[Mailman-Users] messages from members not distributed to moderated list

2021-08-29 Thread Scott Crawford
Hello, I’m hoping someone can help with this issue.

Using Mailman version 2.1.33, that is the default list software under cPanel.

Managing multiple lists and have this same issue for a long time now.

Emergency moderation of all list traffic is On, but list members should be able 
to send to the list after their message is approved by a moderators.

However, only messages that are actually sent from a moderator to the list are 
actually distributed to the list. 

Messages send by list members show up in the pending requests moderation queue, 
but when approved by the moderator they just disappear and are not sent out to 
the list. 

This bug appears to be reproducible consistently across multiple installations 
of Mailman. 
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: Web requests with garbage at the end of the list name

2021-08-29 Thread Thomas Hochstein
Jon Baron wrote:

>> Aug 18 15:10:16 2021 (31166) Hostile listname: 
>> listname=midrange-l__;!!NVq9dfhzMyHqTw!wLl-dt8zxsuQuoyojs-UYmT_d65WZroClHaYGfHduJ561eT0B7baTQV1ogZzQKRRsw$:
>>  
>> remote=52.34.76.65
>> 
>> Basically, the list name is correct, but the added "__;!NV..." makes it 
>> invalid.
>
> But I don't understand what you mean by "hostile
> listname" being "correct".

"midrange-l" is a correct name of an existing list.

"midrange-l__;!!NVq9dfhzMyHqTw!wLl-dt8zxsuQuoyojs-UYmT_d65WZroClHaYGfHduJ561eT0B7baTQV1ogZzQKRRsw$"
is not.

-thh
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: Web requests with garbage at the end of the list name

2021-08-29 Thread Mark Sapiro

On 8/18/21 1:15 PM, David Gibbs via Mailman-Users wrote:

Folks:

Is anyone else seeing requests to their mailman install that look 
something like this:


Aug 18 15:10:16 2021 (31166) Hostile listname: 
listname=midrange-l__;!!NVq9dfhzMyHqTw!wLl-dt8zxsuQuoyojs-UYmT_d65WZroClHaYGfHduJ561eT0B7baTQV1ogZzQKRRsw$: 
remote=52.34.76.65


Basically, the list name is correct, but the added "__;!NV..." makes it 
invalid.



A web request for a list with name 
'midrange-l__;!!NVq9dfhzMyHqTw!wLl-dt8zxsuQuoyojs-UYmT_d65WZroClHaYGfHduJ561eT0B7baTQV1ogZzQKRRsw$' 
was received from IP 52.34.76.65. I.e., something like

http://example.com/mailman/listinfo/midrange-l__;!!NVq9dfhzMyHqTw!wLl-dt8zxsuQuoyojs-UYmT_d65WZroClHaYGfHduJ561eT0B7baTQV1ogZzQKRRsw$

The listname is considered hostile because it contains characters not in 
the set mm_cfg.ACCEPTABLE_LISTNAME_CHARACTERS (default [-+_.=a-z0-9]).


This is not usually anything of concern. Brain dead web crawlers do 
things like this all the time. Check your web server logs for more info.


--
Mark Sapiro The highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
   https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: messages from members not distributed to moderated list

2021-08-29 Thread Mark Sapiro

On 8/22/21 6:06 PM, Scott Crawford wrote:

Hello, I’m hoping someone can help with this issue.

Using Mailman version 2.1.33, that is the default list software under cPanel.



See https://wiki.list.org/x/4030641 and if you have access to Mailman's 
logs, see https://wiki.list.org/x/4030723 and particularly Mailman's 
error.log. If you don't have access to logs, contact the cPanel host.


--
Mark Sapiro The highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
   https://mail.python.org/archives/list/mailman-users@python.org/