Tom Collins wrote:
On Feb 9, 2005, at 12:34 PM, TigerPaw wrote:
I'm running a mail server setup similar to the one described at http://shupp.org/toaster/ Vpopmail / qmailadmin / ezmlm / qmail /etc .. I been running some mailing lists on my server for sometime now and I haven't had anyone needing the Message Archive support via ezmlm-cgi until recently... I got ezmlm-cgi to work on my server and all but the archive retrieval is open to anyone., no matter if I change the setting under qmailadmin / mailing list settings for that list to 'limited to subcribers" or "limited to moderators". Anyone have any clues why this might be happening and a possible fix..as i would truelly like to get the Archive retrieval via web access to work properly..
The limits only apply to retrieving archived messages via email.
I have not personally set up ezmlm-cgi, so I don't know if it includes any options for limiting access. Since it can't authenticate someone as a subscriber or moderator to the list, access limits are up to you.
The easy way would be to setup basic authentication under Apache
<Location /cgi-bin/ezmlm-cgi> AuthType Basic AuthName MailList AuthUserFile /web/hosts/www.somedomain.com/etc/users Require valid-user </Location>
The users file is created with htpasswd.
I know this works in the web server configuration files, and may work in .htaccess files.
