The mailing list for listmasters using Sympa

[Serge Aumont <address@concealed>]

Le 27/04/11 22:02, Adam Bernstein a écrit :
> Question for the team:  What exactly is covered by the spam_protection 
> mechanism in Sympa (we're running 6.4)?  I ask because we're noticing 
> an increasing frequency of spam coming in addressed to listname, 
> listname-subscribe, and listname-unsubscribe addresses, and in looking 
> over all the templates, it seems to me the protection doesn't apply in 
> many places.
>
> For instance, it doesn't appear at all (eg. there's no occurrence of 
> "hidden_at") in list_menu.tt2, where the -subscribe and -unsubscribe 
> addresses are published, which is resulting in many unwanted "Dear 
> list owner, this user tried to unsubscribe but isn't found in your 
> list..." notices.  This seems like an oversight, but then I don't even 
> find it in the subscriber_table.tt2 (in case a list owner makes the 
> subscriber list publicly visible, which would be a strange choice but 
> entirely possible).
>
> It looks to me like the only things it ever protects are the list 
> address itself (in many templates) and the Contact Owners link in 
> list_panel.tt2.  If that's correct, I would certainly request 
> expanding the spam protection to, essentially, anywhere that any email 
> address appears in all of WWSympa.  But I wonder if I'm just looking 
> at it wrong.

You are right. We should probably introduce email obfuscation as an TT2 
filter so it could be applied in any html page (even if an email is in a 
message body) ?

You are welcome to request it as bug report or an feature request.

Regards
Serge