Re: [Mozilla Enterprise] ESR mailing list forwarding gives rise to DMARC "failures"

2019-07-19 Thread Paul Kosinski via Enterprise
Test post to see if DMARC mitigation works for us.


On Thu, 18 Jul 2019 15:43:41 -0500
Mike Kaply  wrote:

> I've updated the list settings to
> 
> Munge From -- applies the from_is_list Munge From transformation to
> these messages.
> 
> for the action to take when anyone posts to the list from a domain
> with a DMARC Reject/Quarantine Policy.
> 
> Hopefully this solves the problem without affecting too many other
> people.
> 
> Mike Kaply
> 
> On Sun, Jul 14, 2019 at 10:11 PM Paul Kosinski 
> wrote:
> 
> > Yes, I know that SPF, DKIM and DMARC can cause problems with mailing
> > lists, but people have been working on it for years. I just thought
> > that Mozilla was sophisticated enough to have implemented a
> > workaround.
> >
> > The ISC BIND users mailing list, for example, uses Mailman and in
> > their configuration the DMARC handler, modifies the "From:" address
> > and adds "Reply-To:" like so:
> >
> >   Paul Kosinski via bind-users 
> >   Reply-to: Paul Kosinski 
> >
> > The ClamAV users mailing list does something similar, also changing
> > "From:", adding "Reply-to:", but also adding a "Cc:" like so:
> >
> >   From: Paul Kosinski via clamav-users
> >  Reply-To: ClamAV users ML
> >  Cc: Paul Kosinski
> > 
> >
> > Topicbox also uses the "From:" "via" workaround. It's a shame that
> > Mozilla doesn't do something to mitigate its DMARC problem.
> >
> > P.S. Since DMARC info is supplied by the DNS server and applies to
> > the whole domain, I don't see offhand what to do that would
> > accommodate Mozilla's rather lame mailing list mechanism.
> >
> >
> >
> > On Sun, 14 Jul 2019 16:45:59 -0500
> > Don Wright  wrote:
> >
> > > Paul Kosinski wrote:
> > > >Here's another example of a DMARC "failure" when mail (from me)
> > > >is passed on to an ESR subscriber.
> > >
> > >
> > > DMARC is fundamentally broken[1] with regard to mailing lists as
> > > it only checks the From: and not the Sender: field. Mitigating
> > > DMARC-induced problems is a frequent topic on the mailman-users
> > > support mailing list.[2]
> > >
> > >
> > > [1] https://en.wikipedia.org/wiki/DMARC#Mailing_lists
> > > [2] https://mail.python.org/mailman/listinfo/mailman-users
> > ___
> > Enterprise mailing list
> > Enterprise@mozilla.org
> > https://mail.mozilla.org/listinfo/enterprise
> >
> > To unsubscribe from this list, please visit
> > https://mail.mozilla.org/listinfo/enterprise or send an email to
> > enterprise-requ...@mozilla.org with a subject of "unsubscribe"
> >
___
Enterprise mailing list
Enterprise@mozilla.org
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
enterprise-requ...@mozilla.org with a subject of "unsubscribe"


Re: [Mozilla Enterprise] Popup about Firefox ESR update even with app.update.auto set to true

2019-07-19 Thread pascal.wulleput
Dear Mike,

Thanks for your quick reply.

We’ll make sure we implement this in the near future.

Bien Cordialement / Best Regards

[logo Orange]


Pascal Wulleput
Orange Technology and Global Innovation – TGI
Orange Labs Services – OLS
Data Intelligence Enablers & Software Environnements - DIESE
Group Workplace Infrastructures & Services – GWIS
Maintenance, Support & Service Management

tel : +33 223 066 836
cel:  +33 633 467 082

pascal.wulle...@orange.com

De : Enterprise [mailto:enterprise-boun...@mozilla.org] De la part de Mike Kaply
Envoyé : vendredi 19 juillet 2019 18:01
À : TARLO Marius OBS/OCB
Cc : enterprise@mozilla.org; BREDELOUX-CHEVAL Sabrina DISU/UOM
Objet : Re: [Mozilla Enterprise] Popup about Firefox ESR update even with 
app.update.auto set to true

Yes, you need to set app.update.silent (for ESR 60)

https://searchfox.org/mozilla-esr60/source/browser/app/profile/firefox.js#158

Mike

On Fri, Jul 19, 2019 at 10:56 AM 
mailto:marius.ta...@orange.com>> wrote:
Hello,

In our .cfg file called by autoconfig.js we’ve got the following parameters :
  lockPref("app.update.enabled", true);
  lockPref("app.update.auto", true);
  lockPref("app.update.service.enabled", true);
  lockPref("browser.search.update", true);

And we’ve just switched the DisableAppUpdate from false to true in the GPO

But some people had the popup displayed in the top right corner asking the user 
he wants to download the update now or later :
[cid:image005.jpg@01D53E1A.A5A7B140]

Which I thought was normally the case when you had app.update.auto to false

Is it a normal behavior ?

