[Mailman-Users] Mailman & DMARC policy = none?

Folks: I'm curious as to how people are setting 'dmarc_none_moderation_action'... which controls how Mailman handles domains with a dmarc policy action of none (like gmail.com). Is there a compelling reason to set it to Yes so that messages from such domains are munged or wrapped? Thanks!

[Mailman-Users] Allow posting from addresses with modifiers?

Folks: Anyone know if it's possible to configure MM 2.1 to allow posting with an email address that has a modifier? For example ... if someone is subscribed as "john+li...@example.com", but their email comes from "j...@example.com", allow that address to post? I've had some people ask me

Re: [Mailman-Users] Allow posting from addresses with modifiers?

On 1/14/2019 12:13 PM, Mark Sapiro wrote: On 1/14/19 8:40 AM, David Gibbs via Mailman-Users wrote: Anyone know if it's possible to configure MM 2.1 to allow posting with an email address that has a modifier? You can't configure Mailman to just do it without making code changes, OK, thanks

[Mailman-Users] Prevent MM from adding a CC for DMARC munged posts?

Folks: Does anyone know if there is a way to prevent MM from adding the original posters email address as a CC when the DMARC munging is done? Thanks! david -- IBM i on Power Systems: For when you can't afford to be out of business! I'm riding 615 miles (Yes, you read that right) in the

[Mailman-Users] 'Warm up' an IP when moving a mailing list server to a new host?

Folks: This isn't specific to Mailman ... but is related to mailing list servers in general. I've had my mailing lists on an in-house server for a long time (more than 15 years). I'm currently able to deliver mail to Yahoo without any problems. I've been trying to move the mailing list

Re: [Mailman-Users] Trying to secure the list server web page

On 2/27/2019 10:01 AM, Jeffrey Westgate wrote: when a list owner tends to the moderator requests, and hits the Submit All Data button... depending on the browser, it says it is going to send the information over an insecure connection and nothing happens results-wise - the request is not

Re: [Mailman-Users] Trying to secure the list server web page

On 2/27/2019 10:48 AM, Jeffrey Westgate wrote: The setting I needed was actually in the Defaults.py, and not in the mm_cfg.py. And it was http. I did the change, pushed it out, and we're back in fine form again. Don't change Defaults.py! Only change mm_cfg.py. mm_cfg.py imports Defaults.py,

Re: [Mailman-Users] Trying to secure the list server web page

On 2/27/2019 11:13 AM, Jeffrey Westgate wrote: OK. thanks for that. So I can copy/paste the same line in the mm_cfg.py, at the bottom, under the site-specific config block? Yes. david -- IBM i on Power Systems: For when you can't afford to be out of business! I'm riding 615 miles (Yes,

[Mailman-Users] FYI: Mailbait operating under a new domain

Folks: Just a FYI ... the a--hole who runs mailbait.info appears to be operating under a new domain name ... smoremail.com. If you've implemented any web rules to prevent attacks from mailbait, you'll need to update those rules. This 'service' is supposed to allow you to fill your mailbox …

Re: [Mailman-Users] Delivery errors and spam grading

On 3/18/2019 4:51 AM, Davide Marchi wrote: 1) How is it possible from Mailman monitor the delivery errors? Only sysadmin mail server from the logs? This is what VERP deliveries are for. The FROM address is tagged so that bounces can be clearly identified.

Re: [Mailman-Users] Manually treat certain domains as if they have restrictive DMARC policy

On 1/28/19 2:25 PM, Mark Sapiro wrote: List of addresses (or regexps) whose posts should always apply dmarc_moderation_action regardless of any domain specific DMARC Policy. That's close to what I want ... the only issue is that I'm looking for the behavior to be site wide not on a per-list

[Mailman-Users] Manually treat certain domains as if they have restrictive DMARC policy

Folks: I've got a number of subscribers who's email admins have set a policy such that, if a message is sent to them with their email address as the 'from' address, the message is rejected. This is causing those peoples posts to bounce ... and, ultimately, they get unsubscribed. Although

Re: [Mailman-Users] Manually treat certain domains as if they have restrictive DMARC policy

On 1/29/2019 12:13 AM, Mark Sapiro wrote: Also, Adding a global setting for dmarc_moderation_addresses on top of the per-list setting is not difficult either. See for how this was done for a global ban_list. I'm by no

[Mailman-Users] Include part of message when rejecting due to excessive size?

