[Mailman-Users] Mailman & DMARC policy = none?

[David Gibbs via Mailman-Users]

Folks:

I'm curious as to how people are setting 'dmarc_none_moderation_action'... which 
controls how Mailman handles domains with a dmarc policy action of none (like 
gmail.com).


Is there a compelling reason to set it to Yes so that messages from such domains 
are munged or wrapped?


Thanks!

david

--
IBM i on Power Systems: For when you can't afford to be out of business!

I'm riding 615 miles (Yes, you read that right) in the American Diabetes 
Association's Tour de Cure to raise money for diabetes research, education, 
advocacy, and awareness.  You can make a tax-deductible donation to my ride by 
visiting https://gmane.diabetessucks.net.


You can see where my donations come from by visiting my interactive donation map 
... https://gmane.diabetessucks.net/map (it's a geeky thing).


I may have diabetes, but diabetes doesn't have me!

--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org

[Mailman-Users] 'Warm up' an IP when moving a mailing list server to a new host?

[David Gibbs via Mailman-Users]

Folks:

This isn't specific to Mailman ... but is related to mailing list servers in 
general.

I've had my mailing lists on an in-house server for a long time (more than 15 
years).  I'm currently able to deliver mail to Yahoo without any problems.

I've been trying to move the mailing list server to an Amazon VPS ... and, of 
course, this means that the IP that I'm sending from is changing.

Unfortunately, Yahoo has started deferring mail delivery because the new IP 
doesn't have a reputation (although it's not on any black lists that I'm aware 
of).

The Yahoo postmaster support people are telling me that I should 'warm up' the 
IP by sending some mail to Yahoo from the new IP and continue to send from the 
old IP.

Any suggestions on how that might be accomplished?

The only thing I can think of is to move a few of my lists over to the new, do 
some apache contortion to proxy requests for the moved lists to the new host, 
and other rsync stuff to keep my archives in sync.

Yahoo is a major PITA.

david

--
IBM i on Power Systems: For when you can't afford to be out of business!

I'm riding 615 miles (Yes, you read that right) in the American Diabetes 
Association's Tour de Cure to raise money for diabetes research, education, 
advocacy, and awareness.  You can make a tax-deductible donation to my ride by 
visiting https://gmane.diabetessucks.net.

You can see where my donations come from by visiting my interactive donation 
map ... https://gmane.diabetessucks.net/map (it's a geeky thing).

I may have diabetes, but diabetes doesn't have me!

--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org

[Mailman-Users] Prevent MM from adding a CC for DMARC munged posts?

[David Gibbs via Mailman-Users]

Folks:

Does anyone know if there is a way to prevent MM from adding the original 
posters email address as a CC when the DMARC munging is done?

Thanks!

david
--
IBM i on Power Systems: For when you can't afford to be out of business!

I'm riding 615 miles (Yes, you read that right) in the American Diabetes 
Association's Tour de Cure to raise money for diabetes research, education, 
advocacy, and awareness.  You can make a tax-deductible donation to my ride by 
visiting https://gmane.diabetessucks.net.

You can see where my donations come from by visiting my interactive donation 
map ... https://gmane.diabetessucks.net/map (it's a geeky thing).

I may have diabetes, but diabetes doesn't have me!

--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org

[Mailman-Users] Allow posting from addresses with modifiers?

[David Gibbs via Mailman-Users]

Folks:

Anyone know if it's possible to configure MM 2.1 to allow posting with an email 
address that has a modifier?

For example ... if someone is subscribed as "john+li...@example.com", but their email 
comes from "j...@example.com", allow that address to post?

I've had some people ask me about this ability because they want to use the 
modifier address to help them filter messages.

Thanks!

david

--
IBM i on Power Systems: For when you can't afford to be out of business!

I'm riding 615 miles (Yes, you read that right) in the American Diabetes 
Association's Tour de Cure to raise money for diabetes research, education, 
advocacy, and awareness.  You can make a tax-deductible donation to my ride by 
visiting https://gmane.diabetessucks.net.

