Crossfire Mailing List Archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [CF:1340] Problems with mailing list
- To:
- Subject: Re: [CF:1340] Problems with mailing list
- From: Bob Tanner
- Date: Fri, 23 Jun 2000 11:44:21 -0500
- In-Reply-To: <>; from on Fri, Jun 23, 2000 at 11:07:46AM +0200
- Mail-Followup-To:
- References: <> <> <> <> <>
- User-Agent: Mutt/1.2i
Quoting Jan Echternach ():
> On Thu, Jun 22, 2000 at 02:02:24PM -0500, Bob Tanner wrote:
> > Reply-To can be forged, so this 'silly' software sends email to whatever
> > address you subscribed to the mailing list.
>
> Well, the last time I had to deal with such mailing lists
> (unsubscribing after my From: had changed from to
> ) I just forged the From: header. This isn't even
> security by obscurity, because it's not obscure - it's obvious that you
> only need to supply a properly forged From: header to bypass such silly
> checks.
>
> There are already solutions used that really solve the problem:
> Sending a confirmation email or requiring a password.
>
This ezmlm uses the From, not the From:, and if you send a message to
rte-crossfire-help you will see how to fix your problem.
--
Bob Tanner <> | Phone : (612)943-8700
http://www.mn-linux.org | Fax : (612)943-8500
Key fingerprint = 6C E9 51 4F D5 3E 4C 66 62 A9 10 E5 35 85 39 D9