Re: [Mailman-Users] Mailman 3 confusion

2017-06-19 Thread tlhackque via Mailman-Users
> I still do not have Postorius or Hyperkitty installed. My use case is > a PHP-based CMS which administers Mailman 3 Core via its REST API. I > wrote a quick and dirty PHP client and it works surprisingly well. > Mailman 3 Core has been solid in production and easy to deal with via &g

[Mailman-Users] Mailman 3 confusion

2017-06-18 Thread tlhackque via Mailman-Users
I took another look at installing Mailman 3, and ended up lost and confused. I'm an experienced software person - but my Python knowledge is minimal. Fedora 25, python 3.5.3, pretty much out of the box. Mailman version: 3.1.0 (The other bits and pieces are current - 1.1) I tried to follow the

Re: [Mailman-Users] Correct Mailman setup

2017-09-23 Thread tlhackque via Mailman-Users
On 22-Sep-17 16:50, Mark Sapiro wrote: > At Fri, 22 Sep 2017 17:57:36 +0200 lusche...@yahoo.de wrote: >>> >>> Hi all >>> [Snip] >>> , but every now and then some people >>> complain about something. The most annoying thing is that messages are >>> processed but then queued for up to one hour

Re: [Mailman-Users] bulk subscribe 7K users

2017-10-02 Thread tlhackque via Mailman-Users
On 02-Oct-17 15:35, Dimitri Maziuk wrote: > Oh, I agree: mailman worked exactly as designed. Whoever designed that > particular assumed it'll take zero time to process an uploaded list of > an unknown size, and that did precisely what ass-u-me always does. No > surprises there, unfortunately. No,

Re: [Mailman-Users] How to blocking malicious subscription requests?

2017-09-05 Thread tlhackque via Mailman-Users
On 05-Sep-17 10:55, Ian Kelling wrote: > There is at least one very major mail provider where > joe+any_string@domain goes to the inbox of joe by default, allowing bad > people to get my mailman instance to send many subscription mails to > joe+random_string@domain, messing up joe's inbox, because

Re: [Mailman-Users] Recent phishing mails are targeting mailing-lists -- and do pass

2017-09-27 Thread tlhackque via Mailman-Users
SpamAssassin: Don't match X-Spam-Score unless you are extracting the value and doing computation.  Note that the value isn't necessarily numeric - e.g. 'undef - 10.0.0.23 is whitelisted' is a valid value, as are '-1.6 (-)', '0.70 () [Tag at 5.00] COMBINED_FROM,SUBJ_YOUR_DEBT,SPF(pass,0)' and

Re: [Mailman-Users] Distributed mass subscribe attack?

2017-08-18 Thread tlhackque via Mailman-Users
On 17-Aug-17 16:47, Andy Cravens wrote: > > > David, > > I forgot to mention I’m also working on a modsecurity rule to look at all > POSTs > and reject if they contain an email address with a + sign. > I understand the drive to suppress an attack. However, + is valid in e-mail addresses. It's

Re: [Mailman-Users] change links in mail footer to https

2017-12-10 Thread tlhackque via Mailman-Users
On 10-Dec-17 19:24, Mark Sapiro wrote: > > Note that with this specific issue, I could expose a list's web_page_url > in the web admin UI, but that wouldn't solve the problem. As Brian > indicates, making Mailman use https involve more than that. It also > requires certificates and web server

Re: [Mailman-Users] change links in mail footer to https

2017-12-10 Thread tlhackque via Mailman-Users
On 09-Dec-17 14:06, Mark Sapiro wrote: > On 12/09/2017 10:40 AM, Chip Davis wrote: >> That's all well and good Mark, but surely you know that any fix that >> involves issuing a shell command is useless for those of us responsible >> for lists on a shared server running cPanel (or equivalent). > >

Re: [Mailman-Users] analytics tool for mailman?

2018-05-25 Thread tlhackque via Mailman-Users
On 24-May-18 17:06, Julian H. Stacey wrote: > who just now wants extra analytics from Mailman, real bad timing ! > GDPR law hits Europe in 1 hour if CET or 2 maybe in BST, & > Many people in major through tiny companies & orgs (way beyond > a few of us Mailman admins) are freaking about that, &

Re: [Mailman-Users] Mod_Security

2018-08-02 Thread tlhackque via Mailman-Users
On 08/01/2018 09:43 AM, Bernie Cosell wrote: > And I tried my program on the Bluehost version and I was greeted with > > Not Acceptable!Not > Acceptable!An appropriate representation of the requested > resource could not be found on this server. This error was generated by > Mod_Security.<

Re: [Mailman-Users] GSOC idea: mail server/DNS server/mailing list healthcheck

2018-04-17 Thread tlhackque via Mailman-Users
On 17-Apr-18 10:28, Rich Kulawiec wrote: > The idea for this comes from some of the web sites that perform this; > unfortunately most of them are "upgrading" from simple, fast, easy > checks to bloated ones that use a ton of Javascript, can't be scripted, > and are increasingly behind

Re: [Mailman-Users] Brute force attacks on mailman web ui

2018-04-16 Thread tlhackque via Mailman-Users
On 16-Apr-18 07:38, Rich Kulawiec wrote: > On Mon, Apr 16, 2018 at 09:08:43AM +0200, mailman-admin wrote: >> Brute Force attempts can only be mitigated by e.g. fail2ban. > Nope. There are other ways. > > Brute force attacks can be pre-emptively blocked by nearly everyone > operating a Mailman

Re: [Mailman-Users] Brute force attacks on mailman web ui

2018-04-19 Thread tlhackque via Mailman-Users
On 19-Apr-18 02:46, Stephen J. Turnbull wrote: > So here's my problem. A lot of my constituency resides in CN, > occasionally including people at frequently problematic domains like > 163.com. Do you know any resources (or keywords to start googling > even!) at subnational levels? KR and CN

Re: [Mailman-Users] Brute force attacks on mailman web ui

2018-04-20 Thread tlhackque via Mailman-Users
On 19-Apr-18 23:33, Stephen J. Turnbull wrote: > tlhackque via Mailman-Users writes: > > > I'm not sure what you are looking for. > > I'm looking for anything that will help block swaths of Chinese > spammers and possibly attacks, while allowing me to do a better job

Re: [Mailman-Users] Automatic subscription based on e-mail subject

2019-01-31 Thread tlhackque via Mailman-Users
On 31-Jan-19 05:11, R. Diez wrote: > Hi all: > > I have the following recurring problem with mailing lists all over the > Internet: people do reply to my posts, by they do not address or copy > me in their replies. They send their e-mails only to the mailing list. > Or they reply to the previous

[Mailman-Users] Scrubber: filename too long

2020-06-17 Thread tlhackque via Mailman-Users
>From /usr/lib/mailman/cron/senddigests, I'm seeing this - which is the result of an annoying webbug URL in some (actually important) inbound messages. I guess one approach would be for the filename name to be simply the sha-xxx of the generated name...not being a Python person, what's the best