There's a setting in there. allow_from_all or something. I forget exactly. It's a regex and has something like '.*@common-lisp.net' - just pull that out and you're done I think. Though investigate /custom/bin/add-list.sh because I think it's the one that sets this for every list. Thanks, Erik. On Jan 21, 2008 9:46 PM, Gary King <gwking@metabang.com> wrote:

Hi David,

I'm skimming the mailman manual now; can you point out exactly which setting you had to change?

thanks,

On Jan 21, 2008, at 7:55 PM, Drew Crampsie wrote:

...

On 20/01/2008, David Lichteblau <david@lichteblau.com> wrote:

...

Hi,

common-lisp.net mailing lists are still being haunted by the default mailman setting that allows any mail through if its pretends to come from a @common-lisp.net address.

Ouch, this stinks. I don't know much about mailman, so if any of you do can you point me in the right direction?

This is a stupid default, and i'd like to scrap it completely if nobody objects.

Cheers,

drewc

...

For the latest examples, see

http://common-lisp.net/pipermail/closure-devel/2008-January/thread.html

It's possible to disable this setting for each list separately, and I've already had to go through all of my lists to do so.

Unfortunately, lots of other lists still seem to have this setting. Is there perhaps something you can do globally to combat this problem?

- Change the setting for existing lists? - At least change the default for new lists. - Alternatively, I guess you'd have to require SMTP auth for senders, so that mails pretending to come from @common-lisp.net addresses are actually verified.

Thanks, David

----- Forwarded message from closure-devel-request@common-lisp.net -----

From: closure-devel-request@common-lisp.net To: david@lichteblau.com Date: Sun, 20 Jan 2008 03:04:07 -0500 Subject: confirm 146cf3a8a0994b0542333c79036cbbd037be0690

Your membership in the mailing list closure-devel has been disabled due to excessive bounces The last bounce received from you was dated 20-Jan-2008. You will not get any more messages from this list until you re-enable your membership. You will receive 3 more reminders like this before your membership in the list is deleted.

To re-enable your membership, you can simply respond to this message (leaving the Subject: line intact), or visit the confirmation page at

http://common-lisp.net/cgi-bin/mailman/confirm/closure-devel/146cf3a8a0994b0...

You can also visit your membership page at

http://common-lisp.net/cgi-bin/mailman/options/closure-devel/david%40lichteb...

On your membership page, you can change various delivery options such as your email address and whether you get digests or not. As a reminder, your membership password is

kuvuweif

If you have any questions or problems, you can contact the list owner at

closure-devel-owner@common-lisp.net

----- End forwarded message -----

-- Gary Warren King, metabang.com Cell: (413) 559 8738 Fax: (206) 338-4052 gwkkwg on Skype * garethsan on AIM

_______________________________________________ admin mailing list admin@common-lisp.net http://common-lisp.net/cgi-bin/mailman/listinfo/admin

Thanks David and Erik. On Jan 22, 2008, at 4:47 AM, David Lichteblau wrote:

Quoting Drew Crampsie (drew.crampsie@gmail.com):

...

Ouch, this stinks. I don't know much about mailman, so if any of you do can you point me in the right direction?

I believe it is this setting:

accept_these_nonmembers ^.+@common-lisp\.(?:net|org).*$

-- Gary Warren King, metabang.com Cell: (413) 559 8738 Fax: (206) 338-4052 gwkkwg on Skype * garethsan on AIM