_listinclusion.patch
> 
> or
> 
> cd path/to/2.1.8mailman
> patch -p1 < path_to_listinclusion.patch
> 
> 
> After applying the patch you need to do 'mailmanctl restart' so
> IncomingRunner will pick up the change to Mailman/Handlers/Moderate.py.
> 
> What broke?
> 
> When you patched by hand, did you preserve indentation exactly?
> 
> --
> Mark Sapiro <msapiro at value.net>       The highway is for gamblers,
> San Francisco Bay Area, California    better use your sense - B. Dylan
> 
> 
> 
> --
> No virus found in this incoming message.
> Checked by AVG Free Edition.
> Version: 7.1.394 / Virus Database: 268.10.1/389 - Release Date: 7/14/2006