You can see where my donations come from by visiting my interactive donation 
map ... https://gmane.diabetessucks.net/map (it's a geeky thing).

I may have diabetes, but diabetes doesn't have me!

--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Re: [Mailman-Users] Allow posting from addresses with modifiers?

[David Gibbs via Mailman-Users]

On 1/14/2019 12:13 PM, Mark Sapiro wrote:

On 1/14/19 8:40 AM, David Gibbs via Mailman-Users wrote:

Anyone know if it's possible to configure MM 2.1 to allow posting
with an email address that has a modifier?


You can't configure Mailman to just do it without making code
changes,


OK, thanks.

I might play around with that at some point in the future.

david

--
IBM i on Power Systems: For when you can't afford to be out of business!

I'm riding 615 miles (Yes, you read that right) in the American Diabetes 
Association's Tour de Cure to raise money for diabetes research, education, 
advocacy, and awareness.  You can make a tax-deductible donation to my ride by 
visiting https://gmane.diabetessucks.net.

You can see where my donations come from by visiting my interactive donation 
map ... https://gmane.diabetessucks.net/map (it's a geeky thing).

I may have diabetes, but diabetes doesn't have me!

--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org

[Mailman-Users] Manually treat certain domains as if they have restrictive DMARC policy

[David Gibbs via Mailman-Users]

Folks:

I've got a number of subscribers who's email admins have set a policy such that, 
if a message is sent to them with their email address as the 'from' address, the 
message is rejected.


This is causing those peoples posts to bounce ... and, ultimately, they get 
unsubscribed.


Although the BEST course of action would be for the mail admin's to alter their 
spam filters or implement DMARC policies, that's a bit much to ask for.


To resolve this, I'm thinking of creating a flat file of domains that are 
causing this problem ... then modifying the _DMARCProhibited routine, in 
Utils.py, to read the flat file and treat domains found in that file as if they 
had a DMARC policy set to reject.


Do you think that will work ... or am I completely off base?  Perhaps there's 
already a mechanism in MM 2.1 that would do what I want (hopeful grin)?


david

--
IBM i on Power Systems: For when you can't afford to be out of business!

I'm riding 615 miles (Yes, you read that right) in the American Diabetes 
Association's Tour de Cure to raise money for diabetes research, education, 
advocacy, and awareness.  You can make a tax-deductible donation to my ride by 
visiting https://gmane.diabetessucks.net.


You can see where my donations come from by visiting my interactive donation map 
... https://gmane.diabetessucks.net/map (it's a geeky thing).


I may have diabetes, but diabetes doesn't have me!

--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Re: [Mailman-Users] Manually treat certain domains as if they have restrictive DMARC policy

[David Gibbs via Mailman-Users]

On 1/28/19 2:25 PM, Mark Sapiro wrote:
List of addresses (or regexps) whose posts should always apply 
dmarc_moderation_action regardless of any domain specific DMARC Policy.


That's close to what I want ... the only issue is that I'm looking for the 
behavior to be site wide not on a per-list basis.


david


--
IBM i on Power Systems: For when you can't afford to be out of business!

I'm riding 615 miles (Yes, you read that right) in the American Diabetes
Association's Tour de Cure to raise money for diabetes research, education,
advocacy, and awareness.  You can make a tax-deductible donation to my ride by
visiting https://gmane.diabetessucks.net.

You can see where my donations come from by visiting my interactive donation map
... https://gmane.diabetessucks.net/map (it's a geeky thing).

I may have diabetes, but diabetes doesn't have me!

--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Re: [Mailman-Users] Manually treat certain domains as if they have restrictive DMARC policy

[David Gibbs via Mailman-Users]

On 1/29/2019 12:13 AM, Mark Sapiro wrote:

Also, Adding a global setting for dmarc_moderation_addresses on top of
the per-list setting is not difficult either. See

for how this was done for a global ban_list.


I'm by no means a Python expert (far from it), but I hacked this together...

