Re: [sqlite] Mailing list shutting down...

Check out: http://c.qyv.net/mailmansrc/info/a6250b7ba075294c This is a patch to mailman version 2.1.20 (the version deployed on sqlite.org). It adds a three day waiting period between subscription attempts. When applying this patch also be sure to edit Defaults.py (which is generated at instal

Re: [sqlite] Mailing list shutting down...

I am so offering... -Jeff On Wed, Jun 13, 2018 at 12:42 PM Richard Hipp wrote: > On 6/13/18, Michael Tiernan wrote: > > May I respectfully suggest to everyone that offering solutions, while > > valuable and helpful, may not be as valuable as the offer of assistance > > to our listmaster. > > +

Re: [sqlite] Mailing list shutting down...

The latest version of Mailman does implement a Captcha (via reCaptcha). Also, if you set mm_cfg.SUBSCRIBE_FORM_SECRET to a secret value, Mailman will insist that the subscription form be submitted after a slight delay, which defaults to 5 seconds. This features exists in the version currently used

Re: [sqlite] Mailing list shutting down...

On 2018-06-14 17:17, Vincenzo Campanella wrote: > uses googlegroups.com, that then works exactly as a mailing list > (their mail address is wx-us...@googlegroups.com); perhaps this can > give you an alternative idea... It works fine as a mailing list _if_ most (better: all) posters use it as such

Re: [sqlite] Mailing list shutting down...

Il 13.06.2018 15:28, Olivier Mascia ha scritto: Le 13 juin 2018 à 13:22, Richard Hipp a écrit : Unfortunately, I'm going to need to shut down this mailing list due to robot harassment. ... I have already suspended new subscriptions. Existing subscribers will be able to continue using this list

Re: [sqlite] Mailing list shutting down...

On Wed, 13 Jun 2018 07:22:20 -0400 Richard Hipp wrote: > Unfortunately, I'm going to need to shut down this mailing list due to > robot harassment. I am working to come up with a fix or an > alternative now. Your suggestions are welcomed. > > This mailing list has operated for many years using

Re: [sqlite] Mailing list shutting down...

On 6/13/18 6:52 PM, Bob Friesenhahn wrote: > On Wed, 13 Jun 2018, Jeffrey Schiller wrote: > >> Would limiting subscription requests to one per day help. I'm >> familiar with >> the Mailman code, having modified it for use at MIT, and can code the >> necessary changes. I suspect only one file would

Re: [sqlite] Mailing list shutting down...

On Wed, Jun 13, 2018 at 5:17 PM Simon Slavin wrote: > 13 Jun 2018, at 11:52pm, Bob Friesenhahn > wrote: > > > The problem is knowing what "one" means. The subscription request is > likely submitted via http/https into the web form and using a bogus email > subscription address (of the "victim")

Re: [sqlite] Mailing list shutting down...

13 Jun 2018, at 11:52pm, Bob Friesenhahn wrote: > The problem is knowing what "one" means. The subscription request is likely > submitted via http/https into the web form and using a bogus email > subscription address (of the "victim"). A botnet is able to submit these > requests from hundre

Re: [sqlite] Mailing list shutting down...

On Wed, 13 Jun 2018, Jeffrey Schiller wrote: Would limiting subscription requests to one per day help. I'm familiar with the Mailman code, having modified it for use at MIT, and can code the necessary changes. I suspect only one file would need to be changed. The problem is knowing what "one"

Re: [sqlite] Mailing list shutting down...

Would limiting subscription requests to one per day help. I'm familiar with the Mailman code, having modified it for use at MIT, and can code the necessary changes. I suspect only one file would need to be changed. -Jeff On Wed, Jun 13, 2018 at 6:16 PM Gary R. Schmidt wrote: > On 13/06/2018 21:

Re: [sqlite] Mailing list shutting down...

On 13/06/2018 21:42, Gary R. Schmidt wrote: On 13/06/2018 21:22, Richard Hipp wrote: Unfortunately, I'm going to need to shut down this mailing list due to robot harassment.  I am working to come up with a fix or an alternative now.  Your suggestions are welcomed. This mailing list has operated

Re: [sqlite] Mailing list shutting down...

