Lyris User's Guide
[previous] [next] [contents]
Access to the list of members
Table of Contents
· Introduction
· Email Commands
· Web Interface for Users
· Server Administrator
· Site Administrator
· List Administrator
· Other Topics
· · Security Considerations
· · Security Issues Relating to Members
· · · Access to the list archives
· · · Access to the list of members
· · · Access to Subscribe to the Mailing List
· · · Steps to restrict false impersonations
· · · Security Features for Posting Messages
· · · Access to unsubscribe and change settings
· · · Visibility of the existence of the mailing list
· · · Web Interface Access
· · · Overview of Lyris List Manager Posting Security
· · · Security Considerations of the From: field
· · · Security Recommendations for Announcement lists
· · · How Lyris List Manager Determines the Identity of the Person Posting
· · Lyris List Manager Mail Merge
· · The Lyris List Manager command line
· · Modifying lyris.plc
· Add-On Packages
· Installing and Upgrading
· Appendix
· Frequently Asked Questions

Access to the list of members

In the old days of the Internet any person on the Internet could obtain a list of members for any mailing list. This was done so that members could know who else was on the mailing list and also to facilitate unsubscribing in certain cases.

These days, there are unscrupulous people looking to get your member list so that they can send junk mail to them. In addition, obtaining the member list makes the security easier to "crack", especially if there are no member passwords.

For these reasons, Lyris List Manager defaults to only letting the list administrator (and by extension, site and server administrators) obtain the member listing. The member list is obtained with the "review" command, which must be preceded with a password with the "login" command.

Optionally, a mailing list can be set up to allow members to obtain the member listing with the review command. In this case, the authentication is done on the From: address, which must match a member address and the listing is only sent to that member address.

If security is not a concern, you can elect to make your member listing available to anyone. These three options (admins/members/anyone) are available e in the list settings.

Other pages which link to this page:
  • Security Issues Relating to Members
  • Page 409 of 629