=== modified file 'Mailman/Defaults.py.in'
--- Mailman/Defaults.py.in  2018-07-12 03:14:02 +
+++ Mailman/Defaults.py.in  2019-01-29 14:27:59 +
@@ -145,6 +145,11 @@
 # GLOBAL_BAN_LIST = ['xxx@aol\.com', '^yyy.*@gmail\.com$']
 GLOBAL_BAN_LIST = []

+# Installation wide DMARC list.  This is a list of email addresses and
+# regexp patterns (beginning with ^) that will be treated as if they
+# have a restrictive DMARC policy. Same examples as GLOBAL_BAN_LIST
+GLOBAL_DMARC_LIST = []
+
 # If the following is set to Yes, and a web subscribe comes from an IPv4
 # address and the IP is listed in Spamhaus SBL, CSS or XBL, the subscription
 # will be blocked.  It will work with IPv6 addresses if Python's py2-ipaddress

=== modified file 'Mailman/Handlers/SpamDetect.py'
--- Mailman/Handlers/SpamDetect.py  2018-12-01 04:13:12 +
+++ Mailman/Handlers/SpamDetect.py  2019-01-29 14:24:26 +
@@ -110,6 +110,7 @@
 dn, addr = parseaddr(msg.get('from'))
 if addr and mlist.dmarc_moderation_action > 0:
 if (mlist.GetPattern(addr, mlist.dmarc_moderation_addresses) or
+mlist.getPattern(addr, mm_cfg.GLOBAL_DMARC_LIST) or
 Utils.IsDMARCProhibited(mlist, addr)):
 # Note that for dmarc_moderation_action, 0 = Accept,
 #1 = Munge, 2 = Wrap, 3 = Reject, 4 = Discard





--
IBM i on Power Systems: For when you can't afford to be out of business!

I'm riding 615 miles (Yes, you read that right) in the American Diabetes 
Association's Tour de Cure to raise money for diabetes research, education, 
advocacy, and awareness.  You can make a tax-deductible donation to my ride by 
visiting https://gmane.diabetessucks.net.

You can see where my donations come from by visiting my interactive donation 
map ... https://gmane.diabetessucks.net/map (it's a geeky thing).

I may have diabetes, but diabetes doesn't have me!

--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Re: [Mailman-Users] Trying to secure the list server web page

[David Gibbs via Mailman-Users]

On 2/27/2019 10:01 AM, Jeffrey Westgate wrote:

when a list owner tends to the moderator requests, and hits the
Submit All Data button... depending on the browser, it says it is
going to send the information over an insecure connection  and
nothing happens results-wise - the request is not handled.

Is there some config we need to change in mailman to secure it
properly?


What is the DEFAULT_URL_PATTERN setting in mm_cfg.py?

I've got mine set to ...

DEFAULT_URL_PATTERN = 'https://%s/mailman/'

... so all URL's go to https.

david


--
IBM i on Power Systems: For when you can't afford to be out of business!

I'm riding 615 miles (Yes, you read that right) in the American Diabetes 
Association's Tour de Cure to raise money for diabetes research, education, 
advocacy, and awareness.  You can make a tax-deductible donation to my ride by 
visiting https://mideml.diabetessucks.net.

You can see where my donations come from by visiting my interactive donation 
map ... https://mideml.diabetessucks.net/map (it's a geeky thing).

I may have diabetes, but diabetes doesn't have me!
--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Re: [Mailman-Users] Trying to secure the list server web page

[David Gibbs via Mailman-Users]

On 2/27/2019 10:48 AM, Jeffrey Westgate wrote:

The setting I needed was actually in the Defaults.py, and not in the
mm_cfg.py. And it was http.  I did the change, pushed it out, and
we're back in fine form again.


Don't change Defaults.py!

Only change mm_cfg.py.

mm_cfg.py imports Defaults.py, but it may get overwritten when you upgrade.  
mm_cfg.py never gets overwritten.

http://www.gnu.org/software/mailman/mailman-install/customizing.html

david

--
IBM i on Power Systems: For when you can't afford to be out of business!