On 14/06/2018 03:37, John Long wrote: On Wed, 2018-06-13 at 21:42 +1000, Gary R. Schmidt wrote: This is an increasing problem, and has been discussed on the Mailman mailing list recently, you should join them and see what mitigation strategies are available. Well I'm sure he would like to, b

Re: [sqlite] Mailing list shutting down...

On 6/13/18, Florian Weimer wrote: > if the bots are > actually targeting innocent users, for most recipients, they can just > use multiple aliases of the form , > , and so on. I have a accumulated a good assortment of robot counter-measures over the years, a few of which are outlined here: https:

Re: [sqlite] Mailing list shutting down...

* Richard Hipp: > On 6/13/18, Brian Curley wrote: >> Doesn't the Fossil site already have a Capcha interface built into it that >> could be adopted to enforce additional authentication around subscriptions? > > There are no captchas built into GNU MailMan. You enter your email > address to subsc

Re: [sqlite] Mailing list shutting down...

Using policyd one should be able to limit the rate at which one account (subscribe confirmation) is able to send messages to a particular address, or the overall number of mails sent to an address. https://wiki.policyd.org/quotas On Wed, Jun 13, 2018, 9:36 PM Richard Hipp wrote: > On 6/13/18, A

Re: [sqlite] Mailing list shutting down...

Richard, We use Discourse (as a user) to get support for the Mail in a Box system. MIAB use Discourse for their support systems. I also think Discourse is used for the Ionic support pages as well as they have very similar looking interfaces. Until now I paid little attention to them. I was g

Re: [sqlite] Mailing list shutting down...

On 6/13/18, Simon Slavin wrote: > > > On 13 Jun 2018, at 3:02pm, Simon Slavin wrote: > >> you might try the solution described in the lower part of >> >> >> >> and also the measure recommended here: >> >>

Re: [sqlite] Mailing list shutting down...

On 6/13/18, Alessandro Marzocchi wrote: > Do you have control over postfix server? If so maybe adding a policy to the > account used for subscription confirmation may work. I dont have a PC > available at the moment but in the case i may check. I don't see how that could possibly help. Please en

Re: [sqlite] Mailing list shutting down...

Do you have control over postfix server? If so maybe adding a policy to the account used for subscription confirmation may work. I dont have a PC available at the moment but in the case i may check. On Wed, Jun 13, 2018, 9:16 PM Chris Brody wrote: > On Wed, Jun 13, 2018 at 3:00 PM Richard Hipp

Re: [sqlite] Mailing list shutting down...

On Wed, Jun 13, 2018 at 3:00 PM Richard Hipp wrote: > > Cross-posted to the fossil-users mailing list since www.fossil-scm.org +1 > Even so, Discourse does seem like considering. Does anybody else have > any experience with Discourse, good or bad? SQLCipher switched over to Discourse for the d

Re: [sqlite] Mailing list shutting down...

On 13 Jun 2018, at 3:02pm, Simon Slavin wrote: > you might try the solution described in the lower part of > > > > and also the measure recommended here: > >

Re: [sqlite] Mailing list shutting down...

Cross-posted to the fossil-users mailing list since www.fossil-scm.org and www.sqlite.org are the same machine and both mailing lists are impacted by the current problem. On 6/13/18, Luiz Américo wrote: > How about using https://www.discourse.org/ ? > > Open source projects can use for free Than

Re: [sqlite] Mailing list shutting down...

How about using https://www.discourse.org/ ? Open source projects can use for free Luiz Em qua, 13 de jun de 2018 14:37, John Long escreveu: > On Wed, 2018-06-13 at 21:42 +1000, Gary R. Schmidt wrote: > > > > > > This is an increasing problem, and has been discussed on the Mailman > > mailing

Re: [sqlite] Mailing list shutting down...

On Wed, 2018-06-13 at 21:42 +1000, Gary R. Schmidt wrote: > > > This is an increasing problem, and has been discussed on the Mailman > mailing list recently, you should join them and see what mitigation > strategies are available. Well I'm sure he would like to, but subscriptions have probably

Re: [sqlite] Mailing list shutting down...

