Hi!

We're running [email protected] and we're encountering an odd
problem: A system is sending mailing list messages that were posted on
[email protected] BACK to [email protected]

And these mails simply pass moderation (which is set to the following):
Default action to take when a member posts to the list: Default processing
Default action to take when a non-member posts to the list: discard (no 
notification)

The headers of the mail (which I put on hold, based on the IP of the
sending system):

Date: Thu, 24 Oct 2024 11:13:01 +0200
To: [email protected]
Message-ID: <[email protected]>
In-Reply-To: <[email protected]>
X-MailFrom: [email protected]
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency;
 loop; banned-address; member-moderation;
 header-match-postfix-users.postfix.org-0; nonmember-moderation;
 administrivia; implicit-dest; max-recipients; max-size; news-moderation;
 no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9
Precedence: list
Content-Type: text/plain; charset="us-ascii"
Message-ID-Hash: Z6I2WZCEBC6PUKLVOEVAW3ZU2CDR47AW
X-Message-ID-Hash: Z6I2WZCEBC6PUKLVOEVAW3ZU2CDR47AW
X-MailFrom: [email protected]
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency;
 loop; banned-address; member-moderation;
 header-match-postfix-users.postfix.org-0; nonmember-moderation;
 administrivia; implicit-dest; max-recipients; max-size; news-moderation;
 no-subject; digests; suspicious-header
Subject: 
=?utf-8?B?W+WklumDqOmCruS7tl1bcGZ4XSBb5aSW6YOo6YKu5Lu2XVvlpJbpg6jpgq7ku7ZdUmU6IE9wZW5TU0wgY29tcGlsZSB2cy4gcnVudGltZSB2ZXJzaW9uIHdhcm5pbmc=?=
From: Geert Hendrickx via Postfix-users via Postfix-users
 <[email protected]>
Reply-To: Geert Hendrickx <[email protected]>,
 Geert Hendrickx via Postfix-users <[email protected]>

So, it's the mail from "Geert Hendrickx" being resent from
[email protected] -- the headers have both 

"X-MailFrom: [email protected]" (not a member of the list) and
"X-MailFrom: [email protected]" (definitely a member of the list)

Why is the mail being accepted?
From: doesn't look right (since it says "[email protected]")

We're currently stopping these mails, but I think mm3 is not acting
correctly here (unless we're missing something)

-- 
Ralf Hildebrandt
Charité - Universitätsmedizin Berlin
Geschäftsbereich IT | Abteilung Netz | Netzwerk-Administration
Invalidenstraße 120/121 | D-10115 Berlin

Tel. +49 30 450 570 155
[email protected]
https://www.charite.de
------------------------------------------------------
Mailman-Users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/[email protected]/
    https://mail.python.org/archives/list/[email protected]/
Member address: [email protected]

Reply via email to