Issue 73878 - Mailing list allows attachments through
Summary: Mailing list allows attachments through
Status: CLOSED OBSOLETE
Alias: None
Product: Infrastructure
Classification: Infrastructure
Component: Website general issues (show other issues)
Version: current
Hardware: All All
: P5 (lowest) Trivial (vote)
Target Milestone: CEE Snake
Assignee: AOO issues mailing list
QA Contact:
URL: http://sv.openoffice.org/servlets/Sum...
Keywords:
Depends on:
Blocks:
 
Reported: 2007-01-25 16:14 UTC by lars.nooden
Modified: 2013-08-05 14:49 UTC (History)
1 user (show)

See Also:
Issue Type: DEFECT
Latest Confirmation in: ---
Developer Difficulty: ---


Attachments

Note You need to log in before you can comment on or make changes to this issue.
Description lars.nooden 2007-01-25 16:14:38 UTC
The mailing list seems to be letting attachments through.  This is a severe
problem both in regards to MS viruses, archiving, as well as bandwidth usage.  

A filter to stop messages with attachments is needed.
Comment 1 lsuarezpotts 2007-01-25 16:54:44 UTC
support, would  you be able to apply the mime filter to the affected list?

thanks
louis
Comment 2 Unknown 2007-01-25 21:53:00 UTC
Thank you for contacting CollabNet Customer Support. We will initiate our
research on this issue and get back to you with adequate information.

Regards,
Ramya
Support Operations
Comment 3 Unknown 2007-01-30 00:32:01 UTC
Updating SWB
Comment 4 Unknown 2007-02-06 22:02:19 UTC
The mimeremove file is in place for that list, and contains the standard list of 
attachments to filter out. 

Which attachments are getting through? 
Is this a case where we need to enhance the mimeremove file, or are they 
attachments that are supposed to be filtered by the mimeremove file but somehow
aren't?

Please clarify.

Regards,
Ramya
Support Operations
Comment 5 lsuarezpotts 2007-02-08 14:17:11 UTC
reassigning to lars
Comment 6 lars.nooden 2007-02-08 14:58:13 UTC
I'm shocked that any are allowed by default.  The standard list of attachments
to filter out must be *all* attachments, especially any and all binaries
regardless of source.  They can be distributed via the web or FTP if they are
legitimate.  

My request for *all* the @sv.openoffice.org lists is that *no* attachments get
through, please.  

Here's one example of attachments getting through, which is fortunately (except
for the attachments) benevolent:

  http://sv.openoffice.org/servlets/ReadMsg?list=dev&msgNo=31

Comment 7 lsuarezpotts 2007-02-08 21:08:25 UTC
Lars,
We had long debate about this and agreed a while ago to let things that some email clients (and users) use 
as well as .odf files.  The ban list filters out everything else. We can apply the ban list to your list and that 
would effectively filter out spam attachments as well as obnoxiously large zip files and the like but allow 
the sending of .odf files and a few other.

best
louis
Comment 8 lars.nooden 2007-02-09 08:20:08 UTC
That's fine.  I'm not asking that any other lists be changed.  I'd, of course
think it was a good idea, but the scope of my request for the @sv.openoffice.org
lists -- please no attachments for those lists, thanks.
Comment 9 Unknown 2007-02-12 07:10:00 UTC
Thanks for the update. Discussing this with the Engineering Operations team for
their inputs.

Regards,
Ramya
Support Operations
Comment 10 Unknown 2007-02-16 06:15:23 UTC
Essentially this requires more time for analyzing, we would update you after
getting adequate information.

Regards,
Ramya
Support Operations
Comment 11 Unknown 2007-04-24 10:39:19 UTC
A solution has been put forth by engineers for resolving this issue . However we
would like hold on to fixing this issue until the production upgrade of the site.

Moving this issue to the issue to the resolved later . Marking this issue as a
post-upgrade task .
Comment 12 Unknown 2009-01-19 13:14:12 UTC
Reopening to update the status.


-Jeeva
CollabNet Support
Comment 13 Unknown 2009-01-19 13:14:35 UTC
The new Discussion Services, replacement for mailing lists since CEE5.0, allows
the list owners/admins to choose from 3 options for allowing/rejecting
attachments - 'Allow all', 'Block denied MIME types' [list of denied mime types
configurable] & 'Block all'.

Marking this as Resolved/Fixed per CollabNet's policy as the feature is
available in Discussion Services.


-Jeeva
CollabNet Support
Comment 14 lars.nooden 2009-09-15 17:57:44 UTC
I'm not seeing where to disable the attachments.

http://sv.openoffice.org/servlets/MailingListEdit?list=users
Comment 15 stx123 2011-03-23 16:14:11 UTC
Reset QA Contact to new default
Comment 16 Rob Weir 2013-07-30 02:45:17 UTC
Reset assignee on issues not touched by assignee in more than 1000 days.
Comment 17 Marcus 2013-08-05 14:47:53 UTC
The issue is obsolete. At Apache the mailing list structure is completely different.