My memory is failing me... I thought that, when rejecting a message from the admin queue, part of the original message was included in the reject message. Is this true? When I reject messages, just the reject message is sent. If so, is there a setting that I need to adjust? If not, is there

[Mailman-Users] Check message size before moderation status?

Folks: I want to adjust my MM install so that it will check the message size before a subscribers moderation status. Would this be the appropriate change to mm_cfg.py? GLOBAL_PIPELINE.remove('Moderate') GLOBAL_PIPELINE.insert(GLOBAL_PIPELINE.index('Emergency'), 'Moderate') Thanks! david --

Re: [Mailman-Users] Best way to slow down all the spam to my lists?

On Fri, Dec 13, 2019 at 11:16 AM Chromatest J. Pantsmaker < chromat...@chromatest.net> wrote: > I'm the system admin (though I'm not great at it). I have a problem with > spam. Hundreds of spam messages are posted to my lists each week. They're > non-subscribers so they don't go to the lists,

[Mailman-Users] Re: DNSException: No Nameservers available for ...

Try setting up a caching name server on the local machine. On Wed, May 27, 2020 at 12:02 PM Lars Bjørndal wrote: > > Hello > > One member of a mailman mailing list on my system receives an error > message when posting to the list: > > You are not allowed to post to this mailing list From: a

[Mailman-Users] Re: reCAPTCHA problem with some lists

On 12/3/20 9:02 AM, Brian Carpenter wrote: Look for the following line on those lists without the reCAPTCHA element: Add the following two lines right below the above line: That should reveal reCAPTCHA via the listinfo page for would-be subscribers to check when subscribing. Folks:

[Mailman-Users] Re: reCAPTCHA problem with some lists

On 6/1/21 10:40 AM, Stephen J. Turnbull wrote: > -- > > > You're missing here. I'm pretty sure that is what accepts the input. See comment in rendered output below. Unless I'm missing something, there is no code in Mailman that replaces

[Mailman-Users] Re: reCAPTCHA problem with some lists

On 6/1/21 12:23 PM, David Gibbs wrote: On 6/1/21 10:40 AM, Stephen J. Turnbull wrote:   > --   >      >      >    You're missing here.  I'm pretty sure that is what accepts the input.  See comment in rendered output below. Unless I'm missing something, there is no

[Mailman-Users] Re: Question on /var/lib/mailman/spam

On 3/10/21 11:42 AM, Mark Sapiro wrote: This is problematic. The idea is that the site admin can use these messages to train some bayesian spam filter, but it is up to the site to implement such a process. If you want to just ignore them, you could set up a periodic cron to Here's the script

[Mailman-Users] Web requests with garbage at the end of the list name

Folks: Is anyone else seeing requests to their mailman install that look something like this: Aug 18 15:10:16 2021 (31166) Hostile listname: listname=midrange-l__;!!NVq9dfhzMyHqTw!wLl-dt8zxsuQuoyojs-UYmT_d65WZroClHaYGfHduJ561eT0B7baTQV1ogZzQKRRsw$: remote=52.34.76.65 Basically, the list

[Mailman-Users] Re: Web requests with garbage at the end of the list name

On 8/18/21 11:34 PM, Stephen J. Turnbull wrote: Is anyone else seeing requests to their mailman install that look something like this: Aug 18 15:10:16 2021 (31166) Hostile listname: listname=midrange-l__;!!NVq9dfhzMyHqTw!wLl-dt8zxsuQuoyojs-UYmT_d65WZroClHaYGfHduJ561eT0B7baTQV1ogZzQKRRsw$:

[Mailman-Users] Re: Web requests with garbage at the end of the list name

On 8/18/21 3:36 PM, Jon Baron wrote: I'm pretty sure that this comes from Proofpoint's "URL Defense" system. Ah. OK. But I don't understand what you mean by "hostile listname" being "correct". The listname before the garbage is correct. I suggest running all messages through

[Mailman-Users] Re: subscription flood, redux

On 7/28/21 4:24 PM, Karl Berry wrote: 1) The above mailman-users thread refers to using fail2ban. This sounds sensible. Does anyone have a a working fail2ban filter they can share for this? I have it setup, but it's not very sophisticated ... failregex =

[Mailman-Users] Re: is log4j2 leveraged in Mailman version 2.1.14-1?

On Fri, Dec 10, 2021 at 2:40 PM John Lake wrote: > Does Mailman version 2.1.14-1 utilize Java logging library log4j2 and if so, > what version does it use? Mailman is written in python ... it doesn't use java libraries at all. david -- IBM i on Power Systems: For when you can't afford to be