[Mailman-Users] Mailman 2.1.24 Recurring Pending Requests

[jackson]

Some time ago, spam received from a faked address.

Admin email received 8am each morning listing the pending
posts from non-members.

Go in and:

1. select 'Reject' on each post
2. add the faked sender to the block from subscribing filter
3. submit all data

Mailman reports "There are no pending requests."

Tomorrow the same thing happens reporting the same historic
date of the non-member post.

* Have checked mailserver logs; not being received daily
* Have added fake addresses to upstream anti-spam blacklist

So, narrowing-down, seems Mailman has groundhog day syndrome?
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
   https://mail.python.org/archives/list/mailman-users@python.org/

[Mailman-Users] Re: Mailman 2.1.24 Recurring Pending Requests

[Mark Sapiro]

On 1/1/21 1:55 AM, jack...@encompasserve.org wrote:
> 
> Admin email received 8am each morning listing the pending
> posts from non-members.
> 
> Go in and:
> 
> 1. select 'Reject' on each post
> 2. add the faked sender to the block from subscribing filter
> 3. submit all data
> 
> Mailman reports "There are no pending requests."
> 
> Tomorrow the same thing happens reporting the same historic
> date of the non-member post.


See the FAQ article at .

-- 
Mark Sapiro The highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/

[Mailman-Users] Re: Mailman 2.1.24 Recurring Pending Requests

[jackson]

On Fri, 1 Jan 2021, Mark Sapiro wrote:


On 1/1/21 1:55 AM, jack...@encompasserve.org wrote:


Admin email received 8am each morning listing the pending
posts from non-members.

Mailman reports "There are no pending requests."

Tomorrow the same thing happens reporting the same historic
date of the non-member post.


See the FAQ article at .


The list was indeed migrated from one instance to another.

Surely the requests need to be cleared-out of the instance
doing the email reporting.

On both, Mailman reports "There are no pending requests."

The following day, another email and recurrence of the same
dated requests recur needing to be discarded.

Sure, removing the cron jobs would stop the attend-to emails
but can't be the root cause since each morning those same old
spams would be there needing to be discarded (again).
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
   https://mail.python.org/archives/list/mailman-users@python.org/

[Mailman-Users] Re: Mailman 2.1.24 Recurring Pending Requests

[Mark Sapiro]

On 1/1/21 11:48 AM, jack...@encompasserve.org wrote:
> 
> The list was indeed migrated from one instance to another.
> 
> Surely the requests need to be cleared-out of the instance
> doing the email reporting.
> 
> On both, Mailman reports "There are no pending requests."
> 
> The following day, another email and recurrence of the same
> dated requests recur needing to be discarded.


Then neither of those instances is the one sending the notices. You need
to look at the chain of Received: headers in the notice to find the IP
of the server that is originating them. Then you have to find all the
Mailman installations on that server to see which one has the list with
the pending request.

-- 
Mark Sapiro The highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/

[Mailman-Users] Re: Mailman 2.1.24 Recurring Pending Requests

[jackson]

On Fri, 1 Jan 2021, Mark Sapiro wrote:


On 1/1/21 11:48 AM, jack...@encompasserve.org wrote:



Then neither of those instances is the one sending the notices. You need
to look at the chain of Received: headers in the notice to find the IP
of the server that is originating them. Then you have to find all the
Mailman installations on that server to see which one has the list with
the pending request.


There's only a single Mailman installation on each of the instances.

True, 'A' is sending the email but 'B' has them held in the web UI.

At the risk of exhausting everyone's patience...

What I'm still struggling with is why tomorrow, 'A' will email
(I'll go in on web admin on 'A' there'll be nothing there).  I go in
on admin on 'B' the exact ones reported in the 'A's email will be
there, I'll discard them, 'B' will then say none pending, then
tomorrow the cycle repeats.
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
   https://mail.python.org/archives/list/mailman-users@python.org/

[Mailman-Users] Re: Mailman 2.1.24 Recurring Pending Requests

[Mark Sapiro]

On 1/1/21 1:43 PM, jack...@encompasserve.org wrote:
> 
> What I'm still struggling with is why tomorrow, 'A' will email
> (I'll go in on web admin on 'A' there'll be nothing there).  I go in
> on admin on 'B' the exact ones reported in the 'A's email will be
> there, I'll discard them, 'B' will then say none pending, then
> tomorrow the cycle repeats.


Please send me one of these email notices off list. I need to see all
the headers from the raw message source. I'll see what I can see from that.

I do have an issue understanding what's happening. If you get a notice
about pending requests and go to "B" and the requests are there and you
delete them, how is it that they reappear on "B"? That's the part I
don't understand.

I suspect part of this is DNS issues possibly combined with action URLs
in web forms containing a host name which doesn't point to the current
host. I.e., you go to http://B/mailman/admindb/LIST and the action URL
for the "submit" button actually points to "A".

-- 
Mark Sapiro The highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/