On Wed, Aug 05, 2009 at 11:54:44AM -0400, Carlos Williams wrote: > I am wanting to implement MailMan for my company LAN. I am currently > running my email server on Postfix. I am wondering if someone can > answer these questions for me. If I install MailMan / Apache on my > mail server, will the MailMan list be visible by anyone on the web who > can access my mail server via Apache?
"visible" in which regard? via Apache, it's possible to restrict access to subnets, for example. Firewall rules can also be invoked. (in short: depends how you set it up.) Presumably Postfix supports some sort of ACLs, which may "help" in keeping your list(s) to people/addresses you've explicitly whitelisted, or something similar. Or just rely on Mailman's handling of non-members. > I am worried about spammers > using MailMan to harvest valid email addresses. Even though it appears > from the reading I have done that non-members can't send to the list > w/o moderator approval, I still don't want the vulnerability of > exposing my subscribed members email addresses. restrict seeing subscribers to admins only? use "strong" passwords, perhaps. Disable access to specific mailman scripts from non-trusted addresses? don't have archives available to the public internet? > Can someone please tell me if this is possible Should be... > and or how I should consider configuring MailMan for my LAN? ... although most of what you're after, as I understand it, is not within Mailman itself, but down to webserver/firewall/MTA configuration (well, that's how I might go about sorting out a 'private' installation) -- ``Have you always been revolutionary socialists?'' ``No, we vote Conservative.'' (Simon Hoggart, interviewing a middle-class couple at a reading of Tony Benn's speeches) ------------------------------------------------------ Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://wiki.list.org/x/AgA3 Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/archive%40jab.org Security Policy: http://wiki.list.org/x/QIA9