[Mailman-Users] Umbrella List + Monthly Password Reminders = List Security Issue?
Greetings - Can someone help me with this please? We are using Mailman 2.1.8 under Sun Solaris 10 (SPARC). We have a small number of umbrella lists, each with (only) other lists subscribed as their members. A fictional example: The umbrella list [EMAIL PROTECTED] has members [EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED] The umbrella list is set up with: Send password reminders to, eg, -owner address instead of directly to user. (Details for umbrella_list) YES Suffix for use when this list is an umbrella for other lists, according to setting of previous umbrella_list setting. (Details for umbrella_member_suffix) -owner Posting through the umbrella and member lists is working fine. However I've just found that the monthly password reminders for the umbrella lists have been sent out to the subscribed member-list addresses. I was instead expecting them to go to these list names suffixed -owner and hence to the member-lists' owners only. This means that every person belonging to, say, astronomy-dept now knows the membership password used to subscribe it to the all-depts umbrella list! :-( The monthly reminders are sent out using the Mailman script cron/mailpasswds and executed from cron. I'm not a Python programmer (yet) but can manage to read the stuff and, as far as I can see, there is NOTHING in cron/mailpasswds to spot umbrella lists and send their monthly reminder to [EMAIL PROTECTED] instead of the subscribed address [EMAIL PROTECTED] All the documentation I've read and help pages I've managed to locate give no clue of this behaviour. Instead they strongly imply that by setting the umbrella_list setting to YES that password reminders are sent to the list's owners by adding the specified suffix (typically -owner) to each member's address. I'm now wondering if this is actually referring only to the Please remind me of my password link, not the monthly reminder. If so then a huge warning needs adding to the FAQ and documentation about umbrella lists advising admins NOT to turn on the monthly reminders for umbrella lists in order to avoid this big security issue. Or am I missing something/have something misconfigured? Cheers, Mike Brudenell -- The Computing Service, University of York, Heslington, York Yo10 5DD, UK Tel:+44-1904-433811 FAX:+44-1904-433740 * Unsolicited commercial e-mail is NOT welcome at this e-mail address. * -- Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/archive%40jab.org Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp
[Mailman-Users] problem with GID and postfix
hi list, after hours of searching on the net (finding that the problem is not unknown, but not yielding a solution for me) and several rebuilds of mailman (mailman-2.1.8rc1, from NetBSD pkgsrc) i'm stuck. as advised, i built mailman with --with-mail-gid=nobody (for postfix), but this leads me to following problem when trying to post to a newly created (the first, one and only on the machine) list: Group mismatch error. Mailman expected the mail wrapper script to be executed as group nobody, but the system's mail server executed the mail script as group mailman. Try tweaking the mail server to run the script as group nobody, or re-run configure, providing the command line option `--with-mail-gid=mailman'. i figure that i need to tell postfix to run /usr/pkg/lib/mailman/mail/mailman request [EMAIL PROTECTED] as nobody. can i force postfix to do this? any hints greatly appreciated - thanks in advance, -- Timo Schoeler | http://riscworks.net/~tis | [EMAIL PROTECTED] RISCworks -- Perfection is a powerful message ISP | POWER PowerPC afficinados | Networking, Security, BSD services GPG Key fingerprint = C9CA 7A13 4250 44EF CC58 938F AE29 5465 6E09 3093 There are 10 types of people in the world. Those who understand binary and those who don't. -- Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/archive%40jab.org Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp
[Mailman-Users] pruning archives
Is this still the easiest way to prune archives? Seems rather labor intensive... http://www.python.org/cgi-bin/faqw-mm.py?req=showfile=faq03.003.htp http://www.python.org/cgi-bin/faqw-mm.py?req=showfile=faq03.003.htp -- Anne Ramey -- Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/archive%40jab.org Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp
[Mailman-Users] Can't run mm_cfg.py