Should we also set app.update.silent to true as well to have Firefox ESR 
updating silently ?

Thank you very much for your answer

Cordialement / Best regards,
[http://www.orange.com/sirius/logos_mail/orange_logo.gif]
Marius TARLO
Maintenance e-buro
FT/SCE/G2S/NRS/NEOCLES
tél. +33 1 42 75 34 25
marius.ta...@orange.com


_



Ce message et ses pieces jointes peuvent contenir des informations 
confidentielles ou privilegiees et ne doivent donc

pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce 
message par erreur, veuillez le signaler

a l'expediteur et le detruire ainsi que les pieces jointes. Les messages 
electroniques etant susceptibles d'alteration,

Orange decline toute responsabilite si ce message a ete altere, deforme ou 
falsifie. Merci.



This message and its attachments may contain confidential or privileged 
information that may be protected by law;

they should not be distributed, used or copied without authorisation.

If you have received this email in error, please notify the sender and delete 
this message and its attachments.

As emails may be altered, Orange is not liable for messages that have been 
modified, changed or falsified.

Thank you.
___
Enterprise mailing list
Enterprise@mozilla.org
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
enterprise-requ...@mozilla.org with a 
subject of "unsubscribe"

_

Ce message et ses pieces jointes peuvent contenir des informations 
confidentielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce 
message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les messages 
electroniques etant susceptibles d'alteration,
Orange decline toute responsabilite si ce message a ete altere, deforme ou 
falsifie. Merci.

This message and its attachments may contain confidential or privileged 
information that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and delete 
this message and its attachments.
As emails may be altered, Orange is not liable for messages that have been 
modified, changed or falsified.
Thank you.

___
Enterprise mailing list
Enterprise@mozilla.org
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
enterprise-requ...@mozilla.org with a subject of "unsubscribe"


Re: [Mozilla Enterprise] Popup about Firefox ESR update even with app.update.auto set to true

2019-07-19 Thread Mike Kaply
Yes, you need to set app.update.silent (for ESR 60)

https://searchfox.org/mozilla-esr60/source/browser/app/profile/firefox.js#158

Mike

On Fri, Jul 19, 2019 at 10:56 AM  wrote:

> Hello,
>
>
>
> In our .cfg file called by autoconfig.js we’ve got the following
> parameters :
>
>   lockPref("app.update.enabled", true);
>
>   lockPref("app.update.auto", true);
>
>   lockPref("app.update.service.enabled", true);
>
>   lockPref("browser.search.update", true);
>
>
>
> And we’ve just switched the DisableAppUpdate from false to true in the GPO
>
>
>
> But some people had the popup displayed in the top right corner asking the
> user he wants to download the update now or later :
>
> [image: cid:image005.jpg@01D53E1A.A5A7B140]
>
>
>
> Which I thought was normally the case when you had app.update.auto to false
>
>
>
> Is it a normal behavior ?
>
>
>
> Should we also set app.update.silent to true as well to have Firefox ESR
> updating silently ?
>
>
>
> Thank you very much for your answer
>
>
>
> Cordialement / Best regards,
>
> [image: http://www.orange.com/sirius/logos_mail/orange_logo.gif]
> 
>
> *Marius TARLO*
> Maintenance e-buro
> FT/SCE/G2S/NRS/NEOCLES
> tél. +33 1 42 75 34 25
> marius.ta...@orange.com
>
>
>
> _
>
> Ce message et ses pieces jointes peuvent contenir des informations 
> confidentielles ou privilegiees et ne doivent donc
> pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu 
> ce message par erreur, veuillez le signaler
> a l'expediteur et le detruire ainsi que les pieces jointes. Les messages 
> electroniques etant susceptibles d'alteration,
> Orange decline toute responsabilite si ce message a ete altere, deforme ou 
> falsifie. Merci.
>
> This message and its attachments may contain confidential or privileged 
> information that may be protected by law;
> they should not be distributed, used or copied without authorisation.
> If you have received this email in error, please notify the sender and delete 
> this message and its attachments.
> As emails may be altered, Orange is not liable for messages that have been 
> modified, changed or falsified.
> Thank you.
>
> ___
> Enterprise mailing list
> Enterprise@mozilla.org
> https://mail.mozilla.org/listinfo/enterprise
>
> To unsubscribe from this list, please visit
> https://mail.mozilla.org/listinfo/enterprise or send an email to
> enterprise-requ...@mozilla.org with a subject of "unsubscribe"
>
___
Enterprise mailing list
Enterprise@mozilla.org
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
enterprise-requ...@mozilla.org with a subject of "unsubscribe"


