[Mailman-Users] approved from non-subscriber

[Danil Smirnov]

Thanks Mark!

And how about if this non-subscriber is included to the
hold_these_nonmembers list in Privacy -- Sender filters?

Is Approved: powerful enough to overpower this option?

TIA,
Danil

2015-02-18 19:56 GMT+02:00 Mark Sapiro <mark at msapiro.net>:
> On 02/18/2015 04:34 AM, Danil Smirnov wrote:
>>
>> I was surprised by the fact that message from unsubscribed address was
>> successfully delivered to the list because of "Approved:" pseudo
>> header.
>>
>> Is this intended behavior? Are there a way to configure list to accept
>> messages with Approved: header only if sender is moderated subscriber?
>
>
> Yes it is intentional. No there is no way (other than code modification)
> to configure a list to accept messages with Approved: header only if
> sender is moderated subscriber.
>
> Note however that the Approved: (pseudo)header must contain one of up to
> three possible passwords to be effective. These are the list admin
> password, the list moderator password and beginning in Mailman 2.1.15,
> the list poster password.
>
> If the poster knows one of the first two passwords, she can always
> approve her post via the web UI after the fact. If she knows the third
> password and shouldn't, change it.
>
> --
> Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
> San Francisco Bay Area, California    better use your sense - B. Dylan
> ------------------------------------------------------
> Mailman-Users mailing list Mailman-Users at python.org
> https://mail.python.org/mailman/listinfo/mailman-users
> Mailman FAQ: http://wiki.list.org/x/AgA3
> Security Policy: http://wiki.list.org/x/QIA9
> Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
> Unsubscribe: https://mail.python.org/mailman/options/mailman-users/danil%40smirnov.la