[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: "Anon" fake...



Now that an??? is alleged to be off the list, I'll post this; I sent
it to Hugh earlier, but it should be of use to anyone running a
security-related majordomo:

	It should be simple enough to change RetMailAddr in majordomo.pl;
	right before it returns $ReplyTo, adding

	$ReplyTo =~ s/an(\d+)@anon.penet.fi/na\[email protected]/;
	
	will switch an* addresses to na* ones...

This lets an address subscribe, they just get automatically converted
to na forms. (Alternatively, one can always drop in an abort in the
ValidAddress function (if I remember that name right) to just abort on
anything that matches penet.fi, but that would be rude, and merely
escalate the problem...)
						_Mark_

ps. Has anyone added pgp support to majordomo? I might consider it...
there are lots of issues -- but change the subject line if you want to
talk about it on the list :-)