[Mozilla Enterprise] Popup about Firefox ESR update even with app.update.auto set to true

2019-07-19 Thread marius.tarlo
Hello,

In our .cfg file called by autoconfig.js we've got the following parameters :
  lockPref("app.update.enabled", true);
  lockPref("app.update.auto", true);
  lockPref("app.update.service.enabled", true);
  lockPref("browser.search.update", true);

And we've just switched the DisableAppUpdate from false to true in the GPO

But some people had the popup displayed in the top right corner asking the user 
he wants to download the update now or later :
[cid:image005.jpg@01D53E1A.A5A7B140]

Which I thought was normally the case when you had app.update.auto to false

Is it a normal behavior ?

Should we also set app.update.silent to true as well to have Firefox ESR 
updating silently ?

Thank you very much for your answer

Cordialement / Best regards,
[http://www.orange.com/sirius/logos_mail/orange_logo.gif]
Marius TARLO
Maintenance e-buro
FT/SCE/G2S/NRS/NEOCLES
tél. +33 1 42 75 34 25
marius.ta...@orange.com


_

Ce message et ses pieces jointes peuvent contenir des informations 
confidentielles ou privilegiees et ne doivent donc
pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce 
message par erreur, veuillez le signaler
a l'expediteur et le detruire ainsi que les pieces jointes. Les messages 
electroniques etant susceptibles d'alteration,
Orange decline toute responsabilite si ce message a ete altere, deforme ou 
falsifie. Merci.

This message and its attachments may contain confidential or privileged 
information that may be protected by law;
they should not be distributed, used or copied without authorisation.
If you have received this email in error, please notify the sender and delete 
this message and its attachments.
As emails may be altered, Orange is not liable for messages that have been 
modified, changed or falsified.
Thank you.

___
Enterprise mailing list
Enterprise@mozilla.org
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
enterprise-requ...@mozilla.org with a subject of "unsubscribe"


[Mozilla Enterprise] Distribution folder policies.json doesn't seem to work correctly

2019-07-19 Thread Thane K. Sherrington
I'm installing Firefox, then copying the following policies.json into 
the \program files\mozilla firefox\distribution folder but some of the 
time the settings take and sometimes they don't.


Some of the computers I'm putting Firefox on already had Firefox and I'm 
doing an uninstall then reinstall, and on others it's a fresh install.


What am I doing wrong?

{
  "policies": {
    "DisableBuiltinPDFViewer": true,
    "DisplayBookmarksToolbar": true,
    "DisplayMenuBar": true,
    "DontCheckDefaultBrowser": false,
    "FlashPlugin": {
  "Default": true
    },
    "NetworkPrediction": true,
    "Proxy": {
  "AutoLogin": true,
  "Mode": "none",
  "SOCKSVersion": 4,
  "UseHTTPProxyForAllProtocols": true,
  "UseProxyForDNS": false
    },
    "SearchEngines": {
  "Default": "Google",
  "PreventInstalls": true
    }
  }
}

Things that work randomly:

    "DisplayBookmarksToolbar": true,
    "DisplayMenuBar": true

    These two work some of the time (I'd say about 70%).  The rest of 
the time, I get none or one of the toolbars.


    I'm not sure if the other settings hold 100% of the time, because I 
can't check every install, but the toolbars are obvious.


BTW, the line     "DontCheckDefaultBrowser": false  has the opposite 
affect.  If I include this line, then Firefox never asks if it should be 
the default, and if I don't include it, it asks about 80% of the time.


Any advice would be appreciated.


--
Thane K. Sherrington

Computer Connection, Ltd. ...taking the mystery out of computers since 1982.
Winner of the 2012 Ian Spencer - Excellence in Business Award
*Thanks for making us the Reader's Choice Best Computer Store in 2016, 
2017, and 2018!*

95 College St., Antigonish,
NS B2G 1X6
902-863-3361 (phone)
902-863-2580 (fax)
th...@computerconnectionltd.com
___
Enterprise mailing list
Enterprise@mozilla.org
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
enterprise-requ...@mozilla.org with a subject of "unsubscribe"


Re: [Mozilla Enterprise] Machine readable version of release notes

2019-07-19 Thread Philipp Madersbacher
To get the current Firefox version number, you can also query
https://product-details.mozilla.org/1.0/firefox_versions.json

Am Fr., 19. Juli 2019 um 11:08 Uhr schrieb Andrew C Aitchison <
and...@aitchison.me.uk>:

