[Mailman-Users] hide list address for security ..

2009-09-13 Thread Khalil Abbas

hello ..

 

is there a way to hide the list's address so instead of showing : 

 

from: listname-boun...@domain.com

 

it shows the sender's email address only:

 

From: sen...@domain.com 

 

I've been getting huge loads of spam on my lists' addresses so if u have this 
option please tell me how to do it otherwise please consider adding this 
feature for it will increase the list's security..

 

thanks ..

_
With Windows Live, you can organize, edit, and share your photos.
http://www.microsoft.com/middleeast/windows/windowslive/products/photo-gallery-edit.aspx
--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: http://wiki.list.org/x/QIA9


Re: [Mailman-Users] hide list address for security ..

2009-09-13 Thread Adam McGreggor
On Sun, Sep 13, 2009 at 10:37:15AM +, Khalil Abbas wrote:
 is there a way to hide the list's address so instead of showing : 
 from: listname-boun...@domain.com
 
 it shows the sender's email address only:
 From: sen...@domain.com 

Sort-of. Have a look at reply_goes_to_list : although that's really
not going to help keeping replies on list (and i'm of the view that,
except for announcement lists, what goes to the list should have
replies coming back to the list).

Nor will that necessarily help people in creating new threads. I don't
think that's the right approach to your problem:

 I've been getting huge loads of spam on my lists' addresses so if u

So, why not take preventative action, in this respect? 

You may want to investigate creating an ACL to raise the threshold of 
hostility for email addresses that aren't from list-members, for
example (it's not something I do, mind: the majority of the -owner
mail for me goes into RT, where I use a queue for training my
SpamAssassins and Bayesian filters, and then out to my mailbox, for
further fine-tuned processing.). 

That (spam-detection/handling) is something to tackle at the MTA
*before* mail gets sent to Mailman. See previous list discussions on
tackling spam at the earliest stages.

Some sort of Bayesian filtering on list-owner mails, that's fed back
could be useful, too.

AIUI, some people have found 
http://www.jamesh.id.au/articles/mailman-spamassassin/
to be useful.

 have this option please tell me how to do it otherwise please consider
 adding this feature for it will increase the list's security..

Security is *not* the same as obscurity.

-- 
``[These atrocities] -- they all happened, and they did not happen
  any the less because the Daily Telegraph has suddenly found out
  about them when it is five years too late.''
  (George Orwell, Looking Back on the Spanish War, 1942)
--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: http://wiki.list.org/x/QIA9


Re: [Mailman-Users] hide list address for security ..

2009-09-13 Thread Mark Sapiro
Khalil Abbas wrote:

is there a way to hide the list's address so instead of showing : 

 

from: listname-boun...@domain.com

 

it shows the sender's email address only:

 

From: sen...@domain.com 


This is an issue with Microsoft Outlook and perhaps other MUAs. See the
FAQ at http://wiki.list.org/x/RoA9 for more information on this.

Note that in order for bounce processing to work, the envelope sender
must be the listname-bounces address.


I've been getting huge loads of spam on my lists' addresses so if u have this 
option please tell me how to do it otherwise please consider adding this 
feature for it will increase the list's security..


I don't see what this has to do with security or spam. It only has to
do with what some users see when they view list mail. It may cause
some users to reply to the wrong address depending on how brain-dead
their MUA is, and then the list owner may see the reply as an
unrecognized bounce, but that's all.

-- 
Mark Sapiro m...@msapiro.netThe highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan

--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: http://wiki.list.org/x/QIA9


Re: [Mailman-Users] hide list address for security ..

2009-09-13 Thread Khalil Abbas


  I don't see what this has to do with security or spam. It only has to
 do with what some users see when they view list mail. It may cause
 some users to reply to the wrong address depending on how brain-dead
 their MUA is, and then the list owner may see the reply as an
 unrecognized bounce, but that's all.


 

Thanks for your reply.. well, when they see:

 

listname-boun...@domain.com they start sending to: listn...@domain.com ..

