Topic: Problem with moderation?
Author: "Daniel Parker" <danielp@interlog.com>
Date: 1998/09/21 Raw View
It's been my observation over the last week or so that my posts to
comp.c++.moderated and comp.std.c++ are showing up immediately on my news
reader without intervening moderation, and that they appear without the
customary footer at the bottom of them. I've also noticed the presense of
some obviously inappropriate posts in these newsgroups, also lacking the
customary footer. Is this a known problem?
Regards,
Daniel Parker danielp@anabasis.com
[Moderator's note:
Yes, this is a known problem.
Recently there has been a spate of forged control messages,
which have been adding many bogus new newsgroups and also
changing the status of many moderated newsgroups, including
comp.std.c++, to unmoderated.
Properly configured news systems use digital signature technology
to prevent these kinds of forged control messages. In particular,
the freely available news server software INN has for some time
had support for automatic cryptographic authentication of control
messages using `pgpverify' (a front-end to PGP). However, it
appears that many systems are not running a recent version of INN,
and so those systems accept the forged control messages.
On many systems these attacks will therefore have succeeded in
temporarily changing the moderation status of the group.
This is almost certainly the cause of the symptoms you describe
above.
We have systems in place to automatically reset the moderation
status of the group if it is changed, but there is inevitably
some delay, during which the newsgroup suffers from the symptoms
you describe. Furthermore, if the attackers spam their forged
messages with sufficient frequency, then authenticating control
messages is the only reasonable solution. As always, prevention
is better than cure.
So if you have been experiencing these symptoms, you may want
to have a word with your system administrator about installing
the lastest version of INN with pgpverify enabled.
As a work-around, you can in the mean time email articles directly
to the moderation address.
-- moderator (fjh).]
---
[ comp.std.c++ is moderated. To submit articles, try just posting with ]
[ your news-reader. If that fails, use mailto:std-c++@ncar.ucar.edu ]
[ --- Please see the FAQ before posting. --- ]
[ FAQ: http://reality.sgi.com/austern_mti/std-c++/faq.html ]