Re: [Exim] Malformed address on a list

Page principale
Supprimer ce message
Répondre à ce message
Auteur: Jeffrey Goldberg
Date:  
À: Marilyn Davis
CC: exim-users, under-zo
Sujet: Re: [Exim] Malformed address on a list
On Jun 16, 2000 Marilyn Davis <marilyn@???> wrote:

> Thanks Jeffrey and Phillip for the switch to set. So, my alias
> director looks like:
>
> [...]
>
> Right?


Right. I do the same for my majordomo lists, as it is possible to
get syntax errors in there. (Not because majordomo is at fault, but
because a list admin with the list password can manually subscribe a
malformed address. I've done it myself.)

> And I HUP the daemon. Or does it matter if I HUP the
> daemon since the daemon shouldn't ever concern itself with sending
> to a list?


While you may not need to HUP the daemon, it is probably a good idea to
have the daemon and the and locally called configurations in sync.

Oh, and if you are concerned about attacks on majordomo lists (as you very
well may be), let me make a few more recomendations:

(1) Use the private aliase file scheme to protect the out-going aliases.
    That is far better than security through obscurity.  The mechamism is
    described in a FAQ linked to from the exim FAQ regarding majordomo.
    This is a wonderful thing you can do with exim.


(2) Log all mail to majordomo.  Majordomo own logging is very meagre,
    Just add a file delivery into your alias file for majordomo and for
    all of the LIST-request addresses.


> And thank you, Peter for the newconfirm patch. I'll look into it.


I just took a look at that. It seems to be a vast improvement on the
standard majordomo system. I haven't (and probably won't unless I get
another job involving majordomo) tested to see how it works against the
most recent version of majordomo.

(3) Definitely follow the majordomo-users list.  Various security issues
    come up often.


Best of luck (even though if I were a Mexican, I would be voting against
those you support. So double check any security advice I give you).[1]

Cheers,

-j

Note:
 [1] I hope that any followup to that last bit would take place off list.
     I've already contributed to one vaguely off-topic thread.  I
     certainly don't want to spark a very off-topic one.


--
Jeffrey Goldberg
Note: I am moving and changing many addresses, please see
http://www.goldmark.org/jeff/contact.html
Relativism is the triumph of convention over truth, authority over justice