[Mailman-Users] Re: mm3: Some system is reinjecting mails -- and those mails "pass" moderation but why?

2024-10-24 Thread Mark Sapiro

Note: the appropriate list for MM 3 is mailman-us...@mailman3.org

On 10/24/24 04:13, Ralf Hildebrandt via Mailman-Users wrote:

Hi!

We're running postfix-us...@postfix.org and we're encountering an odd
problem: A system is sending mailing list messages that were posted on
postfix-us...@postfix.org BACK to postfix-us...@postfix.org

And these mails simply pass moderation (which is set to the following):
Default action to take when a member posts to the list: Default processing
Default action to take when a non-member posts to the list: discard (no 
notification)

The headers of the mail (which I put on hold, based on the IP of the
sending system):

Date: Thu, 24 Oct 2024 11:13:01 +0200
To: postfix-us...@postfix.org
Message-ID: 
In-Reply-To: 
X-MailFrom: ge...@hendrickx.be
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency;
  loop; banned-address; member-moderation;
  header-match-postfix-users.postfix.org-0; nonmember-moderation;
  administrivia; implicit-dest; max-recipients; max-size; news-moderation;
  no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9
Precedence: list
Content-Type: text/plain; charset="us-ascii"
Message-ID-Hash: Z6I2WZCEBC6PUKLVOEVAW3ZU2CDR47AW
X-Message-ID-Hash: Z6I2WZCEBC6PUKLVOEVAW3ZU2CDR47AW
X-MailFrom: t...@turbopush.cn
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency;
  loop; banned-address; member-moderation;
  header-match-postfix-users.postfix.org-0; nonmember-moderation;
  administrivia; implicit-dest; max-recipients; max-size; news-moderation;
  no-subject; digests; suspicious-header
Subject: 
=?utf-8?B?W+WklumDqOmCruS7tl1bcGZ4XSBb5aSW6YOo6YKu5Lu2XVvlpJbpg6jpgq7ku7ZdUmU6IE9wZW5TU0wgY29tcGlsZSB2cy4gcnVudGltZSB2ZXJzaW9uIHdhcm5pbmc=?=
From: Geert Hendrickx via Postfix-users via Postfix-users
  
Reply-To: Geert Hendrickx ,
  Geert Hendrickx via Postfix-users 

So, it's the mail from "Geert Hendrickx" being resent from
t...@turbopush.cn -- the headers have both

"X-MailFrom: t...@turbopush.cn" (not a member of the list) and


I think this is the envelope sender of this message


"X-MailFrom: ge...@hendrickx.be" (definitely a member of the list)


and I think this is the envelope sender of the original message that was 
bounced back.



Why is the mail being accepted?


Because ge...@hendrickx.be is in the list returned by 
mailman.email.message.Message.senders and is a list member presumably 
with moderation_action Default Processing. In this case it is because 
ge...@hendrickx.be is in Reply-To:.


If I am correct about 5the envelope sender, the full list returned by 
the senders method is

```
['postfix-us...@postfix.org', 't...@turbopush.cn', 'ge...@hendrickx.be']
```
being respectively From:, envelope sender and Reply-To:


From: doesn't look right (since it says "postfix-us...@postfix.org")

We're currently stopping these mails, but I think mm3 is not acting
correctly here (unless we're missing something)


List membership is determined by much more than From:. See 
https://gitlab.com/mailman/mailman/-/blob/master/src/mailman/email/message.py?ref_type=heads#L87-L107


If you want list membership to be determined solely by From:, you need 
to put

```
sender_headers: from
```
in the `[mailman]` section of mailman.cfg. If you just want to drop 
Reply-To, you can use

```
sender_headers: from from_ sender
```

--
Mark Sapiro The highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan

--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
   https://mail.python.org/archives/list/mailman-users@python.org/
Member address: arch...@mail-archive.com


[Mailman-Users] mm3: Some system is reinjecting mails -- and those mails "pass" moderation but why?

2024-10-24 Thread Ralf Hildebrandt via Mailman-Users
Hi!

We're running postfix-us...@postfix.org and we're encountering an odd
problem: A system is sending mailing list messages that were posted on
postfix-us...@postfix.org BACK to postfix-us...@postfix.org

And these mails simply pass moderation (which is set to the following):
Default action to take when a member posts to the list: Default processing
Default action to take when a non-member posts to the list: discard (no 
notification)

The headers of the mail (which I put on hold, based on the IP of the
sending system):

Date: Thu, 24 Oct 2024 11:13:01 +0200
To: postfix-us...@postfix.org
Message-ID: 
In-Reply-To: 
X-MailFrom: ge...@hendrickx.be
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency;
 loop; banned-address; member-moderation;
 header-match-postfix-users.postfix.org-0; nonmember-moderation;
 administrivia; implicit-dest; max-recipients; max-size; news-moderation;
 no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9
Precedence: list
Content-Type: text/plain; charset="us-ascii"
Message-ID-Hash: Z6I2WZCEBC6PUKLVOEVAW3ZU2CDR47AW
X-Message-ID-Hash: Z6I2WZCEBC6PUKLVOEVAW3ZU2CDR47AW
X-MailFrom: t...@turbopush.cn
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency;
 loop; banned-address; member-moderation;
 header-match-postfix-users.postfix.org-0; nonmember-moderation;
 administrivia; implicit-dest; max-recipients; max-size; news-moderation;
 no-subject; digests; suspicious-header
Subject: 
=?utf-8?B?W+WklumDqOmCruS7tl1bcGZ4XSBb5aSW6YOo6YKu5Lu2XVvlpJbpg6jpgq7ku7ZdUmU6IE9wZW5TU0wgY29tcGlsZSB2cy4gcnVudGltZSB2ZXJzaW9uIHdhcm5pbmc=?=
From: Geert Hendrickx via Postfix-users via Postfix-users
 
Reply-To: Geert Hendrickx ,
 Geert Hendrickx via Postfix-users 

So, it's the mail from "Geert Hendrickx" being resent from
t...@turbopush.cn -- the headers have both 

"X-MailFrom: t...@turbopush.cn" (not a member of the list) and
"X-MailFrom: ge...@hendrickx.be" (definitely a member of the list)

Why is the mail being accepted?
From: doesn't look right (since it says "postfix-us...@postfix.org")

We're currently stopping these mails, but I think mm3 is not acting
correctly here (unless we're missing something)

-- 
Ralf Hildebrandt
Charité - Universitätsmedizin Berlin
Geschäftsbereich IT | Abteilung Netz | Netzwerk-Administration
Invalidenstraße 120/121 | D-10115 Berlin

Tel. +49 30 450 570 155
ralf.hildebra...@charite.de
https://www.charite.de
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/
Member address: arch...@jab.org