SECURITY CONSIDERATIONS
Server administrators must consider carefully how they will control access to
ListManager's functions in addition to securing ListManager, its database and webserver on their network. The administrative roles assigned to individuals determines their access to ListManager's various functions. Access to the ListManager web interface and message archives may also be restricted.
Other security considerations include limiting who may join a list, see the list's members and may post messages through the list.
Security of the Web Interface
ListManager supports a number of features for controlling access to the web interface.
These features are:
Name/password access
Both the user and administrator portions of the web interface require a username and password. In the case of members, the username is always the email address. For administrators, a password is required. For users, the list administrator can decide whether passwords should be used at all, optional or required.
Administrator Interface
The administrator web interface requires a user name and password. Server administrators may restrict other admins to particular areas of the interface by assigning them the appropriate administrative role or by using permission groups to allow or deny access to particular pages.
Limit by TCP/IP Address
Access to the interface may also be restricted by IP address; see Utilities:
Administration: Server: Server Settings: Security: Web for more information.
Administration Web Server
Some security-minded administrators may wish to protect access to the ListManager web interface by putting it behind a firewall, and then install a stripped-down
ListManager web server to process tracking and other user events.
Lyris, Inc. | 6401 Hollis Street, Suite 125 | Emeryville CA 94608 USA |
www.lyris.com
Toll free +1.800.768.2929 | International calls +1.510.844.1600å | Fax +1.510.844.1598
Page 845
