[freelists-users] Re: Dumping of mailing list

> << Long answer: you can also send to listar@xxxxxxxxxxxxx, but in this
> case, you'd also have to provide a "list context," so it's known what
> list you want to perform the command on.  So if you wanted the user list
> for freelists-users (this list), you'd send the command "who
> freelists-users" instead of just "who."
>
>
> I have a question.  Can anyone send that request and have it sent?  Is
> there no way to determine if the person requesting the user list is
> someone that should have access to the user list.  In otherwords, could
> I send a request for someone else's user list and have it dumped back to
> me?  If so, that's not good.  Matter of fact, that is very very bad.

Well of course, that would be very bad, and that's why it's not allowed.  
Technically, someone *could* send that request, but by default, only 
admin's will get a successful reply.

John



-- 
# John Madden  weez@xxxxxxxxxxxxx ICQ: 2EB9EA
# FreeLists, Free mailing lists for all: http://www.freelists.org
# UNIX Systems Engineer, Ivy Tech State College: http://www.ivy.tec.in.us
# Linux, Apache, Perl and C: All the best things in life are free!
===========================================================
The FreeLists-Users mailing list
Archives: http://www.freelists.org/archives/freelists-users
Administrative contact: weez@xxxxxxxxxxxxx
===========================================================

Other related posts: