Re: [Mailman-Users] Mailman Python Apache CGI issue

2019-11-04 Thread Mark Sapiro 
On 11/3/19 11:08 AM, jimw...@attglobal.net wrote:
> 
> Confirming the subscription using the email method works fine, but the
> web page confirmation is having problems.
> 
> For a user named "dot" joining the Skipper group, the URL is:
> 
> http:///mailman/confirm/skipper/b36adbfa6d4b9af927197b75006444262696b9a6
>  
...
> After the user clicks to subscribe to the group on the Confirm
> Subscription web page,
> the confirm.py script checks to see if the cookie was entered in the URL:


So the initial GET of the page at
http:///mailman/confirm/skipper/b36adbfa6d4b9af927197b75006444262696b9a6
works and it is only the subsequent "Subscribe to list ..." button that
fails.

If that is correct, POST data is getting lost. See the FAQ article at
 for some reasons why this happens
(most likely redirection from http to https, in which case do at least
steps 1-3 at ).

-- 
Mark Sapiro The highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan
--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Re: [Mailman-Users] List DMARC compliance reconfiguration

2019-11-04 Thread Mark Sapiro 
On 11/4/19 7:42 AM, Andy Cravens wrote:
> Using mailman 2.1.26.  I’m auditing the lists on my server for DMARC 
> compliance I’ve found several list configs that do not have the DMARC action 
> set to “munge_from.”  It appears I need to edit all those list and fix that 
> setting.  I’ve also noticed that in mm_cfg.py there is no setting for 
> REMOVE_DMIM_HEADERS.  I just wanted to verify the proper order for fixing 
> these issues.  Seems like I need to correct the munge_from setting for all 
> the affected lists and them as quickly as possible add REMOVE_DKIM_HEADERS = 
> 1 to mm_cfg.py and restart.  It appears that which ever task I complete first 
> some messages will be undeliverable until both changes are complete.  Maybe 
> it would be best to stop mailman, complete both changes and then restart?  
> Just looking for the best way to do this.


REMOVE_DMIM_HEADERS has nothing do do with and should not affect DMARC.
While it is true that DMARC action set to “munge_from will break DKIM,
DKIM is already broken by other list modifications to the message or you
wouldn't be having DMARC issues.

Best practice is to Munge the From: if necessary based on the DMARK
policy of the original From: domain and to DKIM sign the outgoing
message with a sig from your domain which is also the munged From: domain.

If you want Mailman to remove the older DKIM sigs, you can configure
that, but it should have no effect one way or the other. See
.

-- 
Mark Sapiro The highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan
--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Re: [Mailman-Users] Mailman with Interworx server administration

2019-11-04 Thread Brian Carpenter 

On 11/4/19 5:24 PM, Christian F Buser via Mailman-Users wrote:

Hi all

Our hosting provider writes that he wants to change from cPanel to 
Interworx.


At present, we have our virtual server on cPanel version 78.0.41, 
which includes Mailman version 2.1.27.


I found a comparison of the two environments on this page 
 
stating



Important Differences:
...
cPanel supports PostgreSQL, Mailman mailing lists, NodeJS, 
server-side Java, Ruby on Rails and the DNSSEC protocol, but 
InterWorx does not support those things at this time.

However our provider thinks that Mailman could also be installed there.

Does anybody have (positive or negative) experience with Interworx?

Thank you, Christian


Hi Christian,

Interworx is bought out by LiquidWeb. LiquidWeb is a large hosting 
provider that is abandoning cPanel due to cPanel's price increase in 
September. I doubt your current provider will be able to get Mailman 
installed since cPanel did all the heavy lifting in getting Mailman 2 to 
run on a server. Most webhosts have very little experience with Mailman 
2. Please see our blog article at:


https://www.emwd.com/cpanel-refugee-hosting/

If you want to stay with cPanel/Mailman then I like to invite you to 
consider us. However if you want to stay with your current provider, 
then please visit our Mailman hosting service at 
https://www.mailmanhost.com. We run the latest version of Mailman out 
side of our cPanel servers.


One thing cPanel has that is really nice for list admins is their track 
delivery tool for troubleshooting bounces to list members.


--
Please let me know if you need further assistance.

Thank you for your business. We appreciate our clients.
Brian Carpenter
EMWD.com

--
EMWD's Knowledgebase:
https://clientarea.emwd.com/index.php/knowledgebase

EMWD's Community Forums
http://discourse.emwd.com/

--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org

[Mailman-Users] Mailman with Interworx server administration

2019-11-04 Thread Christian F Buser via Mailman-Users 

Hi all

Our hosting provider writes that he wants to change from cPanel to 
Interworx.


At present, we have our virtual server on cPanel version 78.0.41, which 
includes Mailman version 2.1.27.


I found a comparison of the two environments on this page 
 
stating



Important Differences:
...
cPanel supports PostgreSQL, Mailman mailing lists, NodeJS, server-side 
Java, Ruby on Rails and the DNSSEC protocol, but InterWorx does not 
support those things at this time.

However our provider thinks that Mailman could also be installed there.

Does anybody have (positive or negative) experience with Interworx?

Thank you, Christian

--
Christian F. Buser, Hohle Gasse 6, CH-5507 Mellingen (Switzerland)
Hilfe f??r Strassenkinder in Ghana: http://www.chance-for-children.org
--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Re: [Mailman-Users] user unsubscribe

2019-11-04 Thread Bernie Cosell 
On 3 Nov 2019 at 8:10, Brian Carpenter wrote:

> Did you check to see if notifications were enabled on your bounce 
> processing page? You can contact your hosting provider to have them look
> into their mail logs to see why those email addresses are bouncing list
> messages.

