Re: [CentOS] About the membership issue

2018-06-16 Thread Johnny Hughes via CentOS
On 06/16/2018 06:04 AM, Johnny Hughes via CentOS wrote:
> On 06/16/2018 05:58 AM, Johnny Hughes via CentOS wrote:
>> On 06/16/2018 05:42 AM, Leon Fauster via CentOS wrote:
>>> Concerning the disabled membership (yesterday). Is there anything that I 
>>> should do? 
>>> Visiting the "re-enable" link shows only a plain site with meta information 
>>> about 
>>> the list but without any feedback like "membership enabled". Albeit some 
>>> postings are 
>>> coming in again now (with "normalized" sender address ). 
>>> Seems 
>>> the work to resolve this issue is in progress ... 
>>
>>
>> WRT the action taken .. we have used the Munge option from here (for
>> versions 2.1.18 or greater):
>>
>> https://wiki.list.org/DEV/DMARC
>>
>> So, other than all 'From:' addresses being the mailing list, everything
>> seems to be working the same as before.
>>
>> I still see 'reply to list' as an option and it works the same for ne in
>> Thunderbird (If I reply directly to he mail, it does to original author,
>> if I reply to list, it goes to the list).
> 
> It is in the Reply To:  not  CC:  field in Thunderbird .. but that shows
> up by defalt when viewing the list mails for me.  Not sure how otehr
> mail clients handle it.

In the gmail interface .. it shows the the Author, like this in the From
line:

Johnny Hughes via CentOS

And there is a drop down arrow the shows all the header info.

A reply puts both the author and the list in the To section.

That also seems manageable.


> 
>>
>> So for me and thunderbird it is business as usual.
>>
>> If your {all of us 'yous', not just Leon :) } mail client has a  reply
>> to list function, you will want to use that to send replies to the list.





signature.asc
Description: OpenPGP digital signature
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] About the membership issue

2018-06-16 Thread Johnny Hughes via CentOS
On 06/16/2018 05:58 AM, Johnny Hughes via CentOS wrote:
> On 06/16/2018 05:42 AM, Leon Fauster via CentOS wrote:
>> Concerning the disabled membership (yesterday). Is there anything that I 
>> should do? 
>> Visiting the "re-enable" link shows only a plain site with meta information 
>> about 
>> the list but without any feedback like "membership enabled". Albeit some 
>> postings are 
>> coming in again now (with "normalized" sender address ). 
>> Seems 
>> the work to resolve this issue is in progress ... 
> 
> 
> WRT the action taken .. we have used the Munge option from here (for
> versions 2.1.18 or greater):
> 
> https://wiki.list.org/DEV/DMARC
> 
> So, other than all 'From:' addresses being the mailing list, everything
> seems to be working the same as before.
> 
> I still see 'reply to list' as an option and it works the same for ne in
> Thunderbird (If I reply directly to he mail, it does to original author,
> if I reply to list, it goes to the list).

It is in the Reply To:  not  CC:  field in Thunderbird .. but that shows
up by defalt when viewing the list mails for me.  Not sure how otehr
mail clients handle it.

> 
> So for me and thunderbird it is business as usual.
> 
> If your {all of us 'yous', not just Leon :) } mail client has a  reply
> to list function, you will want to use that to send replies to the list.




signature.asc
Description: OpenPGP digital signature
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Passwords in plain text