 

that's what I meant by spam.. but if the address is hidden and there's only the 
sender showing they wouldn't know what the list address is .. I'm not talking 
about the professional spammers that can track the message headers but list 
members and all the people they forward the messages to, they take any address 
they lay their hands on and add it to their address books .. believe me it's 
more pain in the act than real spammers ..

 

yet again, for the list owner getting loads of unrecognized bounces is pain 
enough, I get hundreds of'em and open each and every one of them to make sure 
that there are no real bounces!

 

 

_
With Windows Live, you can organize, edit, and share your photos.
http://www.microsoft.com/middleeast/windows/windowslive/products/photo-gallery-edit.aspx
--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: http://wiki.list.org/x/QIA9


Re: [Mailman-Users] hide list address for security ..

2009-09-13 Thread Mark Sapiro
Khalil Abbas quoted me and wrote:

  I don't see what this has to do with security or spam. It only has to
 do with what some users see when they view list mail. It may cause
 some users to reply to the wrong address depending on how brain-dead
 their MUA is, and then the list owner may see the reply as an
 unrecognized bounce, but that's all.


 

Thanks for your reply.. well, when they see:

 

listname-boun...@domain.com they start sending to: listn...@domain.com ..

 

that's what I meant by spam.. but if the address is hidden and there's only 
the sender showing they wouldn't know what the list address is .. I'm not 
talking about the professional spammers that can track the message headers but 
list members and all the people they forward the messages to, they take any 
address they lay their hands on and add it to their address books .. believe 
me it's more pain in the act than real spammers ..


You mean your list members don't already know the address of the list
they're on. If that's the case, it sounds like you're the spammer.

Plus, the list address is in many more places in the message than the
Sender: header such as the To: header (unless the list is fully
personalized), Received: headers and the RFC 2369 List-*: headers.


yet again, for the list owner getting loads of unrecognized bounces is pain 
enough, I get hundreds of'em and open each and every one of them to make sure 
that there are no real bounces!


I am sympathetic with that one. Running large lists is not easy.

However, I will tell you right now, I can't see ever making changes
that would make it possible for you to hide the identity of a list
from the members receiving its mail.

-- 
Mark Sapiro m...@msapiro.netThe highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan

--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: http://wiki.list.org/x/QIA9


Re: [Mailman-Users] hide list address for security ..

2009-09-13 Thread Khalil Abbas


 You mean your list members don't already know the address of the list
 they're on. If that's the case, it sounds like you're the spammer.

 

ofcourse I don't want them to know the address for the very same reason, spam 
to the list.. besides, they subscribe thru a form in my site not by email to 
the -subscribe address.. and cancel their subscription thru a form too.. now 
I'm getting huge loads of spam not only to my list, but to my sender's address 
which I can't change because all my subscribers are advised to mark this 
address as 'safe sender' in hotmail and yahoo and others..


 
 yet again, for the list owner getting loads of unrecognized bounces is pain 
 enough, I get hundreds of'em and open each and every one of them to make 
 sure that there are no real bounces!
 
 
 I am sympathetic with that one. Running large lists is not easy.

 

it's not that large really, just a couple of thousands.. see? what if it's 
hundreds of thousands I guess I'd be having diabetes by now -:)

 

 
 However, I will tell you right now, I can't see ever making changes
 that would make it possible for you to hide the identity of a list
 from the members receiving its mail.
 


well, at least I tried :)

 

Thanks..

 

_
With Windows Live, you can organize, edit, and share your photos.
http://www.microsoft.com/middleeast/windows/windowslive/products/photo-gallery-edit.aspx
--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: http://wiki.list.org/x/QIA9


Re: [Mailman-Users] hide list address for security ..

2009-09-13 Thread Stephen J. Turnbull
Khalil Abbas writes:

  ofcourse I don't want them to know the address for the very same
  reason, spam to the list..

Please don't call it spam on this list, where most people know what
the word means, and many actually read the Green Card spam that
started the whole issue (which wasn't on a mailing list at all, it was
on Usenet).  Spam is not unwanted mail, it is *mass-distributed*
unwanted mail.  We know you don't want it, but if you don't
distinguish between the different ways it gets to you, we can't help
you.