Yup -- I have it set to notify me when the bounce-score is incremented and I 
know that I get a different message when the bounce score hits its limit.

I doubt I'll get any help from the hosting provider.   But I can ask.  They 
handle 
thousands of email lists and judging by how out of date their version of 
mailman 
is, prolly not very expert in the python/logs stuff... we'll see...

Thanks!  /bernie\
Bernie Cosell
   ber...@fantasyfarm.com
-- Too many people; too few sheep --
   



--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org

[Mailman-Users] List DMARC compliance reconfiguration

2019-11-04 Thread Andy Cravens 
Using mailman 2.1.26.  I’m auditing the lists on my server for DMARC compliance 
I’ve found several list configs that do not have the DMARC action set to 
“munge_from.”  It appears I need to edit all those list and fix that setting.  
I’ve also noticed that in mm_cfg.py there is no setting for 
REMOVE_DMIM_HEADERS.  I just wanted to verify the proper order for fixing these 
issues.  Seems like I need to correct the munge_from setting for all the 
affected lists and them as quickly as possible add REMOVE_DKIM_HEADERS = 1 to 
mm_cfg.py and restart.  It appears that which ever task I complete first some 
messages will be undeliverable until both changes are complete.  Maybe it would 
be best to stop mailman, complete both changes and then restart?  Just looking 
for the best way to do this.
--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org

[Mailman-Users] Mailman Python Apache CGI issue

2019-11-04 Thread jimw...@attglobal.net 
I am new to Mailman, and have just installed Mailman 2.1.12-26 on a 
Centos 6.5 server.


My httpd version is 2.2.15   My python version is python-2.6.6-51.

Everything appears to be working fine, except when a new subscriber 
confirms there subscription request.


The email from Mailman gives the user the option of confirming their 
subscription by going to the confirm web page.


Confirming the subscription using the email method works fine, but the 
web page confirmation is having problems.


For a user named "dot" joining the Skipper group, the URL is:

http:///mailman/confirm/skipper/b36adbfa6d4b9af927197b75006444262696b9a6 
 


The string "b36adbfa6d4b9af927197b75006444262696b9a6"  
  
is the confirmation "cookie".

After the user clicks to subscribe to the group on the Confirm Subscription web 
page,
the confirm.py script checks to see if the cookie was entered in the URL:

# Get the form data to see if this is a second-step confirmation
cgidata = cgi.FieldStorage(keep_blank_values=1)
cookie = cgidata.getvalue('cookie')
if cookie == '':
ask_for_cookie(mlist, doc, _('Confirmation string was empty.'))
return

In my installation, the cdigdata.getvalue is not returning the cookie entered 
in the URL, so
the "Enter Confirmation Cookie" web page is called ... even though the cookie 
was included in the URL.

If the user enters the "cookie" again in the "Confirmation String" window, the user 
clicking "submit" does nothing.

It appears that I have a configuration problem in my Apache or Python interface.

I am not seeing any errors in /var/log/mailman/error log.

My /etc/httpd/conf.d/mailman.conf file is not generating any errors in 
/etc/httpd/error_log, and
The redirect for "/mailman" appears to be working, since my mailman url is 
working.

From the confirm.py script, it appears the "cookie" should have been obtained 
from the URL, and there
should have been no need to call the "Enter Confirmation Cookie" to have the 
user enter the cookie again...
and as luck would have it, the Enter Confirmation Cookie web page is also not 
working.

This is definitely a new user configuration problem, and I would appreciate any 
suggestions for how to fix this problem.

Thanks,
Jim West
Email: jimw...@attglobal.net

--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Re: [Mailman-Users] user unsubscribe

2019-11-04 Thread Brian Carpenter 

On 11/3/19 7:08 AM, Richard Damon wrote:

On 11/3/19 6:05 AM, Bernie Cosell wrote:

On 2 Nov 2019 at 21:23, Mark Sapiro wrote:


On 11/2/19 5:03 PM, Bernie Cosell wrote:

...  Here's the
message i got.. no reason why:

  Subject: NPL-Folk unsubscribe notification
From: mailman-boun...@lists.puzzlers.org
To: npl-folk-ow...@lists.puzzlers.org
Date: Mon, 28 Oct 2019 22:24:21 -0700
Sender: "NPL-Folk" 

dear...@hotmail.com has been removed from NPL-Folk.

This is the generic unsubscribe notification from the list's
.ApprovedDeleteMember method. Starting with Mailman 2.1.27, it also
reported the source of the unsubscribe. The source is reported in the
entry in Mailman's subscribe log if you have access to that.

Nope.  I have no access to that and I just got another "has been removed"
message this morning.   Is there any way for a non-privileged mailman admin to
figure out why?   I didn't get any "bounce score incremented" messages for 
either
unsubscribe.

   /Bernie\

 Bernie Cosell
ber...@fantasyfarm.com
-- Too many people; too few sheep --


Its possible that your hosting service has disabled the option to
require approval to unsubscribe


Hi Bernie,

Did you check to see if notifications were enabled on your bounce 
processing page? You can contact your hosting provider to have them look 
into their mail logs to see why those email addresses are bouncing list 
messages.


--
Please let me know if you need further assistance.

Thank you for your business. We appreciate our clients.
Brian Carpenter
EMWD.com

--
EMWD's Knowledgebase:
https://clientarea.emwd.com/index.php/knowledgebase

EMWD's Community Forums
http://discourse.emwd.com/

--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org