I'm riding 615 miles (Yes, you read that right) in the American Diabetes 
Association's Tour de Cure to raise money for diabetes research, education, 
advocacy, and awareness.  You can make a tax-deductible donation to my ride by 
visiting https://mideml.diabetessucks.net.

You can see where my donations come from by visiting my interactive donation 
map ... https://mideml.diabetessucks.net/map (it's a geeky thing).

I may have diabetes, but diabetes doesn't have me!
--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Re: [Mailman-Users] Trying to secure the list server web page

[David Gibbs via Mailman-Users]

On 2/27/2019 11:13 AM, Jeffrey Westgate wrote:

OK.  thanks for that.  So I can copy/paste the same line in the
mm_cfg.py, at the bottom, under the site-specific config block?


Yes.

david


--
IBM i on Power Systems: For when you can't afford to be out of business!

I'm riding 615 miles (Yes, you read that right) in the American Diabetes 
Association's Tour de Cure to raise money for diabetes research, education, 
advocacy, and awareness.  You can make a tax-deductible donation to my ride by 
visiting https://mideml.diabetessucks.net.

You can see where my donations come from by visiting my interactive donation 
map ... https://mideml.diabetessucks.net/map (it's a geeky thing).

I may have diabetes, but diabetes doesn't have me!
--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org

[Mailman-Users] FYI: Mailbait operating under a new domain

[David Gibbs via Mailman-Users]

Folks:

Just a FYI ... the a--hole who runs mailbait.info appears to be operating under 
a new domain name ... smoremail.com.

If you've implemented any web rules to prevent attacks from mailbait, you'll 
need to update those rules.

This 'service' is supposed to allow you to fill your mailbox … why anyone would 
want to do this is beyond me … and it has absolutely ZERO protections against 
submitting someone else's email address.

david

--
IBM i on Power Systems: For when you can't afford to be out of business!

I'm riding 615 miles (Yes, you read that right) in the American Diabetes 
Association's Tour de Cure to raise money for diabetes research, education, 
advocacy, and awareness.  You can make a tax-deductible donation to my ride by 
visiting https://mideml.diabetessucks.net.

You can see where my donations come from by visiting my interactive donation 
map ... https://mideml.diabetessucks.net/map (it's a geeky thing).

I may have diabetes, but diabetes doesn't have me!
--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Re: [Mailman-Users] Delivery errors and spam grading

[David Gibbs via Mailman-Users]

On 3/18/2019 4:51 AM, Davide Marchi wrote:
1) How is it possible from Mailman monitor the delivery errors? Only 
sysadmin mail server from the logs?


This is what VERP deliveries are for. The FROM address is tagged so that 
bounces can be clearly identified.

https://wiki.list.org/DOC/So%20what%20is%20this%20VERP%20stuff

david



--
IBM i on Power Systems: For when you can't afford to be out of business!

I'm riding 615 miles (Yes, you read that right) in the American Diabetes 
Association's Tour de Cure to raise money for diabetes research, education, 
advocacy, and awareness.  You can make a tax-deductible donation to my ride by 
visiting https://mideml.diabetessucks.net.

You can see where my donations come from by visiting my interactive donation 
map ... https://mideml.diabetessucks.net/map (it's a geeky thing).

I may have diabetes, but diabetes doesn't have me!
--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org

[Mailman-Users] Include part of message when rejecting due to excessive size?

[David Gibbs via Mailman-Users]

My memory is failing me... I thought that, when rejecting a message from
the admin queue, part of the original message was included in the reject
message.

Is this true?

When I reject messages, just the reject message is sent.

If so, is there a setting that I need to adjust?

If not, is there any way to do that?

Thanks.

David
-- 
IBM i on Power Systems: For when you can't afford to be out of business!

I'm riding 615 miles (Yes, you read that right) in the American Diabetes
Association's Tour de Cure to raise money for diabetes research, education,
advocacy, and awareness.  You can make a tax-deductible donation to my ride
by visiting https://mideml.diabetessucks.net.

You can see where my donations come from by visiting my interactive
donation map ... https://mideml.diabetessucks.net/map (it's a geeky thing).