Hi. I'm unable to configure Mailman, because when I edit and run mm_cfg.py (python ./mm_cfg.py) I get this error: Traceback (most recent call last): File ./mm_cfg.py, line 44, in ? from Defaults import * ImportError: No module named Defaults Well, Defaults.py, Defaults.pyo and Defaults.pyc are sitting right there in the current directory. I'm not a Python expert, perhaps that isn't what's being looked for? I'm running 2.1.5 under Debian Sarge, using Python 2.3.5. Any other information that can help figure this out, please ask. I have resubscribed to the mailing list, so there's no need to copy me personally on any answers. (I think the old custom of summarizing for mailing lists is finally dead, unfortunately.) I did search the archive and found no mention of this problem. And I'll be very grateful for any assistance. -- Carl Fink [EMAIL PROTECTED] Patriotism is supporting your country all the time, and your government when it deserves it. - Mark Twain -- Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/archive%40jab.org Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp
Re: [Mailman-Users] Can't run mm_cfg.py
On Thu, 1 Jun 2006, Carl Fink wrote: I'm unable to configure Mailman, because when I edit and run mm_cfg.py You don't run mm_cfg.py You just edit it. It contains values that are then read by the other programs when they run. == Chris Candreva -- [EMAIL PROTECTED] -- (914) 967-7816 WestNet Internet Services of Westchester http://www.westnet.com/ -- Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/archive%40jab.org Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp
Re: [Mailman-Users] Umbrella List + Monthly Password Reminders = ListSecurity Issue?
Mike Brudenell wrote: All the documentation I've read and help pages I've managed to locate give no clue of this behaviour. Instead they strongly imply that by setting the umbrella_list setting to YES that password reminders are sent to the list's owners by adding the specified suffix (typically -owner) to each member's address. I'm now wondering if this is actually referring only to the Please remind me of my password link, not the monthly reminder. If so then a huge warning needs adding to the FAQ and documentation about umbrella lists advising admins NOT to turn on the monthly reminders for umbrella lists in order to avoid this big security issue. Or am I missing something/have something misconfigured? I think you are correct. I think cron/mailpasswds should be fixed. I don't know how this has been ignored for so long. In the mean time, I think the following (Warning - totally untested and watch out for wrapped lines) patch will fix it. --- mailpasswds 2006-04-15 17:38:24.0 -0700 +++ mailpasswdsx2006-06-01 07:30:07.84375 -0700 @@ -162,6 +162,8 @@ optionsurl = mlist.GetOptionsURL(member) lang = mlist.getMemberLanguage(member) info = (listaddr, password, optionsurl, lang) +if mlist.umbrella_list: +member = mlist.GetMemberAdminEmail(member).lower() userinfo.setdefault(member, []).append(info) # Now that we've collected user information for this host, send each # user the password reminder. -- Mark Sapiro [EMAIL PROTECTED] The highway is for gamblers, San Francisco Bay Area, Californiabetter use your sense - B. Dylan -- Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/archive%40jab.org Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp
Re: [Mailman-Users] problem with GID and postfix
Timo Schoeler wrote: i figure that i need to tell postfix to run /usr/pkg/lib/mailman/mail/mailman request [EMAIL PROTECTED] as nobody. can i force postfix to do this? You have two choices. Postfix runs the pipe as the user:group that owns the alias file that the pipe came from. You could change the group of data/aliases* to nobody, but that with cause other problems with automatic alias generation for Postfix (assuming you have set MTA = 'Postfix') The better choice is to rerun configure with --with-mail-gid=mailman and reinstall. -- Mark Sapiro [EMAIL PROTECTED] The highway is for gamblers, San Francisco Bay Area, Californiabetter use your sense - B. Dylan -- Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/archive%40jab.org Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp
[Mailman-Users] password reminders, subscribers with [EMAIL PROTECTED]
I have a mailing list set up to send monthly password reminders. Today, two of these reminder messages ended up in the Administrative requests for the list as being posted to the list from non-members. Coincidentally, the subscriber's email addresses are [EMAIL PROTECTED] Their email address usernames are the same as the name of the problematic list sending out the password reminders, but their complete email address is in another domain. I am running Mailman 2.1.8 on RHEL4 with Exim. Any ideas? I suppose I could post headers if this is not clear. -- Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/archive%40jab.org Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp
Re: [Mailman-Users] Can't run mm_cfg.py
Carl Fink wrote: I'm unable to configure Mailman, because when I edit and run mm_cfg.py (python ./mm_cfg.py) I get this error: Traceback (most recent call last): File ./mm_cfg.py, line 44, in ? from Defaults import * ImportError: No module named Defaults As Christopher said in another reply, you don't run mm_cfg.py, you just edit it. Mailman modules import it. However, you may wish to run it just to error check it, and the above should work, i.e. cd $prefix/Mailman python ./mm_cfg.py should be able to import from Defaults, so I don't know what's happening unless you have a base mm_cfg.py from some packager that contains things I don't know about. -- Mark Sapiro [EMAIL PROTECTED] The highway is for gamblers, San Francisco Bay Area, Californiabetter use your sense - B. Dylan -- Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/archive%40jab.org Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp
Re: [Mailman-Users] Can't run mm_cfg.py
Mark Sapiro wrote: Carl Fink wrote: I'm unable to configure Mailman, because when I edit and run mm_cfg.py (python ./mm_cfg.py) I get this error: Traceback (most recent call last): File ./mm_cfg.py, line 44, in ? from Defaults import * ImportError: No module named Defaults As Christopher said in another reply, you don't run mm_cfg.py, you just edit it. Mailman modules import it. However, you may wish to run it just to error check it, and the above should work, i.e. cd $prefix/Mailman python ./mm_cfg.py should be able to import from Defaults, so I don't know what's happening unless you have a base mm_cfg.py from some packager that contains things I don't know about. End original message. - Yeah, that all seems a bit strange but if he can stop and successfully restart his qrunners, then the edits are syntactically correct and mailman can at least understand what is there. Whether those edits are then lexically and logically correct is another story altogether. Dragon ~~~ Venimus, Saltavimus, Bibimus (et naribus canium capti sumus) ~~~ -- Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/archive%40jab.org Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp
Re: [Mailman-Users] pruning archives
Greetings - --On 1 June 2006 09:02:15 -0400 Anne Ramey [EMAIL PROTECTED] wrote: Is this still the easiest way to prune archives? Seems rather labor intensive... http://www.python.org/cgi-bin/faqw-mm.py?req=showfile=faq03.003.htp http://www.python.org/cgi-bin/faqw-mm.py?req=showfile=faq03.003.htp There are probably other utilities to do this task but the one that springs to my mind is mailutil from the University of Washington (UW) IMAP Utilities distribution. mailutil was originally designed to create mail folders in particular storage formats, either locally or on a remote IMAP server. However feeping creaturism added other facilities such as copying or moving messages between any combination of local and/or remote folders. Amongst these is the prune option which lets you prune a mail folder based on a selection string. The selection string itself is given in the format used by IMAP2's SEARCH command (RFC 117). [I actually suspect it now supports IMAP4rev1's SEARCH command syntax (RFC 2060, section 6.4.4) ... if this is indeed different.] The example given in mailutil's man page is: mailutil prune INBOX before 1-jan-2004 Because mailutil is built using the UW C-Client library it understands a great many different mail folder storage formats, and can certainly be used on traditional UNIX/Berkeley/mbox formatted folders. You can see the man page for mailutil (and the other IMAP utilities) at http://www.washington.edu/pine/man/#mailutil Source code, and pre-built binaries for a number of platforms, for C-Client, Pine, the IMAP server and IMAP utilities can be found at: http://www.washington.edu/pine/getpine/ mailutil is in its imap/src/mail/utils directory. Alternatively you can just get the IMAP server + C-Client source code at: ftp://ftp.cac.washington.edu:21//imap/imap.tar.Z If I'm right in thinking this deletes messages from mail folders then you might find it a very useful tool: its selection criteria are very flexible, enabling you to select messages by date, sender, recipient, size, read/unread status, etc CAUTION: I have used mailutil to create mail folders and copy messages around, but haven't yet tried its prune option. However I'm expecting it will work. If someone tries it perhaps they could report back to the list? Cheers, Mike B-) -- The Computing Service, University of York, Heslington, York Yo10 5DD, UK Tel:+44-1904-433811 FAX:+44-1904-433740 * Unsolicited commercial e-mail is NOT welcome at this e-mail address. * -- Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/archive%40jab.org Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp
