[wplug-internet] [wplug] Check out my photos on Facebook

[Ted Rodgers]

On Fri, Jun 29, 2012 at 12:07 AM, Vance Kochenderfer <vkochend at nyx.net>wrote:

> On Thu, Jun 28, 2012 at 06:48:36AM -0400, Mark Dalrymple wrote:
> > My vote is a tranquilizer gun, and a catch-and-release into another
> > community.
>
>
Eh, the whole line of sight thing limits their usefulness.


> Very tempting...
>
> Pat, thanks for setting up the filter rules.
>
> After thinking it over, I can't come up with any use case where
> the Reply-To: header would be a legitimate indicator of the
> sender's identity.  After searching around on the mailman-users
> mailing list, I couldn't find any justification for including it
> in the default value for SENDER_HEADERS.
>
> My vote is to modify mm_cfg.py to add the following:
>  SENDER_HEADERS = ('from', None, 'sender')
> which would cause Mailman to no longer consider the value of any
> Reply-To: header when determining if a message is "from" a
> subscriber.  Only the From: and Sender: headers, along with the
> SMTP envelope sender, would be considered.
>
> While this would not foil malicious actors (they could just forge
> the From: header anyway), it should stop the social networking
> invitations.
>
> Please speak up if there's a downside to this I'm not seeing!
>
>
To me it sounds like a good idea.  And a better suggestion than I could
have given.

Ted


> Vance Kochenderfer        |  "Get me out of these ropes and into a
> vkochend at nyx.net          |   good belt of Scotch"    -Nick Danger
> _______________________________________________
> wplug-internet mailing list
> wplug-internet at wplug.org
> http://www.wplug.org/mailman/listinfo/wplug-internet
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.wplug.org/pipermail/wplug-internet/attachments/20120629/2247fbfe/attachment.html