Re: [Mailman-Users] Spoofed Addresses

2004-10-31 Thread David Relson
On Sun, 31 Oct 2004 05:15:34 +0200 Brad Knowles wrote: ...[snip]... > I'm also involved in the NTP Project, and we provide a TWiki for > > use in creating community-supported documentation in addition to the > official FAQ. For the python.org project, they also provide a wiki > (o

Re: [Mailman-Users] Spoofed Addresses

2004-10-31 Thread David Relson
On Sat, 30 Oct 2004 22:16:19 -0700 Mark Sapiro wrote: > David Relson wrote: > > > >I've learned that /var/lib/mailman/data/aliases (generated by > >Mailman) has entries like: > > > >bogofilter:"|/usr/lib/mailman/mail/mailman post bogofilter" > >bogofilter-admin: "|/usr/lib/mailman/mail/ma

Re: [Mailman-Users] Spoofed Addresses

2004-10-30 Thread Mark Sapiro
David Relson wrote: > >I've learned that /var/lib/mailman/data/aliases (generated by Mailman) >has entries like: > >bogofilter:"|/usr/lib/mailman/mail/mailman post bogofilter" >bogofilter-admin: "|/usr/lib/mailman/mail/mailman admin bogofilter" > One thing you may or may not be aware of:

Re: [Mailman-Users] Spoofed Addresses

2004-10-30 Thread Brad Knowles
At 9:38 PM -0400 2004-10-30, David Relson wrote: I appreciate the pointers. One of the problems(?) with mailman is that there is _so_ much information, it's close to overwhelming. One general rule should be to start with the FAQ and the archives, and make use of whatever search tools may be av

Re: [Mailman-Users] Spoofed Addresses

2004-10-30 Thread David Relson
On Sun, 31 Oct 2004 02:15:10 +0200 Brad Knowles wrote: > At 3:06 PM -0400 2004-10-30, David Relson wrote: > > > Actually it's more of a mailman setup question, as in "why don't > > mailing list messages go through procmail (which handle bogofilter > > and other such stuff)?" and "how do I set

Re: [Mailman-Users] Spoofed Addresses

2004-10-30 Thread Brad Knowles
At 3:06 PM -0400 2004-10-30, David Relson wrote: Actually it's more of a mailman setup question, as in "why don't mailing list messages go through procmail (which handle bogofilter and other such stuff)?" and "how do I set up mailman in a postfix environment so that filters, for example virus c

Re: [Mailman-Users] Spoofed Addresses

2004-10-30 Thread David Relson
On Sun, 31 Oct 2004 06:51:10 +0900 Tokio Kikuchi wrote: > Hi, > > I don't use bogofilter but use spamassassin to filter incoming > messages. > > > I've learned that /var/lib/mailman/data/aliases (generated by > > Mailman) has entries like: > > > > bogofilter:"|/usr/lib/mailman/mail/mail

Re: [Mailman-Users] Spoofed Addresses

2004-10-30 Thread Tokio Kikuchi
Hi, I don't use bogofilter but use spamassassin to filter incoming messages. I've learned that /var/lib/mailman/data/aliases (generated by Mailman) has entries like: bogofilter:"|/usr/lib/mailman/mail/mailman post bogofilter" bogofilter-admin: "|/usr/lib/mailman/mail/mailman admin bogofilt

Re: [Mailman-Users] Spoofed Addresses

2004-10-30 Thread David Relson
On Sat, 30 Oct 2004 14:56:40 +0200 Brad Knowles wrote: > At 10:11 PM -0400 2004-10-29, David Relson wrote: > > > My mail handling environment is composed of postfix, procmail, > > bogofilter, and mailman. All incoming messages are _supposed_ to > > be processed by bogofilter, which adds a spa

Re: [Mailman-Users] Spoofed Addresses

2004-10-30 Thread Brad Knowles
At 10:11 PM -0400 2004-10-29, David Relson wrote: My mail handling environment is composed of postfix, procmail, bogofilter, and mailman. All incoming messages are _supposed_ to be processed by bogofilter, which adds a spam/ham tag to the message header. Messages to "mydomain.com" have the ta

Re: [Mailman-Users] Spoofed Addresses

2004-10-29 Thread Mark Sapiro
David Relson wrote: > >My mail handling environment is composed of postfix, procmail, >bogofilter, and mailman. All incoming messages are _supposed_ to be >processed by bogofilter, which adds a spam/ham tag to the message >header. Messages to "mydomain.com" have the tags, but messages to >"mylist

Re: [Mailman-Users] Spoofed Addresses

2004-10-29 Thread David Relson
On Sat, 30 Oct 2004 03:13:21 +0200 Brad Knowles wrote: > At 8:24 PM -0400 2004-10-29, David Relson wrote: > > > Part of asking the question was to learn whether mailman has any > > ability to verify addresses. I wasn't aware of anything, which > > doesn't mean it can't be done. Along a simil

Re: [Mailman-Users] Spoofed Addresses

2004-10-29 Thread Brad Knowles
At 8:24 PM -0400 2004-10-29, David Relson wrote: Part of asking the question was to learn whether mailman has any ability to verify addresses. I wasn't aware of anything, which doesn't mean it can't be done. Along a similar vein, I'm wondering if there are ways for postfix and procmail to val

Re: [Mailman-Users] Spoofed Addresses

2004-10-29 Thread Kenneth Porter
--On Friday, October 29, 2004 8:24 PM -0400 David Relson <[EMAIL PROTECTED]> wrote: Part of asking the question was to learn whether mailman has any ability to verify addresses I expect the biggest problem to be mobile users who post from multiple IP addresses. I'm somewhat bleeding edge ;) for

Re: [Mailman-Users] Spoofed Addresses

2004-10-29 Thread David Relson
On Fri, 29 Oct 2004 16:59:09 -0700 Kenneth Porter wrote: > --On Friday, October 29, 2004 5:33 PM -0400 David Relson > <[EMAIL PROTECTED]> wrote: > > > The other one spoofed a valid subscriber's address, so mailman > > accepted it and sent copies to all subscribers. > > How do you know it's spoo

Re: [Mailman-Users] Spoofed Addresses

2004-10-29 Thread Kenneth Porter
--On Friday, October 29, 2004 5:33 PM -0400 David Relson <[EMAIL PROTECTED]> wrote: The other one spoofed a valid subscriber's address, so mailman accepted it and sent copies to all subscribers. How do you know it's spoofed? How would mailman know?

[Mailman-Users] Spoofed Addresses

2004-10-29 Thread David Relson
G'day, I'm running bogofilter's mailing lists (user, developer, announce) using postfix, procmail, and mailman-2.1.5. This morning two spoofed messages arrived. One of them was from the user list to the developer list. As the spoofed address wasn't a valid subscriber, the message resulted in a