> On Fri, 19 Jul 2019, Martin Sirringhaus wrote:
>
> > Is anybody aware of a place to download a more machine readable version
> > of the release notes (e.g. simple text format)?
> > Parsing the web page seems a bit fragile (and complicated).
>
> Are you looking for the full release notes or just the number of the
> current/latest version ?
>
> If the current versions are sufficent
> https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-esr/
> - and every page I have checked on that server - have:
>
>  data-latest-firefox="68.0.1" data-esr-versions="60.8.0 68.0.1"
> data-gtm-container-id="GTM-MW3R8V"  data-stub-attribution-rate="1.0">
>
> which states the latest version(s) of firefox standard and ESR.
>
> This can get a few hours ahead of the download pages (maybe the binaries
> take longer to propogate across the world ?) but has been stable over the
> many years I have used it (certainly since firefox 3.6 and 4.0 in 2012).
>
> --
> Andrew C. Aitchison Kendal, UK
> and...@aitchison.me.uk
>
> ___
> Enterprise mailing list
> Enterprise@mozilla.org
> https://mail.mozilla.org/listinfo/enterprise
>
> To unsubscribe from this list, please visit
> https://mail.mozilla.org/listinfo/enterprise or send an email to
> enterprise-requ...@mozilla.org with a subject of "unsubscribe"
>
___
Enterprise mailing list
Enterprise@mozilla.org
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
enterprise-requ...@mozilla.org with a subject of "unsubscribe"


Re: [Mozilla Enterprise] Machine readable version of release notes

2019-07-19 Thread Andrew C Aitchison

On Fri, 19 Jul 2019, Martin Sirringhaus wrote:


Is anybody aware of a place to download a more machine readable version
of the release notes (e.g. simple text format)?
Parsing the web page seems a bit fragile (and complicated).


Are you looking for the full release notes or just the number of the 
current/latest version ?


If the current versions are sufficent
https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-esr/
- and every page I have checked on that server - have:

data-latest-firefox="68.0.1" data-esr-versions="60.8.0 68.0.1" 
data-gtm-container-id="GTM-MW3R8V"  data-stub-attribution-rate="1.0">


which states the latest version(s) of firefox standard and ESR.

This can get a few hours ahead of the download pages (maybe the binaries
take longer to propogate across the world ?) but has been stable over the
many years I have used it (certainly since firefox 3.6 and 4.0 in 2012).

--
Andrew C. Aitchison Kendal, UK
and...@aitchison.me.uk

___
Enterprise mailing list
Enterprise@mozilla.org
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit https://mail.mozilla.org/listinfo/enterprise 
or send an email to enterprise-requ...@mozilla.org with a subject of 
"unsubscribe"


Re: [Mozilla Enterprise] Machine readable version of release notes

2019-07-19 Thread Martin Sirringhaus
> Hi, https://github.com/mozilla/release-notes/tree/master/releases perhaps.

Perfect! Thank you very much, indeed.
I was only aware of the MFSA-files on github.
___
Enterprise mailing list
Enterprise@mozilla.org
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
enterprise-requ...@mozilla.org with a subject of "unsubscribe"


Re: [Mozilla Enterprise] Machine readable version of release notes

2019-07-19 Thread Philipp Madersbacher
Hi, https://github.com/mozilla/release-notes/tree/master/releases perhaps.

Best regards,
philipp

Am Fr., 19. Juli 2019 um 10:20 Uhr schrieb Martin Sirringhaus <
msirringh...@suse.de>:

> Is anybody aware of a place to download a more machine readable version
> of the release notes (e.g. simple text format)?
> Parsing the web page seems a bit fragile (and complicated).
> ___
> Enterprise mailing list
> Enterprise@mozilla.org
> https://mail.mozilla.org/listinfo/enterprise
>
> To unsubscribe from this list, please visit
> https://mail.mozilla.org/listinfo/enterprise or send an email to
> enterprise-requ...@mozilla.org with a subject of "unsubscribe"
>
___
Enterprise mailing list
Enterprise@mozilla.org
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
enterprise-requ...@mozilla.org with a subject of "unsubscribe"


[Mozilla Enterprise] Machine readable version of release notes

2019-07-19 Thread Martin Sirringhaus
Is anybody aware of a place to download a more machine readable version
of the release notes (e.g. simple text format)?
Parsing the web page seems a bit fragile (and complicated).
___
Enterprise mailing list
Enterprise@mozilla.org
https://mail.mozilla.org/listinfo/enterprise

To unsubscribe from this list, please visit 
https://mail.mozilla.org/listinfo/enterprise or send an email to 
enterprise-requ...@mozilla.org with a subject of "unsubscribe"