Re: [Mailman-Users] GNU Mailman roadmap

2009-11-01 Thread Stefan Förster
* Barry Warsaw : [...] > Here's the plan: Mark is going to put a 2.1.13 bug fix release out soon > and will continue to fix only the most important bugs on the 2.1 branch. > He'll forward port those fixes to the 2.2 branch for the few people who > are running it from source, but there will never be

[Mailman-Users] GNU Mailman roadmap

2009-11-01 Thread Barry Warsaw
As you know, Mailman 2.1 has long been in maintenance-only mode. Mailman 2.2 was where we were going to add new features and update the user interface, without changing the basic model. Mailman 3 was where we were going to fix the model and modernize the architecture to allow for better e

Re: [Mailman-Users] Fake Email

2009-11-01 Thread Barry Warsaw
On Nov 1, 2009, at 9:06 PM, Stephen J. Turnbull wrote: If you really want Mailman to do the authentication, you can either use the Approved header field, which is not very secure, or you can use the 3rd-party patch to use public-key signatures which somebody else mentioned. I'm pretty sure that

Re: [Mailman-Users] Fake Email

2009-11-01 Thread Stephen J. Turnbull
Hien HUYNH HUU writes: > Hi Stephen, >I can't do that because may be the sender is on another MTA and mailman > server can't force they do an authentication. >Is this a weak point of Mailman ? No, this is a weak point of your MTA. The MTA has all the information needed, and in princ

Re: [Mailman-Users] Fake Email

2009-11-01 Thread Mark Sapiro
Hien HUYNH HUU wrote: >Hi Stephen, > I can't do that because may be the sender is on another MTA and mailman > server can't force they do an authentication. > Is this a weak point of Mailman ? They still could connect and authenticate to the Mailman server's MTA for list posting purposes.

Re: [Mailman-Users] Fake Email

2009-11-01 Thread Geoff Shang
Hi, HOw would you propose such verification of the authenticity of a sender be performed in Mailman? It's hard enough to do anyway, but as has been pointed out, it's probably more the function of the MTA than of Mailman. The MTA can do things like insist on client-side certificates and oth

Re: [Mailman-Users] Fake Email

2009-11-01 Thread Hien HUYNH HUU
Hi Stephen, I can't do that because may be the sender is on another MTA and mailman server can't force they do an authentication. Is this a weak point of Mailman ? Best regards, Huu Hien From: Stephen J. Turnbull [step...@xemacs.org] Sent:

Re: [Mailman-Users] New list bounces postings, cannot post

2009-11-01 Thread Mark Sapiro
Stephen J. Turnbull wrote: >Thomas Gramstad writes: > > > > The message is an uncaught bounce notification. This says either the > > > list posts are being sent to > > > stoppdld-boun...@mailman.kunnskapsallmenning.no (or possibly > > > stoppdld-ad...@mailman.kunnskapsallmenning.no) instead of to