approved

[Russ Allbery]

Kees Bergwerf <c.bergwerf at hccnet.nl> writes:

> I found out last night that I can post anything on a lot of servers when I 
> add an approved: line to the message. It does not even matter what the email 
> address on that line is :-(
> Is there a way to allow only a few posters?
> Most newsgroups I have are moderated, but that is quite useless when people 
> find out about this backdoor.

STABLE snapshots of INN only allow the addition of an Approved header if
that person matches an access stanza in readers.conf that grants them that
access (it's off by default).

-- 
Russ Allbery (rra at stanford.edu)             <http://www.eyrie.org/~eagle/>