[Mailman-Users] Re: protecting the web interface against subscription spam

2021-03-08 Thread AJ
Just to close this out. It wound up being a Content Security Policy on the apache server. Thanks to all for their help. On Fri, Mar 5, 2021 at 9:32 PM Mark Sapiro wrote: > On 3/5/21 6:14 PM, Al Brussey wrote: > > There is nothing between the digest question and the submit button. > > > > When

[Mailman-Users] Re: protecting the web interface against subscription spam

2021-03-08 Thread AJ
Sure will do. Thanks so much. On Mon, Mar 8, 2021 at 11:37 AM Brian Carpenter wrote: > On 3/8/21 11:27 AM, AJ wrote: > > Just confirmed, the mailman server can reach the Google reCaptcha URL. > > I also tried different browsers. I do see the ReCaptcha on here: > >

[Mailman-Users] Re: protecting the web interface against subscription spam

2021-03-08 Thread Brian Carpenter
On 3/8/21 11:27 AM, AJ wrote: Just confirmed, the mailman server can reach the Google reCaptcha URL. I also tried different browsers. I do see the ReCaptcha on here: https://mail.python.org/mailman/listinfo/ Do I need any other python modules for this? I am leaning very heavy towards

[Mailman-Users] Re: protecting the web interface against subscription spam

2021-03-08 Thread AJ
Just confirmed, the mailman server can reach the Google reCaptcha URL. I also tried different browsers. I do see the ReCaptcha on here: https://mail.python.org/mailman/listinfo/ Do I need any other python modules for this? On Fri, Mar 5, 2021 at 7:38 PM Mark Sapiro wrote: > On 3/5/21 3:35

[Mailman-Users] Re: protecting the web interface against subscription spam

2021-03-05 Thread Al Brussey
Yea tried different browsers, let me see if I can get that url manually from the server. > On Mar 5, 2021, at 9:32 PM, Mark Sapiro wrote: > > On 3/5/21 6:14 PM, Al Brussey wrote: >> There is nothing between the digest question and the submit button. >> >> When I submit the form, I get this:

[Mailman-Users] Re: protecting the web interface against subscription spam

2021-03-05 Thread Mark Sapiro
On 3/5/21 6:14 PM, Al Brussey wrote: > There is nothing between the digest question and the submit button. > > When I submit the form, I get this: > > reCAPTCHA validation failed: missing-input-response That's the expected response in this case. Have you tried different browsers? Is there a

[Mailman-Users] Re: protecting the web interface against subscription spam

2021-03-05 Thread Al Brussey
There is nothing between the digest question and the submit button. When I submit the form, I get this: reCAPTCHA validation failed: missing-input-response > On Mar 5, 2021, at 7:38 PM, Mark Sapiro wrote: > > On 3/5/21 3:35 PM, Al Brussey wrote: >> Yes they are v2 keys. >> On Mar 5,

[Mailman-Users] Re: protecting the web interface against subscription spam

2021-03-05 Thread Mark Sapiro
On 3/5/21 3:35 PM, Al Brussey wrote: > Yes they are v2 keys. > >> On Mar 5, 2021, at 5:28 PM, Mark Sapiro wrote: >> >> On 3/5/21 2:10 PM, AJ wrote: >>> >>> View source of page, i see this, with the correct site key: >>> >>> This form requires >>> JavaScript.>>

[Mailman-Users] Re: protecting the web interface against subscription spam

2021-03-05 Thread Al Brussey
Yes they are v2 keys. > On Mar 5, 2021, at 5:28 PM, Mark Sapiro wrote: > > On 3/5/21 2:10 PM, AJ wrote: >> >> View source of page, i see this, with the correct site key: >> >> This form requires >> JavaScript.> src="

[Mailman-Users] Re: protecting the web interface against subscription spam

2021-03-05 Thread Mark Sapiro
On 3/5/21 2:10 PM, AJ wrote: > > View source of page, i see this, with the correct site key: > > This form requires > JavaScript. src="

[Mailman-Users] Re: protecting the web interface against subscription spam

2021-03-05 Thread Chromatest J. Pantsmaker
Looks like your noscript plugin is blocking javascript On Fri, Mar 5, 2021 at 3:12 PM AJ wrote: > Keys set properly in mm_cfg.py. I am on Mailman 2.1.34. > > mm_cfg.py: > > SUBSCRIBE_FORM_SECRET = "xxx" > BLOCK_SPAMHAUS_LISTED_IP_SUBSCRIBE = Yes > BLOCK_SPAMHAUS_LISTED_DBL_SUBSCRIBE = Yes >

[Mailman-Users] Re: protecting the web interface against subscription spam

2021-03-05 Thread AJ
Keys set properly in mm_cfg.py. I am on Mailman 2.1.34. mm_cfg.py: SUBSCRIBE_FORM_SECRET = "xxx" BLOCK_SPAMHAUS_LISTED_IP_SUBSCRIBE = Yes BLOCK_SPAMHAUS_LISTED_DBL_SUBSCRIBE = Yes RECAPTCHA_SITE_KEY = 'xxx' RECAPTCHA_SECRET_KEY = 'xxx' View source of page, i see this, with the correct site

[Mailman-Users] Re: protecting the web interface against subscription spam

2021-03-05 Thread Mark Sapiro
On 3/5/21 1:24 PM, AJ wrote: > I've tried to enable the reCaptcha by setting the keys in mm_cfg.py and the > list subscribe page does not display the reCaptcha checkbox. > This is the case on new and old lists. I've confirmed the following is > added to templates/en/listinfo.html > > >

[Mailman-Users] Re: protecting the web interface against subscription spam

2021-03-05 Thread Brian Carpenter
On 3/5/21 4:24 PM, AJ wrote: I've tried to enable the reCaptcha by setting the keys in mm_cfg.py and the list subscribe page does not display the reCaptcha checkbox. This is the case on new and old lists. I've confirmed the following is added to templates/en/listinfo.html

[Mailman-Users] Re: protecting the web interface against subscription spam

2021-03-05 Thread AJ
I've tried to enable the reCaptcha by setting the keys in mm_cfg.py and the list subscribe page does not display the reCaptcha checkbox. This is the case on new and old lists. I've confirmed the following is added to templates/en/listinfo.html None of the old lists have

[Mailman-Users] Re: protecting the web interface against subscription spam (solved)

2021-03-05 Thread Brian Carpenter
On 3/5/21 10:01 AM, jor...@gmail.com wrote: Am Freitag, dem 05.03.2021 um 09:41 -0500 schrieb Brian Carpenter: Depending upon what version of Mailman 2 you are running, you can add the following to your mailman_install_dir/Mailman/mm_cfg.py BLOCK_SPAMHAUS_LISTED_IP_SUBSCRIBE = Yes

[Mailman-Users] Re: protecting the web interface against subscription spam

2021-03-05 Thread jorohr
Am Freitag, dem 05.03.2021 um 09:41 -0500 schrieb Brian Carpenter: > > Depending upon what version of Mailman 2 you are running, you can add > the following to your mailman_install_dir/Mailman/mm_cfg.py > > BLOCK_SPAMHAUS_LISTED_IP_SUBSCRIBE = Yes > RECAPTCHA_SITE_KEY = "recaptcha site key" >

[Mailman-Users] Re: protecting the web interface against subscription spam

2021-03-05 Thread Brian Carpenter
On 3/5/21 9:31 AM, jor...@gmail.com wrote: currently we get  inundated with abuse complaint mails because our mailman instance is targeted by spambots who for whatever reason try to subscribe to the lists at our side with addresses belonging to someone else, and when mailman sends out the