I may have diabetes, but diabetes doesn't have me!
--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Re: [Mailman-Users] Finding list user in redacted FBL reports

[David Gibbs via Mailman-Users]

On Mon, Aug 5, 2019 at 11:40 PM Scott Neader  wrote:
> Do any of you have any ideas for me to identify this serial
> 'mark-as-spammer'?  Could I hack something together temporarily that would
> put maybe the first few characters of their email in the footer? (so that
> Comcast won't sense it as an email and won't redact it?)  Other ideas?

Check out the RCPT_BASE64_HEADER_NAME setting in Defaults.py.  That
will let you tag personalized & verped deliveries with the base64
encoding of the recipient's email address.

david


-- 
IBM i on Power Systems: For when you can't afford to be out of business!

I'm riding 65 miles in the American Diabetes Association's Tour de
Cure to raise money for diabetes research, education, advocacy, and
awareness.  You can make a tax-deductible donation to my ride by
visiting https://mideml.diabetessucks.net.

You can see where my donations come from by visiting my interactive
donation map ... https://mideml.diabetessucks.net/map (it's a geeky
thing).

I may have diabetes, but diabetes doesn't have me!
--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Re: [Mailman-Users] Finding list user in redacted FBL reports

[David Gibbs via Mailman-Users]

On Wed, Aug 7, 2019 at 8:18 PM David Josephson  wrote:

> Wouldn't it be simple enough just to use rot13, or the senders name
> without the domain?
>
>
The first thing they redact is the users name.

David

>
> --
IBM i on Power Systems: For when you can't afford to be out of business!

I'm riding 65 miles in the American Diabetes Association's Tour de Cure to
raise money for diabetes research, education, advocacy, and awareness.  You
can make a tax-deductible donation to my ride by visiting
https://mideml.diabetessucks.net.

You can see where my donations come from by visiting my interactive
donation map ... https://mideml.diabetessucks.net/map (it's a geeky thing).

I may have diabetes, but diabetes doesn't have me!
--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org

[Mailman-Users] Check message size before moderation status?

[David Gibbs via Mailman-Users]

Folks:

I want to adjust my MM install so that it will check the message size
before a subscribers moderation status.

Would this be the appropriate change to mm_cfg.py?

GLOBAL_PIPELINE.remove('Moderate')
GLOBAL_PIPELINE.insert(GLOBAL_PIPELINE.index('Emergency'), 'Moderate')

Thanks!

david
-- 
IBM i on Power Systems: For when you can't afford to be out of business!

I'm riding in the American Diabetes Association's Tour de Cure to
raise money for diabetes research, education, advocacy, and awareness.
You can make a tax-deductible donation to my ride by visiting
https://mideml.diabetessucks.net.

You can see where my donations come from by visiting my interactive
donation map ... https://mideml.diabetessucks.net/map (it's a geeky
thing).

I may have diabetes, but diabetes doesn't have me!
--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Re: [Mailman-Users] Best way to slow down all the spam to my lists?

[David Gibbs via Mailman-Users]

On Fri, Dec 13, 2019 at 11:16 AM Chromatest J. Pantsmaker <
chromat...@chromatest.net> wrote:

> I'm the system admin (though I'm not great at it).  I have a problem with
> spam.  Hundreds of spam messages are posted to my lists each week.  They're
> non-subscribers so they don't go to the lists, but they *do* go to me, the
> list owner which floods my inbox.


I use RBL’s and the Spamassassin milter  in Postfix with great success

David

> --
IBM i on Power Systems: For when you can't afford to be out of business!

I'm riding in the American Diabetes Association's Tour de Cure to raise
money for diabetes research, education, advocacy, and awareness.  You can
make a tax-deductible donation to my ride by visiting
https://mideml.diabetessucks.net.

You can see where my donations come from by visiting my interactive
donation map ... https://mideml.diabetessucks.net/map (it's a geeky thing).

I may have diabetes, but diabetes doesn't have me!
--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org

[Mailman-Users] Re: DNSException: No Nameservers available for ...

[David Gibbs via Mailman-Users]

Try setting up a caching name server on the local machine.

