I was going to mention that an intermediate level of security would be to
put in the archive ACL all the machines that group members typically surf
from. That's what we did with the IRAM local stuff. But then i remembered
that the dial-in system here uses dynamically-assigned IP addresses. Doh.
neal
On Mon, 1 Jun 1998 savage@cs.washington.edu wrote:
> Got it. Well... again, I don't care if everyone in the dept gets to see
> our mailing list mail. I don't intend to write anything that wouldn't
> be fit for others to see ;-)
>
> - Stefan
>
> > -----Original Message-----
> > From: Geoff Voelker [SMTP:voelker@cs.washington.edu]
> > Sent: Monday, June 01, 1998 10:43 PM
> > To: savage@cs.washington.edu
> > Cc: syn@cs
> > Subject: RE: mail archive
> >
> > The password only restricts access via the web server; any machine
> > that mounts sirpa-a:/loom/syn would still be able to see the archive
> > via nfs even if we had a web password on it. To be truly restrictive,
> > we would need to place the archive in a directory that was only
> > exported to the web server, or place the archive on the web server
> > itself in a place that is not exported to the rest of the department.
> >
> > -geoff
> >
> > savage@cs.washington.edu writes:
> > > I have no problem with anyone in the dept who wants to read the
> > list.
> > > If we want it more restrictive we could always add a password. Its
> > more
> > > inconvenient to me that the list doesn't work from windows... so I
> > vote
> > > to make it accessible via the web server.
> > >
> > > - Stefan
> > >
> > > > -----Original Message-----
> > > > From: Geoff Voelker [SMTP:voelker@cs.washington.edu]
> > > > Sent: Monday, June 01, 1998 10:32 PM
> > > > To: syn@cs
> > > > Subject: mail archive
> > > >
> > > > After more effort than I want to acknowledge, we finally have an
> > > > archive setup for the syn mailing list. It's currently at:
> > > >
> > > > file:///projects/networking/archive/mail/archive_index/index.html
> > > >
> > > > which requires you to have nfs access (and which means it doesn't
> > work
> > > > from PCs). Doing it this way has the most restrictive access. I
> > > > don't know how sensitive people are about the mailing list, but if
> > we
> > > > want to access it via the web server then the archive must be
> > world
> > > > readable and anyone in the department could potentially read the
> > > > archive (via nfs). That's fine by me, but I didn't want to make
> > it
> > > > that way unless I got the general ok.
> > > >
> > > > -geoff
>