On 6/13/18, Michael Tiernan wrote: > May I respectfully suggest to everyone that offering solutions, while > valuable and helpful, may not be as valuable as the offer of assistance > to our listmaster. +1 :-) -- D. Richard Hipp d...@sqlite.org ___ sq

Re: [sqlite] Mailing list shutting down...

May I respectfully suggest to everyone that offering solutions, while valuable and helpful, may not be as valuable as the offer of assistance to our listmaster. ___ sqlite-users mailing list sqlite-users@mailinglists.sqlite.org http://mailinglists.sqli

Re: [sqlite] Mailing list shutting down...

On Wed, Jun 13, 2018 at 12:14:46PM -0400, Richard Hipp wrote: > (1) Nobody seems to want to own the GNU MailMan software. It is not > well maintained as far as I can see. I'm not an expert, but how does Sympa handle this? I remember a few years ago a lot of people were moving their Mailman syste

Re: [sqlite] Mailing list shutting down...

On 6/13/18, Brian Curley wrote: > Doesn't the Fossil site already have a Capcha interface built into it that > could be adopted to enforce additional authentication around subscriptions? There are no captchas built into GNU MailMan. You enter your email address to subscribe and you get a confirm

Re: [sqlite] Mailing list shutting down...

Doesn't the Fossil site already have a Capcha interface built into it that could be adopted to enforce additional authentication around subscriptions? Or a 2-step, email confirmation-type option, maybe? If they're robots causing the problem, then they wouldn't be able to mive beyond the initial att

Re: [sqlite] Mailing list shutting down...

On 6/13/18, Chris Brody wrote: > On Wed, Jun 13, 2018 at 10:44 AM jungle Boogie > wrote: >> [...] >> http://spamassassin.apache.org/ > > Maybe just add SpamAssassin to the existing GNU MailMan setup? > > http://www.jamesh.id.au/articles/mailman-spamassassin/ That solves a different problem from

Re: [sqlite] Mailing list shutting down...

On Wed, Jun 13, 2018 at 10:44 AM jungle Boogie wrote: > [...] > http://spamassassin.apache.org/ Maybe just add SpamAssassin to the existing GNU MailMan setup? http://www.jamesh.id.au/articles/mailman-spamassassin/ ___ sqlite-users mailing list sqlite-u

Re: [sqlite] Mailing list shutting down...

On 13 June 2018 at 04:22, Richard Hipp wrote: > Unfortunately, I'm going to need to shut down this mailing list due to > robot harassment. I am working to come up with a fix or an > alternative now. Your suggestions are welcomed. > OpenBSD uses Majordomo for their mailing lists: https://en.wik

Re: [sqlite] Mailing list shutting down...

On 13 Jun 2018, at 12:22pm, Richard Hipp wrote: > The most recent problem is that robots are visiting the subscription > page and entering innocent user's email addresses and names. I'm surprised the server lasted this long. That problem has been around since 2010. I don't know what you've al

Re: [sqlite] Mailing list shutting down...

> Le 13 juin 2018 à 13:22, Richard Hipp a écrit : > > Unfortunately, I'm going to need to shut down this mailing list due to > robot harassment. > ... > I have already suspended new subscriptions. Existing subscribers will > be able to continue using this list until I come up with a replacement

Re: [sqlite] Mailing list shutting down...

On 6/13/18, Tim Streater wrote: > Personally I'd be loath to see this list moved to a web page, for > instance. We invite you to submit working code that implements your desired solution. :-) -- D. Richard Hipp d...@sqlite.org ___ sqlite-users maili

Re: [sqlite] Mailing list shutting down...

On 13 Jun 2018, at 12:22, Richard Hipp wrote: > Unfortunately, I'm going to need to shut down this mailing list due to > robot harassment. I am working to come up with a fix or an > alternative now. Your suggestions are welcomed. Perhaps another subscription mechanism is needed, if that is the

Re: [sqlite] Mailing list shutting down...

On 13/06/2018 21:22, Richard Hipp wrote: Unfortunately, I'm going to need to shut down this mailing list due to robot harassment. I am working to come up with a fix or an alternative now. Your suggestions are welcomed. This mailing list has operated for many years using GNU MailMan. Unfortunat