-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Tue, Feb 03, 2009 at 03:49:25AM -0800, Tony Baechler wrote: > I know this doesn't solve your problem, but I would suggest not using > ezmlm cgi at all. It has known security problems that probably won't be > fixed. As I mentioned in my last post to this thread, I already solved my problem. I know ezmlm-cgi has many drawbacks, which is why I finally decided to switch to ezmlm-browse. > Instead, I suggest mhonarc or similar. It will generate > archives automatically as new mail is posted assuming it's set up > correctly. I just ran aptitude show mhonarc, and all it really tells me is that it's a pearl-based mail to html archiver. How well does it integrate into ezmlm-idx? > There's of course Mailman which is web-based. According to aptitude show mailman, it depends on exim4, and I'm not dumping my existing qmail install, which is nicely doing all I need it to do, in favor of exim, which is arguably less secure than qmail, just so I can install mailman, so that's not an option. I won't even mention the task of converting ezmlm subscriptions and archives over to mailman. > I think ezmlm > itself is fine, it's the cgi that's not secure and has bugs. I agree, like I said, I'm not too happy with ezmlm-cgi, thus the switch away from it. Thanks for your suggestions, and input. Greg - -- web site: http://www.romuald.net.eu.org gpg public key: http://www.romuald.net.eu.org/pubkey.asc skype: gregn1 (authorization required, add me to your contacts list first) - -- Free domains: http://www.eu.org/ or mail dns-manager at EU.org -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) iEYEARECAAYFAkmIlcIACgkQ7s9z/XlyUyDIYgCfYfK7Ip5RxEHfQFDzQUR/gNLy RioAnAi9XITejlpsPA6KfHBoul76c9Cf =09/w -----END PGP SIGNATURE-----
