Re: [Mailman-Users] Updated view on Sendmail integration

2018-12-04 Thread Stephen J. Turnbull
Dmitri Maziuk via Mailman-Users writes: > On Mon, 3 Dec 2018 10:30:53 -0500 > Jim Ziobro wrote: > ... > > Is the directory “/etc/mailman” group-writable only to support the > > creation of an aliases file?I would feel more confident if /etc/mailman > > was only writable by root. > > So

Re: [Mailman-Users] Updated view on Sendmail integration

2018-12-04 Thread Dmitri Maziuk via Mailman-Users
On Mon, 3 Dec 2018 10:30:53 -0500 Jim Ziobro wrote: ... > Is the directory “/etc/mailman” group-writable only to support the > creation of an aliases file?I would feel more confident if /etc/mailman > was only writable by root. So basically unix user/group access model is wrong because

Re: [Mailman-Users] Updated view on Sendmail integration

2018-12-04 Thread Mark Sapiro
On 12/3/18 7:30 AM, Jim Ziobro wrote: > > Another approach was mm-handler.Mm-handler handles the security bridge > by calling back Mailman after it has switched to UID/GID: > mailman/mailman.An elegant solution.The v3 version > optionally allows mail not

Re: [Mailman-Users] Cannot use mailman moderation over HTTPS, fix_url ineffective, mm_cfg.py does not apply

2018-12-04 Thread Mark Sapiro
On 12/4/18 4:35 AM, Nikolaos Andriopoulos wrote: > > Things checked: > - The web server configuration seems OK, and properly redirects to HTTPS. Redirects of POST lose the POST data. > - The current mm_cfg.py ( with comments omitted ) is the following: > > from Defaults import * >

[Mailman-Users] Cannot use mailman moderation over HTTPS, fix_url ineffective, mm_cfg.py does not apply

2018-12-04 Thread Nikolaos Andriopoulos
Hello, I am responsible for a server with a number of lists on a server that has Plesk installed (don't leave just yet!). Mailman administrative interface loads over HTTPS, and every page in the administration works as expected -- with the exception of message moderation, which stubbornly keeps

[Mailman-Users] Updated view on Sendmail integration

2018-12-04 Thread Jim Ziobro
I am still fairly new to Mailman but I have been a long time Sendmail user.I like to know how things work.Partly out of security paranoia and partly out of curiosity I started hacking around the MTA interface. One of the things I now see is that Mailman depends on a group for access(vs.