Re: [Mailman-Users] password reminders, subscribers with [EMAIL PROTECTED]
On 6/1/06 7:51 AM, Dewhirst, Rob [EMAIL PROTECTED] wrote: I have a mailing list set up to send monthly password reminders. Today, two of these reminder messages ended up in the Administrative requests for the list as being posted to the list from non-members. Coincidentally, the subscriber's email addresses are [EMAIL PROTECTED] Their email address usernames are the same as the name of the problematic list sending out the password reminders, but their complete email address is in another domain. I am running Mailman 2.1.8 on RHEL4 with Exim. Any ideas? I suppose I could post headers if this is not clear. Exim is seeing just the local part of the addresses when it processes aliases. I don't know how RedHat is packaging Mailman--assuming that's how you installed Mailman. I see that our installation would have the same problem, now that I look at our Exim configuration on the Mailman machine: mailman_router: driver = accept require_files = MAILMAN_HOME/lists/$local_part/config.pck local_part_suffix_optional local_part_suffix = -bounces : -bounces+* : \ -confirm+* : -join : -leave : \ -owner : -request : -admin transport = mailman_transport In other words, if the local part of an address matches a list name, exim will treat the address as something to send to the list. Now that you've pointed out the problem, it would appear that the school solution for Exim configuration for lists is flawed. (And has worked at many sites for many years.) I think there should probably be something like domains = +mailman_domains as a condition in the router. Where that list would be defined in the early part of the configuration as something like domainlist mailman_domains = mailman.example.com : lists.example.com as needed (the above would be right for us were we example.com). An Exim macro could also be used, as was done with MAILMAN_HOME in the above. The above is top-of-the-head, and untested. I wonder whether the published solution ought to be changed. Note that if one is doing virtual domains--in the limited way Mailman does it now, it would be better to fill the mailman_domains list by reading a file, which could be managed by whatever software establishes lists in domains. When Mailman begins allowing real virtual hosting, the Exim solution will need to be changed, perhaps using a series of routers imported from a file managed by the management software (Exim does handle import statements in its configuration file--a feature which the stock Debian configuration for Exim exercises heavily). -- Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/archive%40jab.org Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp
Re: [Mailman-Users] Can't run mm_cfg.py
On Thu, Jun 01, 2006 at 08:30:34AM -0700, Dragon wrote: Yeah, that all seems a bit strange but if he can stop and successfully restart his qrunners, then the edits are syntactically correct and mailman can at least understand what is there. Whether those edits are then lexically and logically correct is another story altogether. I actually did restart Mailman, with no errors, and so far it seems to have taken my changes. If mm_cfg is just there to be read from, why is it a script instead of a text file /etc/mailman? -- Carl Fink [EMAIL PROTECTED] Patriotism is supporting your country all the time, and your government when it deserves it. - Mark Twain -- Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/archive%40jab.org Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp
Re: [Mailman-Users] Can't run mm_cfg.py
At 12:14 PM -0400 2006-06-01, Carl Fink wrote: I actually did restart Mailman, with no errors, and so far it seems to have taken my changes. If mm_cfg is just there to be read from, why is it a script instead of a text file /etc/mailman? Because with a text /etc/mailman.cf configuration file, you then have to write a program to parse that content and to deal with all possible exceptions. When the configuration is done in the Python language in a Python script, you can let Python do all the parsing, and do the equivalent of #include in order to pull in all your configuration details. -- Brad Knowles, [EMAIL PROTECTED] Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety. -- Benjamin Franklin (1706-1790), reply of the Pennsylvania Assembly to the Governor, November 11, 1755 LOPSA member since December 2005. See http://www.lopsa.org/. -- Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/archive%40jab.org Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp
Re: [Mailman-Users] Can't run mm_cfg.py
On Thu, Jun 01, 2006 at 11:18:04AM -0500, Brad Knowles wrote: When the configuration is done in the Python language in a Python script, you can let Python do all the parsing, and do the equivalent of #include in order to pull in all your configuration details. Fair enough. Like I wrote, I'm no Python expert. Thanks. -- Carl Fink [EMAIL PROTECTED] Patriotism is supporting your country all the time, and your government when it deserves it. - Mark Twain -- Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/archive%40jab.org Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp
Re: [Mailman-Users] Can't run mm_cfg.py
On 6/1/06 9:30 AM, Carl Fink [EMAIL PROTECTED] wrote: On Thu, Jun 01, 2006 at 11:18:04AM -0500, Brad Knowles wrote: When the configuration is done in the Python language in a Python script, you can let Python do all the parsing, and do the equivalent of #include in order to pull in all your configuration details. Fair enough. A downside is that there is no proper place for Defaults.py and mm_cfg.py They are configuration, so they go into /etc somewhere. They are executable, so they DON'T go into /etc. Not a problem with the stock Mailman layout, but it does cause problems for one trying to match the file system standard (such as the Red Hat packaging of Mailman, which shotguns Mailman into several different places--and is well done). --John -- Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/archive%40jab.org Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp
Re: [Mailman-Users] Can't run mm_cfg.py
Carl Fink wrote: On Thu, Jun 01, 2006 at 11:18:04AM -0500, Brad Knowles wrote: When the configuration is done in the Python language in a Python script, you can let Python do all the parsing, and do the equivalent of #include in order to pull in all your configuration details. Fair enough. Like I wrote, I'm no Python expert. I am no Python expert either, but i am a competent perl and C++ programmer. After about 4 years of tweaking and changing Python code, I've learned to appreciate it's power, but also it's simplicity. Python is a very well designed programming language, Mailman is just one of many great apps that prove this. -Jim P. -- Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/archive%40jab.org Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp
Re: [Mailman-Users] Can't run mm_cfg.py
John W. Baxter wrote: On 6/1/06 9:30 AM, Carl Fink [EMAIL PROTECTED] wrote: On Thu, Jun 01, 2006 at 11:18:04AM -0500, Brad Knowles wrote: When the configuration is done in the Python language in a Python script, you can let Python do all the parsing, and do the equivalent of #include in order to pull in all your configuration details. Fair enough. A downside is that there is no proper place for Defaults.py and mm_cfg.py They are configuration, so they go into /etc somewhere. They are executable, so they DON'T go into /etc. Not a problem with the stock Mailman layout, but it does cause problems for one trying to match the file system standard (such as the Red Hat packaging of Mailman, which shotguns Mailman into several different places--and is well done). I have custom Mailman installs (from source releases) on my systems. The way that I solve this problem, of desiring all configuration files to exist in /etc, is to hardlink /usr/local/mailman/Mailman/mm_cfg.py (and a few others) to a directory I created (/etc/mailman) on each system. I do the same for MoinMoin (a Python wiki). This way I can periodically backup etc and not have to worry about a large bloated backup of easily re-installed applications. -Jim P. -- Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/archive%40jab.org Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp
[Mailman-Users] Admin can't login
Hello all, I am new to mailman. When I entered password on admin page ( http://lists.mysite.org/mailman/admin/mailman) and clicked the login button, it take no effect. Tha page just refresh. I am running Mailman on debian with exim4. Please help. Thanks! Jesse -- Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/archive%40jab.org Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp
[Mailman-Users] Some Users Unable to Post
