While watching mailman logs yesterday, I determined that our mailman web interface was being abused to send large numbers of subscription confirmation requests to a specific email address. As a workaround, I replaced /usr/lib/cgi-bin/mailman/subscribe, disabling direct subscription requests over the web.
While watching mailman logs yesterday, I determined that our mailman web interface was being abused to send large numbers of subscription confirmation requests to a specific email address. As a workaround, I replaced
/usr/lib/cgi-bin/mailman/subscribe
, disabling direct subscription requests over the web.