Re: [Mailman-Users] Web Admin Security Question

2012-05-21 Thread Dennis Putnam
Thanks for the reply. Unfortunately I can't find any of this on the old server so I cannot understand what I did to make it work. I am not an Apache expert so I am having trouble with step 1 and hope someone can get me over this hump. I have SSL working as I can access the admin pages using https.

Re: [Mailman-Users] Web Admin Security Question

2012-05-21 Thread Frank Bell
try an alias Alias http://lists.washburn.edu/mailman/admin https://lists.washburn.edu/mailman/listinfo/ https://lists.washburn.edu/mailman/admin https://lists.washburn.edu/mailman/listinfo/ Thank you, Frank Bell Application Systems Admin ISS 785-670-2334 1 Cor 15:10 By the grace of

Re: [Mailman-Users] Web Admin Security Question

2012-05-21 Thread Frank Bell
sorry about that Alias http://lists.washburn.edu/mailman/admin https://lists.washburn.edu/mailman/admin Thank you, Frank Bell Application Systems Admin ISS 785-670-2334 1 Cor 15:10 By the grace of God I am what I am, and His grace toward me was not in vain . . .. On 5/21/2012 9:30 AM,

[Mailman-Users] Can't moderate requests

2012-05-21 Thread Jose Legido
Hi. (excuse me for my english) I can't moderate requests in mailman. I have requests Held Messages, I select discard and submit all data, but the message continue in Held Messages. I take a look in the logs but don't find nothing. any help? Thanks.

[Mailman-Users] removing options from list admin page

2012-05-21 Thread Tomislav Luetić
hi. I've got a 2.1.14 Mailman that I'm setting up for a computer-unsavvy group of people, and would like to remove a good deal of options available in the list admin page, setting a default value. From what I understand, this and similair pages are automatically generated by modules in

[Mailman-Users] Logging failed Admin logins [SEC=UNCLASSIFIED]

2012-05-21 Thread Dale, Mark
Hi All, I'm looking for a way to prevent the Mailman Admin login from getting bruted. I was thinking that I can set fail2ban to watch the logfiles and trigger an event after a certain number of failed logins from the same IP address, within a specified time period. I've had a look through the

Re: [Mailman-Users] Web Admin Security Question

2012-05-21 Thread Mark Sapiro
Frank Bell wrote: Alias http://lists.washburn.edu/mailman/admin https://lists.washburn.edu/mailman/admin Does this actually work? Apache documentation states the target of an Alias is a file path or directory path, not a URL path. -- Mark Sapiro m...@msapiro.netThe highway is for

Re: [Mailman-Users] Web Admin Security Question

2012-05-21 Thread Mark Sapiro
Dennis Putnam wrote: I did not quite understand the looping caveat in option one so I tried the rewrite rule in option 2. That did not seem to do anything but there was no indication in the instructions where that should go. I have a .conf file that loads the SSL module and sets up the

Re: [Mailman-Users] Can't moderate requests

2012-05-21 Thread Mark Sapiro
Jose Legido wrote: I can't moderate requests in mailman. I have requests Held Messages, I select discard and submit all data, but the message continue in Held Messages. I take a look in the logs but don't find nothing. See the FAQ at http://wiki.list.org/x/ioA9. -- Mark Sapiro

Re: [Mailman-Users] removing options from list admin page

2012-05-21 Thread Mark Sapiro
On 5/21/2012 5:19 AM, Tomislav Luetić wrote: I've got a 2.1.14 Mailman that I'm setting up for a computer-unsavvy group of people, and would like to remove a good deal of options available in the list admin page, setting a default value. From what I understand, this and similair pages are

Re: [Mailman-Users] Web Admin Security Question

2012-05-21 Thread Frank Bell
It does for us. Thank you, Frank Bell Application Systems Admin ISS 785-670-2334 1 Cor 15:10 By the grace of God I am what I am, and His grace toward me was not in vain . . .. On 5/21/2012 3:33 PM, Mark Sapiro wrote: Frank Bell wrote: Alias http://lists.washburn.edu/mailman/admin

Re: [Mailman-Users] Logging failed Admin logins [SEC=UNCLASSIFIED]

2012-05-21 Thread Mark Sapiro
Dale, Mark wrote: I've had a look through the Mailman log files and can't see that Mailman writes anywhere for failed login attempts (to the Admin page). Correct. It seems that the best that can be done at the moment is to guess it from the POST entries in the Apache logs. Even there, a

Re: [Mailman-Users] Web Admin Security Question

2012-05-21 Thread Dennis Putnam
That didn't seem to help either. This is what is in /etc/httpd/conf.d/mailman.conf # Directives for the mailman web interface RewriteEngine On RewriteCond %{HTTPS} Off RewriteRule ^(.*)$ https://%{HTTP_HOST}$1 [R,L] Alias /pipermail/ /var/lib/mailman/archives/public/

Re: [Mailman-Users] Web Admin Security Question

2012-05-21 Thread Mark Sapiro
Dennis Putnam wrote: That didn't seem to help either. This is what is in /etc/httpd/conf.d/mailman.conf # Directives for the mailman web interface RewriteEngine On RewriteCond %{HTTPS} Off RewriteRule ^(.*)$ https://%{HTTP_HOST}$1 [R,L] That should work assuming you

[Mailman-Users] mailing list subscription issue

2012-05-21 Thread dhanushka ranasinghe
Hi guys to suscribe to the mailing list i send the mail to list-requ...@lkx.com Then i get the mail with confirmation string , then i just reply to received mail with confirmation string in the subject line.. As a replay i get the mail like this [1] , But other mailing list in the same

Re: [Mailman-Users] mailing list subscription issue

2012-05-21 Thread Mark Sapiro
dhanushka ranasinghe wrote: to suscribe to the mailing list i send the mail to list-requ...@lkx.com Then i get the mail with confirmation string , then i just reply to received mail with confirmation string in the subject line.. As a replay i get the mail like this [1] , But other mailing