Hi: I run a Sun Cobalt RAQ 550 with Mailman, and about 90 lists. I have a few users, on various lists who are subscribed to a given list, who can reply to an existing message, but who can't post an original message. they are then rejected as a non-member. Any ideas? David Andrews David Andrews and white cane Harry. -- Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/archive%40jab.org Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp
[Mailman-Users] VERP active where it shouldn't
Hi, I am running a Mailman from Debian stable (2.1.5-8sarge2), and I experimented the following issue: - even if disabled in Defaults.py and not enabled in mm_cfg.py, VERP seems to be activated from time to time. I am guessing it is activated only when something already bounced on a user (?). Most mail sent out don't have the VERP (user=host+id) stuff at all as Sender:, and when they have something it's a cookie: [EMAIL PROTECTED] My questions: - is there a `mailman_display_config' command which would return the *actually used* mailman configuration (maybe I am looking at the wrong config file or Defaults.py file) ? - how to disable VERP *completely * ? In my case, VERP cannot work, because + is *not* used for multi-addresses recipients. Excerpt from config: grep VERP mm_cfg.py /usr/lib/mailman/Mailman/Defaults.py VERP_DELIVERY_INTERVAL = 0 VERP_PERSONALIZED_DELIVERIES = No VERP_CONFIRMATIONS = No VERP_PASSWORD_REMINDERS = No Thank you for any ideas! (otherwise thank you for Mailman, which I use since a few years on lists.alphanet.ch) -- Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/archive%40jab.org Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp
Re: [Mailman-Users] Can't run mm_cfg.py
In a flurry of recycled electrons, Jim Popovitch wrote: I am no Python expert either, but i am a competent perl and C++ programmer. After about 4 years of tweaking and changing Python code, I've learned to appreciate it's power, but also it's simplicity. Python is a very well designed programming language, Mailman is just one of many great apps that prove this. In general, I agree, but I question a language that relies on indent level for blocking and don't let you include blank lines for readability. I guess it's ok when you get used to it. But then again, I mostly work in tcl at this point... :-) Of course, YMMV z! -- Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/archive%40jab.org Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp
Re: [Mailman-Users] message body is blank for some users
Hi Brad Thank you for this. The user's messy headings reveal Content-Type: text/html; format=flowed. Is this all I need to know? I am using Eudora which shows plenty of messy headings. I don't know if it is a MUA or not. Please could you explain this term. Also, the messy headings don't have any mention of MIME. I'm sorry to say I don't even know what this term means. Please could you enlighten me? In the meantime I have changed my settings to Should Mailman convert text/html parts to plain text? = No. I'll ask the user to post and see what happens. Many thanks for your patience Nigel At 21:58 31/5/06, Brad Knowles wrote: This user is probably sending out an HTML-formatted message (or in some other MIME format), and you have Mailman configured to strip HTML (or whatever the other MIME format is). Check your settings. Have the user send you a message directly, then use whatever techniques your MUA allows you to have to see all the messy headers and MIME body structure. If you don't have an MUA that lets you see all that, you'll need to get an MUA that will. Secretary of Heal Campaigning for a Sustainable Balanced Community www.healheadingley.org.uk -- Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/archive%40jab.org Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp
Re: [Mailman-Users] Can't run mm_cfg.py
On 6/1/06 1:10 PM, Carl Zwanzig [EMAIL PROTECTED] wrote: In general, I agree, but I question a language that relies on indent level for blocking and don't let you include blank lines for readability. I guess it's ok when you get used to it. But then again, I mostly work in tcl at this point... :-) Of course, YMMV And if braces for structure move into Python as a required thing (unlikely, as long as the BDFL is around, and he's much younger than I am), I stop with the version upgrades. The clearly visible structure was one of the first things that attracted me. As you say, YMMV. --John -- Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/archive%40jab.org Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp
[Mailman-Users] Taking word bounces out of received emails......
