On 8/14/20 12:40 PM, Allan Hansen wrote:
I set the Default action to take when a member posts to the list to ‘Discard.’ and set the Moderation option for the few allowed posters to ‘Accept immediately (bypass other rules).
Which works until someone who wants to post to or spam the list realizes that all they need to do is spoof the From: address to be one of the addresses that sent posts that they received.
A more secore, but more tedious solution is to set the authorized poster's moderation action to hold and then approve valid posts.
Or leave everyone's moderation action at list default and post with an Approved: <password> (pseodo)header. See <https://docs.mailman3.org/projects/mailman/en/latest/src/mailman/rules/docs/approved.html>.
-- Mark Sapiro <mark@msapiro.net> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan