Re: commands accept non-existing accounts

Michael Yount <[email protected]> Wed, 30 Aug 2006 10:32:44 -0700
Newsgroups gmane.mail.majordomo.majordomo2.devel
Message-ID <[email protected]>
In the case of the password-show command, a GLOBAL access rule could be 
used, e.g.,

password
deny, reply=NONE
!@MAIN

This approach would, unfortunately, allow outsiders to test addresses to 
see if they're registered at your domain.

Michael

Alex Teslik wrote:
> How can I lock down MJ2 so that commands will check to see if a user actually
>  exists before sending out a message. If [email protected] is not a
> registered user I don't want MJ2 emailing him.
>
> Thanks,
> Alex
>
> .
>
>