2018-06-16 Thread Johnny Hughes via CentOS
On 06/16/2018 05:50 AM, Richard via CentOS wrote:
> 
>> Date: Saturday, June 16, 2018 05:25:05 -0500
>> From: Johnny Hughes via CentOS 
>>
>> On 06/15/2018 05:18 PM, Richard wrote:
>>>
>>>
>>> I believe this is a DMARC issue. Yahoo, among other places, has set
>>> their dmarc records to p=reject:
>>>
>>>   dig +short txt _dmarc.yahoo.com
>>>   "v=DMARC1; p=reject; pct=100; rua=mailto:dmarc_y_...@yahoo.com;;
>>>
>>> So, if your mail hosting provider enforces dmarc,(gmail does) and
>>> you get mail from a list that doesn't rewrite the headers, and
>>> people from places like yahoo post to the list, you'll likely get
>>> some form of warning about being being kicked off the mailing list
>>> every now and then. The frequency depends on how often people from
>>> p=reject places post, and what the settings are for bounce
>>> handling of the mailing list in question.
>>>
>>> I believe that the current version of mailman can be configured to
>>> do the necessary header rewrites. Some lists I'm on only do the
>>> rewrites for headers of posts coming from p=reject sites (much
>>> less annoying than having them all rewritten).
>>
>> This is indeed what happened.  An email from yahoo.com.uk caused
>> gmail to reject all the mails sent by that user because of the
>> yahoo DMARC settings.
>>
>> We have now set the mailing list to rewrite headers.  That also has
>> set the From: of the email to the Mailing list and not the Original
>> Author. The author is moved to the CC: block and you can still
>> easily see who sent it and my email client (thunderbird) still does
>> things the same way (reply to list sends to the list, reply sends
>> to the  original author).
>>
>>  This should prevent the yahoo/gmail (or other dmarc) issues from
>> happening again.
>>
>> For others running mailings lists on CentOS with this issue, Red
>> Hat has back ported the 'dmarc_moderation_action' into the current
>> version of mailman that is used in RHEL and CentOS.  You can follow
>> the instructions here for Mailman 2 (for version 2.1.18) even
>> though the version in CentOS is mailman-2.1.15-26.el7_4.1
>>
>> we will be watching the list for the next few days to see if this
>> change is working as expected.  If it id not working for other
>> email clients please let us know.
>>
>> Great job by Brian Stinson to figure all this out :)
>>
>> Thanks,
>> Johnny Hughes
>>
> 
> Thank you - one less list I'll get kicked off of regularly. 
> 
> One note, I am seeing the author in the Reply-To: in the message
> headers, not in the visible Cc: as you indicate:
> 
>From: Johnny Hughes via CentOS 
>Reply-To: Johnny Hughes ,
> CentOS mailing list 
> 
> so to see the address of the sender I have to either poke through the
> headers or initiate a reply. I don't think that this is email client
> specific.

RIGHT ! .. I am showing that in Thunderbird for my emails (instead of CC
on the lists :D).  So I thought it was CC.

So in thunderbird, you should see reply to (at least I do) when viewing
the mail.  For other email clients, not sure what is seen.






signature.asc
Description: OpenPGP digital signature
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] About the membership issue

2018-06-16 Thread Johnny Hughes via CentOS
On 06/16/2018 05:42 AM, Leon Fauster via CentOS wrote:
> Concerning the disabled membership (yesterday). Is there anything that I 
> should do? 
> Visiting the "re-enable" link shows only a plain site with meta information 
> about 
> the list but without any feedback like "membership enabled". Albeit some 
> postings are 
> coming in again now (with "normalized" sender address ). 
> Seems 
> the work to resolve this issue is in progress ... 


WRT the action taken .. we have used the Munge option from here (for
versions 2.1.18 or greater):

https://wiki.list.org/DEV/DMARC

So, other than all 'From:' addresses being the mailing list, everything
seems to be working the same as before.

I still see 'reply to list' as an option and it works the same for ne in
Thunderbird (If I reply directly to he mail, it does to original author,
if I reply to list, it goes to the list).

So for me and thunderbird it is business as usual.

If your {all of us 'yous', not just Leon :) } mail client has a  reply
to list function, you will want to use that to send replies to the list.




signature.asc
Description: OpenPGP digital signature
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] About the membership issue

2018-06-16 Thread Johnny Hughes via CentOS
On 06/16/2018 05:42 AM, Leon Fauster via CentOS wrote:
> Concerning the disabled membership (yesterday). Is there anything that I 
> should do? 
> Visiting the "re-enable" link shows only a plain site with meta information 
> about 
> the list but without any feedback like "membership enabled". Albeit some 
> postings are 
> coming in again now (with "normalized" sender address ). 
> Seems 
> the work to resolve this issue is in progress ... 
> 
We re-enabled all users, so no action is required.



signature.asc
Description: OpenPGP digital signature
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] Passwords in plain text

