Next Previous Contents

11. Restricting archive retrieval.

11.1 Restricting archive access to subscribers.

If you use ezmlm-get(1), archive retrieval can be restricted by using the ezmlm-make(1) ``-g'' (guard archive) switch. This in turn sets ezmlm-get(1) up with its ``-s'' switch, allowing access only to addresses that are subscribers of the list, or of the digest list, or that are present in an extra address database stored in DIR/allow/. Addresses can be added remotely by mailing list-allow-useralias=userhost@listhost. Other commands, such as ``subscribe'' work as expected. As you can see, the different programs have many options and ezmlm-make(1) organizes most of them into the most useful sets to make it easier. Don't hesitate to look at the ezmlmrc(5) man page and man pages for individual commands. There are many useful options to more finely tune your lists to your taste. Via modification of ezmlmrc(5) you can make your favorite options the default!

Since ezmlm-get always sends the reply to SENDER, this assures that only subscribers can get archive excerpts. Since SENDER is easily faked, anyone can still request archive info (and drain system resources), but replies go only to subscriber E-mail addresses. The DIR/allow/ database can be used to manually add addresses that should be given archive access, but are not subscribers. This may be an address of a subscriber who posts from an address other than his or her subscription address.

11.2 Restricting available archive retrieval commands.

If you want to disable all archive retrieval except digest creation, simply add the ``-C'' command line switch to the ezmlm-get(1) line in DIR/manager. If you don't want digest creation via trigger messages and DIR/manager, but use other means to created digests, you can remove the ezmlm-get(1) line from DIR/manager.

11.3 Restricting archive retrieval to moderators.

If DIR/public does not exist, ezmlm-manage(1) and ezmlm-get(1) modify their behavior. They disallow user requests, but for remote administration lists, honor moderator requests. Thus, for a remote admin list without DIR/public, only subscription moderators or remote administrators can receive archive retrievals and only remote administrators can subscribe and unsubscribe user addresses.

If you'd like this restriction of archive retrieval with maintained user-initiated ezmlm-manage(1) subscription functions, use the ezmlm-get(1) ``-P'' (not public) switch, and retain DIR/public.

11.4 Allowing archive retrieval from a non-public list.

A non-public list lacks DIR/public. ezmlm-manage(1) will reject user requests for (un) subscription and for archive retrieval. The restriction on archive retrieval can be removed with the ezmlm-get(1) ``-p'' (public) switch.


Next Previous Contents