[Mailman-Users] Re: group mismatch

2022-05-17 Thread Jon Baron
I would like to thank everyone for all the ideas about my
group-mismatch problem.

As it happens, nothing helped. Moreover, almost all of the
speculations about what I was doing or not doing, using or not using,
know or do not know, were incorrect.

I found another way to fix the main problem, which was, in any case,
not all that serious.

I am not going to respond anymore to this thread.
-- 
Jonathan Baron, Professor of Psychology, University of Pennsylvania
Home page: https://www.sas.upenn.edu/~baron
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: group mismatch

2022-05-17 Thread Christian Buser via Mailman-Users
Ah so…

You found another way to fix the main problem -  but you do not tell us? 

You know that in a mailing list everyone should help if he can and not only 
consume?

So then, please unsubscribe here.

Thank you
Christian 

-- 
Christian Buser, Hohle Gasse 6, CH-5507 Mellingen (Switzerland)  
Hilfe fuer Strassenkinder in Ghana: https://www.chance-for-children.org







> Am 17.05.2022 um 11:02 schrieb Jon Baron :
> 
> I would like to thank everyone for all the ideas about my
> group-mismatch problem.
> 
> As it happens, nothing helped. Moreover, almost all of the
> speculations about what I was doing or not doing, using or not using,
> know or do not know, were incorrect.
> 
> I found another way to fix the main problem, which was, in any case,
> not all that serious.
> 
> I am not going to respond anymore to this thread.
> -- 
> Jonathan Baron, Professor of Psychology, University of Pennsylvania
> Home page: https://www.sas.upenn.edu/~baron
> --
> Mailman-Users mailing list -- mailman-users@python.org
> To unsubscribe send an email to mailman-users-le...@python.org
> https://mail.python.org/mailman3/lists/mailman-users.python.org/
> Mailman FAQ: http://wiki.list.org/x/AgA3
> Security Policy: http://wiki.list.org/x/QIA9
> Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
>https://mail.python.org/archives/list/mailman-users@python.org/

--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: group mismatch

2022-05-17 Thread Stephen J. Turnbull
Christian Buser via Mailman-Users writes:

 > You know that in a mailing list everyone should help if he can and
 > not only consume?

Technically correct, but please don't be so antagonistic.  

 > So then, please unsubscribe here.

What you do with your own filters is your business, but for the
mailing list this is outright wrong.

Mailing lists are easy to abuse, as we all know.  We put a lot of
effort into minimizing the damage and closing as many vulnerabilities
as we can, but the bad folks are out there developing new ones 9-5
every day, and some of them can't be closed without destroying
Mailman's main feature: the convenient discoverable interface for
managing list mail flows.  I hope that every Mailman 2 admin is
subscribing and continues to subscribe to this list, so that we can
help them serve the subscribers, and when necessary address
vulnerabilities and help them upgrade.

Steve

--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/


[Mailman-Users] Re: group mismatch

2022-05-17 Thread Jon Baron
In view of Stephen Turnbull's comments, I changed my mind and will
respond to the list. I was the "original poster" (OP?) about the
strange "group mismatch" error in my log. It complained about the user
"baron" (my own account on the server) not matching the required list
of groups. Several people made suggestions about where "baron" was
coming from: usually saying that baron was an owner of one file or
another file that was trying to send something to mailman. None of
these suggestions was correct. The only "baron" that had anything to
do with the mailing was as a moderator/owner, and the other
moderator/owner was never mentioned in the error message. Thus, the
original problem is, and will remain, unsolved.

What I was trying to do was very specific to my setup. It was Fedora,
not Debian. And I was using the mailman RPM (2.1.34-3), without the
patches that have been recommended since then, since the layout is
very different from what you get if you install from source. And I did
not want to install from source while everything is running, and
working quite well. I don't have the time for that anyway, and
certainly not to switch to Mailman 3, which does not seem particularly
helpful for the sort of very mundane things we do. Thus, I am errant
and untypical, so my problem and any solution to it would probably be
of little use to others. I should not have posted. (What encouraged me
were other posts about group mismatch, going back several years, none
of which helped solve my problem.)

The problem was spam coming to jdm-society-owner. Some of this was NOT
the result of trying to submit to the list. Some people just had the
idea that this was a good place to send spam (along with other
addresses on the server like webmaster). It isn't that bad. I just
delete it.

But I'm trying another solution. It seems that -owner is used by
mailman only to send mail to the list owners, e.g., when someone
submits something to the list. So I replaced this line in /etc/aliases

jdm-society-owner: "|/usr/lib/mailman/mail/mailman owner jdm-society"   


with

jdm-society-owner: "|/usr/bin/procmail /etc/procmailrc"

(I might try the -m after procmail, but I do other addresses without
it, like "webmaster", and that works.)

Then in /etc/procmailrc, I say (and this is new):

:0
* To:.*jdm-society-ow...@sjdm.org
! [address of owner 1],[address of owner 2]

This came after a lot of spam filtering in /etc/procmailrc, not just
by spamassassin but also by various words that need not be spam to
anyone else but are perfect indicators for us, e.g., "purchase". I
check the spam file every day or two.

Note that, if anything arrives at -owner from a list post, it is
already submitted and waiting for approval in /var/lib/mailman/data

I don't know if this works yet. If it does, it should largely solve
the problem. We will still get some spam posts to the lists, but they
are a drop in the bucket of other stuff that we need to reject even
though it isn't spam.

If it doesn't work, I'll just go back to rejecting the spam by hand.

Jon
-- 
Jonathan Baron, Professor of Psychology, University of Pennsylvania
Home page: https://www.sas.upenn.edu/~baron
Founding Editor: Judgment and Decision Making (http://journal.sjdm.org)
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/