[Owasp-leaders] Mailing list madness

Pravir Chandra chandra at owasp.org
Wed Sep 16 09:48:18 EDT 2009

I also take issue with the notion that there's no reason for people to post
to a list they're not subscribed to (for the same reasons as Rogan). It's a
matter of whether you're building an inclusive or exclusive community around
a given project. For my project, I'm trying to build a user community with
open discussions and any little, tiny barrier-to-entry makes it far more
However, I do understand the spam problem. Having moderated the CLASP list
for 2+ years with this problem, yes it's a pain. BUT, if you set the
auto-discard and occasionally check the moderation queue, it's manageable.
I'm not saying this should be the config for every list, but it should be at
the project leader's discretion to change it from a default-discard to a
moderated list.

Not to wander off the subject, by why are we (OWASP) still in the business
of running a mailman instance in this day and age? We've already migrated
all of email to Gmail, so why not migrate our lists to Google Groups (or
some equivalent)? That solves the spam problem, adds a great forums/web
interface and generally "just works". I'll volunteer the SAMM list as the
first guinea pig for that migration since I really want/need the extra


On Mon, Sep 14, 2009 at 9:31 AM, Rogan Dawes <lists at dawes.za.net> wrote:

> Laurence Casey wrote:
> >  This is normal behavior since I have a script that runs to make sure
> > all lists are configured in a way to help reduce spam. I would prefer to
> > keep it this way and not have a list with special exception. Their is
> > not reason people should want to post to a list they are not subscribed
> > to anyway.
> >
> > --Larry
> Well, I take issue with the statement that people have no reason to want
> to post to a list that they are not subscribed to. It is a fairly common
> thing to have a single question, post to the list to get an answer, and
> then vanish again.
> That said, having moderated a list that was configured the way that
> Pravir is asking for, it's really not worth the effort dealing with all
> the spam that was previously being bounced, and now suddenly needs to be
> moderated.
> Larry's settings really are a good compromise between convenience for
> the users and convenience for the list owner.
> Rogan
> >
> >
> > On 9/14/09 12:02 PM, "Pravir Chandra" <chandra at owasp.org> wrote:
> >
> >     Apologies if I should be sending this some place more specific, but
> >     some mailing list settings have been driving me nuts and I'm not
> >     sure who to ask.
> >
> >     For the SAMM mailing list, I made some settings changes to allow
> >     non-members to post (with moderation) but after a few minutes of it
> >     working correctly, it seems to reset itself. Does anyone else have
> >     this problem or am I just being dim somehow?
> >
> >     p.
> >
> >     _______________________________________________
> >     OWASP-Leaders mailing list
> >     OWASP-Leaders at lists.owasp.org
> >     https://lists.owasp.org/mailman/listinfo/owasp-leaders
> >
> >
> > ------------------------------------------------------------------------
> >
> > _______________________________________________
> > OWASP-Leaders mailing list
> > OWASP-Leaders at lists.owasp.org
> > https://lists.owasp.org/mailman/listinfo/owasp-leaders
-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://lists.owasp.org/pipermail/owasp-leaders/attachments/20090916/5cf60159/attachment.html 

More information about the OWASP-Leaders mailing list