[Mailman-Users] Envelope address vs. From: header addresses

Mark Sapiro mark at msapiro.net
Tue Jan 3 15:16:52 EST 2017

On 01/03/2017 11:03 AM, Adam Goldberg wrote:
> WS6 uses mailman.  I believe that mailman doesn't suffer from this problem (that is, mailman checks list membership based on the header From: address, not the envelope from address).
> Can someone verify with authority that this is the case?

When Mailman checks list membership, it tests the things listen in the
installation's config (mm_cfg.py) setting for SENDER_HEADERS, the
default for which is

envelope sender

in that order. If one of those contains a list member address, the first
member address found is considered the poster for list
membership/moderation purposes. Otherwise the post is from a non-member.

> (and OT for this list, Does anyone have any insight into why Kavi's ezmlm implementation is acting this way?  FYI, email sent via Amazon AWS SES is sent with an envelope address unique per email (it's explicitly different from the From: header address)).

Some things use envelope sender for verification as it is (or once was)
considered more difficult to spoof.

Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan

More information about the Mailman-Users mailing list