torben fjerdingstad | 10 Dec 2010 12:03
Picon

How to do unsecure moderator posting?

Porting mailing lists from ezmlm-idx 0.53 to 7.0.2, I am
stuck on this:

Some lists are set up with posting moderation. At the
same time, the moderator (cron bot) needs to post without
having to confirm. How is that done with 7.0.2?

I am aware of the security issues.

With 0.53 it was accomplished by adding a line 2 in editor, after
ezmlm-reject, like this:
|/usr/bin/ezmlm-issubn -n '/var/qmail/alias/lists/LIST/mod' || { /usr/bin/ezmlm-send
'/var/qmail/alias/lists/LIST' ; exit 99 ; } 

The config flags were -ABCDeFGHIJKlmNOpQrSTUVWXYZ

torben

David I. Bell | 10 Dec 2010 17:47
Picon

Re: How to do unsecure moderator posting?

Hello Torben,

> With 0.53 it was accomplished by adding a line 2 in editor, after
> ezmlm-reject, like this:
> |/usr/bin/ezmlm-issubn -n '/var/qmail/alias/lists/LIST/mod' || { /usr/bin/ezmlm-send
'/var/qmail/alias/lists/LIST' ; exit 99 ; }

I have not moved to 7.0.2.  I still use 6.0.1 and I do it this way:

|/usr//bin/ezmlm-gate '/var/qmail/alias/lists/LIST'  mod

- David Bell

Andy Bradford | 11 Dec 2010 19:02

Re: How to do unsecure moderator posting?

Thus said torben fjerdingstad on Fri, 10 Dec 2010 12:03:47 +0100:

> Some lists are  set up with posting moderation. At  the same time, the
> moderator (cron bot)  needs to post without having to  confirm. How is
> that done with 7.0.2?

I have no idea how it is down with 7.0.2, however, you can easily create
a  secret alias  that bypasses  subscriber checking  that your  cron job
sends to  (instead of  the mailing  list address). As  long as  ezmlm is
configured to replace the To header  with the mailing list address, this
should work.

Andy


Gmane