🚀 go-pugleaf

In article <3ut52b$5te@news.cais.com>, cfs-news@cais.cais.com (Roger
Burns) wrote:
> I was dismayed to see that my moderated group alt.med.cfs <=> CFS-L
> mailing list was penetrated by the "FREE MONEY" essayist, who also posted
> a similar message last year.  My group is moderated so that only
> registered users may post directly.  A messages go through a Listserv
> which is set for Send= Editor and Editor= (CFS-L).  I suspect that this
> non-registered person (actually it was a forged, non-existant address) was
> able to bypass my moderation scheme by posting to the newsgroup and
> including their own Approved: line.  The gateway address NETNEWS@AMERICAN.EDU
> is listed as a subscriber, naturally.
> 
> Does anyone know if in fact that is all that it takes?  Someone puts in an 
> approved line, posts to the newsgroup side, and that message can then bypass 
> the moderation set-up described above? 

It takes one more thing. First the post must be posted to the newsgroup
with an Approved tag, and also the From address must be corrupt. The gateway
will mail the post to the list. Since the from address is corrupt, the
listserv will use the only other address it can find -- the return-path
pointing to the gateway. Since the gateway is subscribed to the list, the
post is accepted.

> Does anyone know of a way to block this?

If you're running the latest version of listserv (1.8b), try setting
the gateway's subscription to REVIEW. I think this will cause posts
from the gateway to be forwarded to the moderator. Add a Moderator=
with your address. I haven't tried this, but it might stop it. If you
do it, post to bit.admin to let us know if it worked.

Jim McIntosh (jim@american.edu)
The American University
Washington, DC USA 20016-8019