Are people actually typing in the address?  Or are they hitting reply,
and inadvertantly sending to the list?  If it's the latter, adding a
Reply-To header that sends it to a black hole or an address that
stores their replies for later handling (similar to what you have now,
but hopefully segregates them from real spam for a while ... you could
arrange to change it every day or so since it will surely leak).

  besides, they subscribe thru a form in my site not by email to the
  -subscribe address.. and cancel their subscription thru a form
  too.. now I'm getting huge loads of spam not only to my list, but
  to my sender's address which I can't change because all my
  subscribers are advised to mark this address as 'safe sender' in
  hotmail and yahoo and others..

You're starting to understand the constraints of the mail system.

   yet again, for the list owner getting loads of unrecognized
   bounces is pain enough, I get hundreds of'em and open each and
   every one of them to make sure that there are no real bounces!

Run them through spamassassin or something like that.  The odds that
one is a real bounce is very low, you ought to be able to triage them
a lot better before opening any.

   However, I will tell you right now, I can't see ever making changes
   that would make it possible for you to hide the identity of a list
   from the members receiving its mail.
  
  well, at least I tried :)

If you would be more accurate in describing the situation and exactly
what you're trying to accomplish, we could be of more help.  Even if
you're not a spammer, your whole attitude of looking for a convenient
way to get your message to the list without actually fixing any
problems is very similar to the spammers.  If you don't fix that,
you're probably not going to get very useful advice.
--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: http://wiki.list.org/x/QIA9


Re: [Mailman-Users] Does anyone have successfully integrated Apache James Mail Server with MailMan?

2009-09-13 Thread Barry Warsaw

On Sep 12, 2009, at 12:02 PM, 小波 顾 wrote:


And if you do, can you tell me some tips to get this done?


No, but there were some discussions about this at Pycon.  I'd be  
interesting in hearing anybody's experience with this.


-Barry



PGP.sig
Description: This is a digitally signed message part
--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: http://wiki.list.org/x/QIA9

Re: [Mailman-Users] Microsoft Outlook and footer/signatureattachments

2009-09-13 Thread Barry Warsaw

On Sep 11, 2009, at 10:27 PM, Stephen J. Turnbull wrote:


There should be an option(s?) for the membership list to be entirely
list-admin controlled, (the Hotel California option[1][2]), in which
case the irrelevant headers should be suppressed.


Definitely.  Although I don't have tests for it yet, it will be  
possible to say, run Mailman 3 lists off of hardcoded CSV files, or  
plain text files, or other roster sources that aren't writable through  
the Mailman interface.


-Barry



PGP.sig
Description: This is a digitally signed message part
--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: http://wiki.list.org/x/QIA9

Re: [Mailman-Users] Small list for club

2009-09-13 Thread Barry Warsaw

On Sep 11, 2009, at 12:30 PM, Grant Taylor wrote:


On 09/11/09 10:45, Barry Warsaw wrote:
Even though I have a static address, my ISP won't give me a reverse  
DNS, so it can be a problem with any residential broadband  
service.  Still it's very rare that I get such rejections these  
days (RedHat was one culprit, but they whitelisted me).


Even if they are rare, you will still have problems like that.

You could run your own mail server at your house and use your ISP's  
mail server as a smart host and get past the rejections because of  
your dynamic IP.


Yep.  I've considered setting up smarthost relaying just for the  
couple of domains that I have problems with.  I'm fairly sure Postfix  
can do this.  But honestly, it's been such a minimal problem that so  
far it hasn't been worth spending the time on.


It now sounds like you already have a mail server at your house (and  
likely versed in some of the problems that can pose) and all you are  
considering adding is Mailman.  If this is the case, I'd suggest  
giving Mailman a try.  Conversely if you are talking about setting  
up a new mail server just to run Mailman, I'd suggest looking in to  
a hosted service.  (I think setting up a new mail server just for a  
mailing list is a bit of a steep curve.)


I will definitely give Mailman a try! :)

-Barry



PGP.sig
Description: This is a digitally signed message part
--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: http://wiki.list.org/x/QIA9