...IS THERE AN EASY WAY TO DO THIS? When clients see the word bounces in the email it makes them nervous. Like: [EMAIL PROTECTED] Help please. We are running windows, is there any easy way to take this word out by using the web interface? thanks -- Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/archive%40jab.org Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp
[Mailman-Users] Why can't anyone post to mailing Lists
I want to use our mailing list more like a mail alias, I need it to be open so anyone can mail to it without seeking approval from the moderatordoes anyone know how set this up? thanks -- Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/archive%40jab.org Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp
Re: [Mailman-Users] message body is blank for some users
At 10:02 PM +0100 2006-06-01, Heal Secretary wrote: The user's messy headings reveal Content-Type: text/html; format=flowed. Is this all I need to know? That's unlikely to be all that you need to know. I am using Eudora which shows plenty of messy headings. I don't know if it is a MUA or not. Eudora is an MUA (Mail User Agent), and I happen to use the same program. However, you need to look at more than just the headers -- you also need to look at the raw message body, which is something that Eudora does not do (so far as I know). Try saving a copy of the message to a file, then pull up that file in a text editor. Please could you explain this term. Also, the messy headings don't have any mention of MIME. I'm sorry to say I don't even know what this term means. Please could you enlighten me? MIME is how Internet e-mail handles binary content. However, although there are some official standards for MIME, very few programs actually implement all of those standards the same way. What you need to be able to see is the internal MIME structure of the message. In the meantime I have changed my settings to Should Mailman convert text/html parts to plain text? = No. I'll ask the user to post and see what happens. That may not help. Give it a try, but don't be surprised if it doesn't work. -- Brad Knowles, [EMAIL PROTECTED] Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety. -- Benjamin Franklin (1706-1790), reply of the Pennsylvania Assembly to the Governor, November 11, 1755 LOPSA member since December 2005. See http://www.lopsa.org/. -- Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/archive%40jab.org Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp
Re: [Mailman-Users] Taking word bounces out of received emails......
At 4:32 PM -0700 2006-06-01, The Lafferty wrote: We are running windows, is there any easy way to take this word out by using the web interface? See http://www.python.org/cgi-bin/faqw-mm.py?req=showfile=faq02.003.htp. -- Brad Knowles, [EMAIL PROTECTED] Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety. -- Benjamin Franklin (1706-1790), reply of the Pennsylvania Assembly to the Governor, November 11, 1755 LOPSA member since December 2005. See http://www.lopsa.org/. -- Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/archive%40jab.org Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp
Re: [Mailman-Users] Why can't anyone post to mailing Lists
The Lafferty wrote: I want to use our mailing list more like a mail alias, I need it to be open so anyone can mail to it without seeking approval from the moderatordoes anyone know how set this up? In the admin interface Privacy options...-Sender filters set generic_nonmember_action to accept. -- Mark Sapiro [EMAIL PROTECTED] The highway is for gamblers, San Francisco Bay Area, Californiabetter use your sense - B. Dylan -- Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/archive%40jab.org Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp
Re: [Mailman-Users] Can't run mm_cfg.py
Carl Zwanzig wrote: In general, I agree, but I question a language that relies on indent level for blocking and don't let you include blank lines for readability. I guess it's ok when you get used to it. The forced indentation is something there will probably never be even close to universal agreement on - some love it, some hate it, very few are neutral. But why do you think you can't include blank lines? -- Mark Sapiro [EMAIL PROTECTED] The highway is for gamblers, San Francisco Bay Area, Californiabetter use your sense - B. Dylan -- Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/archive%40jab.org Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp
Re: [Mailman-Users] Admin can't login
J. Lee wrote: I am new to mailman. When I entered password on admin page ( http://lists.mysite.org/mailman/admin/mailman) and clicked the login button, it take no effect. Tha page just refresh. I am running Mailman on debian with exim4. If the refreshed page said Authorization failed. in red at the top, it is likely an incorrect password. If it truly just refreshed, see http://www.python.org/cgi-bin/faqw-mm.py?req=showfile=faq04.045.htp. -- Mark Sapiro [EMAIL PROTECTED] The highway is for gamblers, San Francisco Bay Area, Californiabetter use your sense - B. Dylan -- Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/archive%40jab.org Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp
Re: [Mailman-Users] Admin can't login
Hi, I just found the problem, which was caused by Slash(www.slashcode.com, my main site running it). When stopped Slash, my browser can receive cookies from Mailman, everything works well. When slash start, mailman's cookie doesn't work, I can't login to admin page. Thanks for your reply. Sorry for my English. Jesse On 6/2/06, Mark Sapiro [EMAIL PROTECTED] wrote: J. Lee wrote: I am new to mailman. When I entered password on admin page ( http://lists.mysite.org/mailman/admin/mailman) and clicked the login button, it take no effect. Tha page just refresh. I am running Mailman on debian with exim4. If the refreshed page said Authorization failed. in red at the top, it is likely an incorrect password. If it truly just refreshed, see http://www.python.org/cgi-bin/faqw-mm.py?req=showfile=faq04.045.htp. -- Mark Sapiro [EMAIL PROTECTED] The highway is for gamblers, San Francisco Bay Area, Californiabetter use your sense - B. Dylan -- Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/jesse.solidot%40gmail.com Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp -- Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/archive%40jab.org Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp
Re: [Mailman-Users] Some Users Unable to Post
David Andrews wrote: I run a Sun Cobalt RAQ 550 with Mailman, and about 90 lists. I have a few users, on various lists who are subscribed to a given list, who can reply to an existing message, but who can't post an original message. they are then rejected as a non-member. Any ideas? There must be some difference in headers or envelope sender between a reply and a new message in these cases. Have the user(s) both send a new message to you rather than the list and reply to a list message but re-address the reply to you. Then look at headers in these messages. Look at From:, Return-Path: (which reflects the envelope sender), Reply-To: and Sender: which are the addresses used to determine list membership (assuming you haven't set SENDER_HEADERS in mm_cfg.py). -- Mark Sapiro [EMAIL PROTECTED] The highway is for gamblers, San Francisco Bay Area, Californiabetter use your sense - B. Dylan -- Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/archive%40jab.org Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp
Re: [Mailman-Users] VERP active where it shouldn't
[EMAIL PROTECTED] wrote: I am running a Mailman from Debian stable (2.1.5-8sarge2), and I experimented the following issue: - even if disabled in Defaults.py and not enabled in mm_cfg.py, VERP seems to be activated from time to time. I am guessing it is activated only when something already bounced on a user (?). Most mail sent out don't have the VERP (user=host+id) stuff at all as Sender:, and when they have something it's a cookie: [EMAIL PROTECTED] That's a VERP probe. My questions: - is there a `mailman_display_config' command which would return the *actually used* mailman configuration (maybe I am looking at the wrong config file or Defaults.py file) ? No. - how to disable VERP *completely * ? In my case, VERP cannot work, because + is *not* used for multi-addresses recipients. Excerpt from config: grep VERP mm_cfg.py /usr/lib/mailman/Mailman/Defaults.py mm_cfg.py should be in the same directory as Defaults.py unless this is a Debian thing. VERP_DELIVERY_INTERVAL = 0 VERP_PERSONALIZED_DELIVERIES = No VERP_CONFIRMATIONS = No VERP_PASSWORD_REMINDERS = No You seem to have edited out quite a bit of the grep result :-) You are running Mailman 2.1.5. VERP probes were introduced in 2.1.5 and couldn't be turned off. This was recognized to be a mistake, so beginning in 2.1.6 they are controlled by VERP_PROBES which defaults to No. In 2.1.5, you could effectively change the sender of the probe from [EMAIL PROTECTED] to [EMAIL PROTECTED] by changing VERP_PROBE_FORMAT, but this will break bounce processing because in 2.1.5, disabling a bouncing user relies on receiving a bounced probe with the token. Your choices are: Upgrade (maybe not easy/possible with a Debian package). Complain to Debian. Modify Mailman/Bouncer.py to either implement mm_cfg.VERP_PROBES or just remove VERP probes all together. See http://svn.sourceforge.net/viewcvs.cgi/mailman/branches/Release_2_1-maint/mailman/Mailman/Bouncer.py?r1=7147r2=7190 Turn off bounce processing for the list. -- Mark Sapiro [EMAIL PROTECTED] The highway is for gamblers, San Francisco Bay Area, Californiabetter use your sense - B. Dylan -- Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/archive%40jab.org Security Policy: http://www.python.org/cgi-bin/faqw-mm.py?req=showamp;file=faq01.027.htp