On Wed, May 27, 2020 at 12:02 PM Lars Bjørndal  wrote:
>
> Hello
>
> One member of a mailman mailing list on my system receives an error
> message when posting to the list:
>
>   You are not allowed to post to this mailing list From: a domain which
>   publishes a DMARC policy of reject or quarantine, and your message has been
>   automatically rejected.  If you think that your messages are being rejected
>   in error, contact the mailing list owner at nssf-styre-ow...@nssf.us.
>
> In /var/log/mailman/error, I have:
>
>   DNSException: No Nameservers available for
>   usern...@blindeforbundet.no (_dmarc.blindeforbundet.no)
>
> There are not published any DMARC policy for the domain.
>
> I'm running mailman-2.1.30-1.fc31.x86_64 on a Fedora 31 server.
>
> I hope someone on tis list can help me figure out what's going on, and
> hopefully a fix.
>
> Thanks in advance
> Lars
> --
> Mailman-Users mailing list -- mailman-users@python.org
> To unsubscribe send an email to mailman-users-le...@python.org
> https://mail.python.org/mailman3/lists/mailman-users.python.org/
> Mailman FAQ: http://wiki.list.org/x/AgA3
> Security Policy: http://wiki.list.org/x/QIA9
> Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
> https://mail.python.org/archives/list/mailman-users@python.org/



-- 
IBM i on Power Systems: For when you can't afford to be out of business!

I'm riding in the American Diabetes Association's Tour de Cure to
raise money for diabetes research, education, advocacy, and awareness.
You can make a tax-deductible donation to my ride by visiting
https://mideml.diabetessucks.net.

You can see where my donations come from by visiting my interactive
donation map ... https://mideml.diabetessucks.net/map (it's a geeky
thing).

I may have diabetes, but diabetes doesn't have me!
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/

[Mailman-Users] Re: Question on /var/lib/mailman/spam

[David Gibbs via Mailman-Users]

On 3/10/21 11:42 AM, Mark Sapiro wrote:

This is problematic. The idea is that the site admin can use these
messages to train some bayesian spam filter, but it is up to the site to
implement such a process. If you want to just ignore them, you could set
up a periodic cron to



Here's the script I have setup to feed accumulated spam into spamassassin.

https://gist.github.com/fallingrock/1afdc2117d771851255a737f7c3652b4

david

--
I'm riding in the American Diabetes Association's Tour de Cure to raise 
money for diabetes research, education, advocacy, and awareness.  You 
can make a tax-deductible donation to my ride by visiting 
https://mideml.diabetessucks.net.


You can see where my donations come from by visiting my interactive 
donation map ... https://mideml.diabetessucks.net/map (it's a geeky thing).

--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
   https://mail.python.org/archives/list/mailman-users@python.org/

[Mailman-Users] Re: reCAPTCHA problem with some lists

[David Gibbs via Mailman-Users]

On 12/3/20 9:02 AM, Brian Carpenter wrote:

Look for the following line on those lists without the reCAPTCHA element:



Add the following two lines right below the above line:




That should reveal reCAPTCHA via the listinfo page for would-be 
subscribers to check when subscribing.


Folks:

Sorry for resurrecting an old thread, but I'm trying to get recaptcha 
working on my site ...


I've got the keys set in my mm_cfg.py file, and have quadruple verified 
that they are correct ... but for some reason I keep getting the error 
"reCAPTCHA validation failed: invalid-input-response" when submitting 
the form.


I'm 99% sure the listinfo.html template is correct.

--
  
  
  
  

  

---

It renders like this:

--
Would you like to receive list mail batched in a daily
  digest?
  
 No
  Yes

  

   
This form requires JavaScript.
https://www.google.com/recaptcha/api.js?hl=en";>

data-sitekey="6LeN3gwTABLV8GkJQlgj4YQC7BYHgDkdJLxZ">



  

	  value="Subscribe">



--

Any suggestions on what I can do to try and diagnose the problem?

Thanks!

