Re: [Mailman-Users] what is a virtual domain?

2012-11-18 Thread Thufir
On Fri, 16 Nov 2012 11:56:50 -0600, Lindsay Haisley wrote: On Thu, 2012-11-15 at 19:38 -0800, Thufir wrote: How does a virtual domain differ from a domain? To add to what Mark said, technically a "virtual domain" is a domain name that resolves in the domain name system to the same IP address

Re: [Mailman-Users] Automated Subscription Bots Inundating List Owners With Subscription Requests

2012-11-18 Thread Stephen J. Turnbull
Ben Cooksley writes: > If Mailman were to implement basic CSRF protection for all POST requests > that would also slow the attackers down I suspect (as they would have to > make a GET request first and parse it). It might slow a human down, but as soon as it becomes a feature of Mailman, the a

Re: [Mailman-Users] Automated Subscription Bots Inundating ListOwners With Subscription Requests

2012-11-18 Thread Mark Sapiro
Ben Cooksley wrote: > >If Mailman were to implement basic CSRF protection for all POST requests >that would also slow the attackers down I suspect (as they would have to >make a GET request first and parse it). I have implemented a simple version of what I think you requested in your post at

Re: [Mailman-Users] Automated Subscription Bots Inundating List Owners With Subscription Requests

2012-11-18 Thread Ben Cooksley
[Post by list member from an unsubscribed address] On Nov 18, 2012 4:07 AM, "Petersen, Kirsten J - NET" < kirsten.peter...@oregonstate.edu> wrote: > > Gary, et al: > > The Mailman lists at Oregon State University have been receiving excessive request for subscriptions since mid-October as well. O