[Mailman-Users] Re: Web requests with garbage at the end of the list name

2021-08-19 Thread Jon Baron
I don't understand the terms you use. So I will not comment further on
this thread. "Web UI"? "Email"?

However, I did suggest using Google to find out more about
Proofpoint. All the information is there. They do have a goal. Whether
they achieve it, I do not know.

Jon
-- 
Jonathan Baron, Professor of Psychology, University of Pennsylvania
Home page: https://www.sas.upenn.edu/~baron
Founding Editor: Judgment and Decision Making (http://journal.sjdm.org)
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: Web requests with garbage at the end of the list name

2021-08-19 Thread David Gibbs via Mailman-Users

On 8/18/21 3:36 PM, Jon Baron wrote:

I'm pretty sure that this comes from Proofpoint's "URL Defense"
system. 


Ah. OK.


But I don't understand what you mean by "hostile
listname" being "correct".


The listname before the garbage is correct.


 I suggest running all messages through .procmailrc
with this recipe:


The mangled list names are in the web UI, not email.

david

--
I'm riding in the American Diabetes Association's Tour de Cure to raise 
money for diabetes research, education, advocacy, and awareness.  You 
can make a tax-deductible donation to my ride by visiting 
https://mideml.diabetessucks.net.


You can see where my donations come from by visiting my interactive 
donation map ... https://mideml.diabetessucks.net/map (it's a geeky thing).

--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
   https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: Web requests with garbage at the end of the list name

2021-08-19 Thread David Gibbs via Mailman-Users

On 8/18/21 11:34 PM, Stephen J. Turnbull wrote:

Is anyone else seeing requests to their mailman install that look
something like this:

Aug 18 15:10:16 2021 (31166) Hostile listname: 
listname=midrange-l__;!!NVq9dfhzMyHqTw!wLl-dt8zxsuQuoyojs-UYmT_d65WZroClHaYGfHduJ561eT0B7baTQV1ogZzQKRRsw$:
remote=52.34.76.65


What log is that from?  I don't recognize the format.


mischief


  > But I don't understand what you mean by "hostile
  > listname" being "correct".

He means that "midrange-l" is the name of an active list at his site,
I'm pretty sure.


Exactly correct.


host(1) says the source or the request is AWS. :-/

None of this explains why the URL is targeting David's Mailman, unless
it's the Mailman host that is running the Proofpoint.  (It's not your
job ;-), but any further hints would be appreciates.


These requests are coming from an external source. I'm not running 
proofpoint.


Not much I can do about it, I guess.  Good to know the source of the 
requests though.


Not sure what proofpoint is trying to do. They are just getting errors.

Oh well.

Thanks for the info guys.

david

--
I'm riding in the American Diabetes Association's Tour de Cure to raise 
money for diabetes research, education, advocacy, and awareness.  You 
can make a tax-deductible donation to my ride by visiting 
https://mideml.diabetessucks.net.


You can see where my donations come from by visiting my interactive 
donation map ... https://mideml.diabetessucks.net/map (it's a geeky thing).

--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
   https://mail.python.org/archives/list/mailman-users@python.org/