2018-06-16 Thread Johnny Hughes via CentOS
On 06/15/2018 05:18 PM, Richard wrote:
> 
>> Date: Friday, June 15, 2018 14:55:21 -0700
>> From: Akemi Yagi 
>>
>> On Fri, Jun 15, 2018 at 9:57 AM, Gianluca Cecchi
>>  wrote:
>>>
>>> Il Ven 15 Giu 2018, 18:45 Larry Martell 
>>> ha scritto:
>>>
 On Fri, Jun 15, 2018 at 12:41 PM rj coleman
  wrote:

> Am I the only one who just received this email from this group?
> Which came with my password in the email in plain text?
>>
>> Your membership in the mailing list CentOS has been disabled
>> due to excessive bounces The last bounce received from you
>> was dated 15-Jun-2018.  You will not get any more messages
>> from this list until you re-enable your membership.  You will
>> receive 3 more reminders like this before your membership in
>> the list is deleted.
>>
 I got it as well.

>>> Mee too
>>
>> I also received the "has been disabled" notification. It looks like
>> users with gmail addresses are affected.
>>
>> CentOS admins are looking into this issue (I believe).
>>
>> Akemi
> 
> I believe this is a DMARC issue. Yahoo, among other places, has set
> their dmarc records to p=reject:
> 
>   dig +short txt _dmarc.yahoo.com
>   "v=DMARC1; p=reject; pct=100; rua=mailto:dmarc_y_...@yahoo.com;;
> 
> So, if your mail hosting provider enforces dmarc,(gmail does) and you
> get mail from a list that doesn't rewrite the headers, and people
> from places like yahoo post to the list, you'll likely get some form
> of warning about being being kicked off the mailing list every now
> and then. The frequency depends on how often people from p=reject
> places post, and what the settings are for bounce handling of the
> mailing list in question.
> 
> I believe that the current version of mailman can be configured to do
> the necessary header rewrites. Some lists I'm on only do the rewrites
> for headers of posts coming from p=reject sites (much less annoying
> than having them all rewritten).

This is indeed what happened.  An email from yahoo.com.uk caused gmail
to reject all the mails sent by that user because of the yahoo DMARC
settings.

We have now set the mailing list to rewrite headers.  That also has set
the From: of the email to the Mailing list and not the Original Author.
The author is moved to the CC: block and you can still easily see who
sent it and my email client (thunderbird) still does things the same way
(reply to list sends to the list, reply sends to the  original author).

 This should prevent the yahoo/gmail (or other dmarc) issues from
happening again.

For others running mailings lists on CentOS with this issue, Red Hat has
back ported the 'dmarc_moderation_action' into the current version of
mailman that is used in RHEL and CentOS.  You can follow the
instructions here for Mailman 2 (for version 2.1.18) even though the
version in CentOS is mailman-2.1.15-26.el7_4.1

we will be watching the list for the next few days to see if this change
is working as expected.  If it id not working for other email clients
please let us know.

Great job by Brian Stinson to figure all this out :)

Thanks,
Johnny Hughes





signature.asc
Description: OpenPGP digital signature
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos


Re: [CentOS] CentOS Kernel Support

2018-06-15 Thread Johnny Hughes via CentOS
On 06/15/2018 01:33 PM, Keith Keller wrote:
> On 2018-06-14, Valeri Galtsev  wrote:
>>
>> It turns out you are absolutely right. You only have provide modified 
>> source to users to whom you distribute derived work. Found it here:
>>
>>   https://www.gnu.org/licenses/gpl-faq.en.html#GPLRequireSourcePostedPublic
> 
> Not totally relevant to this thread, but relevant to repeating: since
> the code is still GPLv2, if RedHat shares its code with me, I can still
> redistribute freely, even though RedHat is not necessarily
> redistributing to the general public.  RedHat can not prevent me from
> redistribution even though I obtained the code under a paid support
> contract.  (At that point RH has zero obligation to anybody who
> downloads from me, of course.)
> 
> --keith
> 

Yes they can // well, yes and no.

You agreed to an EULA that says you will not distribute things that you
get from that paid subscription.  You can do it, and be in violation of
the terms of your subscription.

Then, you could lose said subscription privileges.  You could modify it
for your own use though.

The CentOS team would never distribute anything in that manner. Or allow
it to be distributed on CentOS.org machines/services.



signature.asc
Description: OpenPGP digital signature
___
CentOS mailing list
CentOS@centos.org
https://lists.centos.org/mailman/listinfo/centos