David

--
I'm riding in the American Diabetes Association's Tour de Cure to raise 
money for diabetes research, education, advocacy, and awareness.  You 
can make a tax-deductible donation to my ride by visiting 
https://mideml.diabetessucks.net.


You can see where my donations come from by visiting my interactive 
donation map ... https://mideml.diabetessucks.net/map (it's a geeky thing).

--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
   https://mail.python.org/archives/list/mailman-users@python.org/

[Mailman-Users] Re: reCAPTCHA problem with some lists

[David Gibbs via Mailman-Users]

On 6/1/21 10:40 AM, Stephen J. Turnbull wrote:

  > --
  >
  >
  >

You're missing  here.  I'm pretty sure that is what
accepts the input.  See comment in rendered output below.


Unless I'm missing something, there is no code in Mailman that replaces 
'mm-captcha-ui'.


In Cgi/listinfo.py, there is code that replaces 'mm-recaptcha-ui'

I'm running MM 2.1.29.

david

--
I'm riding in the American Diabetes Association's Tour de Cure to raise 
money for diabetes research, education, advocacy, and awareness.  You 
can make a tax-deductible donation to my ride by visiting 
https://mideml.diabetessucks.net.


You can see where my donations come from by visiting my interactive 
donation map ... https://mideml.diabetessucks.net/map (it's a geeky thing).

--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
   https://mail.python.org/archives/list/mailman-users@python.org/

[Mailman-Users] Re: reCAPTCHA problem with some lists

[David Gibbs via Mailman-Users]

On 6/1/21 12:23 PM, David Gibbs wrote:

On 6/1/21 10:40 AM, Stephen J. Turnbull wrote:

  > --
  >    
  >    
  >    

You're missing  here.  I'm pretty sure that is what
accepts the input.  See comment in rendered output below.


Unless I'm missing something, there is no code in Mailman that replaces 
'mm-captcha-ui'.


In Cgi/listinfo.py, there is code that replaces 'mm-recaptcha-ui'

I'm running MM 2.1.29.


I think the mm-captcha-ui token is only used for text based captcha's. 
I'm using recaptcha only.


david

--
I'm riding in the American Diabetes Association's Tour de Cure to raise 
money for diabetes research, education, advocacy, and awareness.  You 
can make a tax-deductible donation to my ride by visiting 
https://mideml.diabetessucks.net.


You can see where my donations come from by visiting my interactive 
donation map ... https://mideml.diabetessucks.net/map (it's a geeky thing).

--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
   https://mail.python.org/archives/list/mailman-users@python.org/

[Mailman-Users] Re: subscription flood, redux

[David Gibbs via Mailman-Users]

On 7/28/21 4:24 PM, Karl Berry wrote:

1) The above mailman-users thread refers to using fail2ban. This sounds
sensible. Does anyone have a a working fail2ban filter they can share
for this? 


I have it setup, but it's not very sophisticated ...

failregex = .*\/\s+-\s+-\s+\[.*\]\s+"POST\s+\/mailman\/subscribe

It's just looking for repeated subscribe attempts.

david

--
I'm riding in the American Diabetes Association's Tour de Cure to raise 
money for diabetes research, education, advocacy, and awareness.  You 
can make a tax-deductible donation to my ride by visiting 
https://mideml.diabetessucks.net.


You can see where my donations come from by visiting my interactive 
donation map ... https://mideml.diabetessucks.net/map (it's a geeky thing).

--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
   https://mail.python.org/archives/list/mailman-users@python.org/

[Mailman-Users] Web requests with garbage at the end of the list name

[David Gibbs via Mailman-Users]

Folks:

Is anyone else seeing requests to their mailman install that look 
something like this:


Aug 18 15:10:16 2021 (31166) Hostile listname: 
listname=midrange-l__;!!NVq9dfhzMyHqTw!wLl-dt8zxsuQuoyojs-UYmT_d65WZroClHaYGfHduJ561eT0B7baTQV1ogZzQKRRsw$: 
remote=52.34.76.65


Basically, the list name is correct, but the added "__;!NV..." makes it 
invalid.


The pattern is rather consistent ... "__;!NV" followed by a bunch of 
garbage.


Thanks!

David

--
I'm riding in the American Diabetes Association's Tour de Cure to raise 
money for diabetes research, education, advocacy, and awareness.  You 
can make a tax-deductible donation to my ride by visiting 
https://mideml.diabetessucks.net.


You can see where my donations come from by visiting my interactive 
donation map ... https://mideml.diabetessucks.net/map (it's a geeky thing).

--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
   https://mail.python.org/archives/list/mailman-users@python.org/

[Mailman-Users] Re: Web requests with garbage at the end of the list name

[David Gibbs via Mailman-Users]

On 8/18/21 11:34 PM, Stephen J. Turnbull wrote:

Is anyone else seeing requests to their mailman install that look
something like this:

Aug 18 15:10:16 2021 (31166) Hostile listname: 
listname=midrange-l__;!!NVq9dfhzMyHqTw!wLl-dt8zxsuQuoyojs-UYmT_d65WZroClHaYGfHduJ561eT0B7baTQV1ogZzQKRRsw$:
remote=52.34.76.65


What log is that from?  I don't recognize the format.


mischief


  > But I don't understand what you mean by "hostile
  > listname" being "correct".

He means that "midrange-l" is the name of an active list at his site,
I'm pretty sure.


Exactly correct.


host(1) says the source or the request is AWS. :-/

None of this explains why the URL is targeting David's Mailman, unless
it's the Mailman host that is running the Proofpoint.  (It's not your
job ;-), but any further hints would be appreciates.


These requests are coming from an external source. I'm not running 
proofpoint.


Not much I can do about it, I guess.  Good to know the source of the 
requests though.


Not sure what proofpoint is trying to do. They are just getting errors.

Oh well.

Thanks for the info guys.

david

--
I'm riding in the American Diabetes Association's Tour de Cure to raise 
money for diabetes research, education, advocacy, and awareness.  You 
can make a tax-deductible donation to my ride by visiting 
https://mideml.diabetessucks.net.


You can see where my donations come from by visiting my interactive 
donation map ... https://mideml.diabetessucks.net/map (it's a geeky thing).

--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
   https://mail.python.org/archives/list/mailman-users@python.org/

[Mailman-Users] Re: Web requests with garbage at the end of the list name

[David Gibbs via Mailman-Users]

On 8/18/21 3:36 PM, Jon Baron wrote:

I'm pretty sure that this comes from Proofpoint's "URL Defense"
system. 


Ah. OK.


But I don't understand what you mean by "hostile
listname" being "correct".


The listname before the garbage is correct.


 I suggest running all messages through .procmailrc
with this recipe:


The mangled list names are in the web UI, not email.

david

--
I'm riding in the American Diabetes Association's Tour de Cure to raise 
money for diabetes research, education, advocacy, and awareness.  You 
can make a tax-deductible donation to my ride by visiting 
https://mideml.diabetessucks.net.


You can see where my donations come from by visiting my interactive 
donation map ... https://mideml.diabetessucks.net/map (it's a geeky thing).

--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
   https://mail.python.org/archives/list/mailman-users@python.org/

[Mailman-Users] Re: is log4j2 leveraged in Mailman version 2.1.14-1?

[David Gibbs via Mailman-Users]

On Fri, Dec 10, 2021 at 2:40 PM John Lake  wrote:
> Does Mailman version 2.1.14-1 utilize Java logging library log4j2 and if so, 
> what version does it use?

Mailman is written in python ... it doesn't use java libraries at all.

david

-- 
IBM i on Power Systems: For when you can't afford to be out of business!

I'm riding in the American Diabetes Association's Tour de Cure to
raise money for diabetes research, education, advocacy, and awareness.
You can make a tax-deductible donation to my ride by visiting
https://mideml.diabetessucks.net.

You can see where my donations come from by visiting my interactive
donation map ... https://mideml.diabetessucks.net/map (it's a geeky
thing).

I may have diabetes, but diabetes doesn't have me!
--
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
https://mail.python.org/archives/list/mailman-users@python.org/