Re: [Mailman-Users] non-subscribers getting through--email address in "Real Name"

2018-07-24 Thread Mark Sapiro
On 07/24/2018 08:47 PM, Grant Taylor via Mailman-Users wrote: > I am talking about modifying the From: header such that the message no > longer had any conflict with the original published DMARC records. Consider this: If I create a novel called _The Hexadecimal Kid and His Faithful Dog ASCII_ [

Re: [Mailman-Users] non-subscribers getting through--email address in "Real Name"

2018-07-24 Thread Grant Taylor via Mailman-Users
On 07/24/2018 08:41 PM, John Levine wrote: Quite right. Beyond the standards theology, there is the practical problem that where the message list in your inbox used to tell you who wrote the list messages, now it all seems to come from the list alias. That's where the human friendly portion o

Re: [Mailman-Users] non-subscribers getting through--email address in "Real Name"

2018-07-24 Thread Grant Taylor via Mailman-Users
On 07/24/2018 08:11 PM, Richard Damon wrote: Do you understand how DMARC works? Yes, I do believe that I do understand how DMARC works. I have yet to have someone show me something (else) about DMARC that I'm not aware of. Yahoo.com has an entry in their DNS that says they want DMARC protec

Re: [Mailman-Users] non-subscribers getting through--email address in "Real Name"

2018-07-24 Thread John Levine
In article <88902b3b-7cb3-7991-15c4-4dbc10762...@msapiro.net> you write: >In that sense, many of us think that the person who wrote the post is >still the author even if the list made a few simple changes that didn't >alter the basic text of the original message while the list is a Sender: > >That'

Re: [Mailman-Users] non-subscribers getting through--email address in "Real Name"

2018-07-24 Thread Mark Sapiro
On 07/24/2018 07:11 PM, Richard Damon wrote: > > >> On Jul 24, 2018, at 9:43 PM, Grant Taylor via Mailman-Users >> wrote: >> >> If you view the message to am MLM as as separate end-to-end delivery process >> from the message from an MLM to the subscriber, DMARC can and does work with >> MLMs.

Re: [Mailman-Users] non-subscribers getting through--email address in "Real Name"

2018-07-24 Thread Richard Damon
> On Jul 24, 2018, at 9:43 PM, Grant Taylor via Mailman-Users > wrote: > >> On 07/24/2018 06:59 PM, Richard Damon wrote: >> You CAN’T strip DMARC. > > I can most certainly strip any DKIM related headers from messages that are > coming into my server on their way to my mailing list. > > I'm

Re: [Mailman-Users] non-subscribers getting through--email address in "Real Name"

2018-07-24 Thread Grant Taylor via Mailman-Users
On 07/24/2018 06:59 PM, Richard Damon wrote: You CAN’T strip DMARC. I can most certainly strip any DKIM related headers from messages that are coming into my server on their way to my mailing list. I'm not talking about altering other people's view of DNS. (That's a completely different to

Re: [Mailman-Users] non-subscribers getting through--email address in "Real Name"

2018-07-24 Thread Grant Taylor via Mailman-Users
On 07/24/2018 06:51 PM, Mark Sapiro wrote: The stolen address books were used to send phishing emails purportedly from the owner of the address book the the addresses in the book. I.e., a message From: a_known_fri...@yahoo.com saying things look at this great thing I found and a URL to evilsit

Re: [Mailman-Users] non-subscribers getting through--email address in "Real Name"

2018-07-24 Thread Richard Damon
>> On Jul 24, 2018, at 3:20 PM, Grant Taylor via Mailman-Users >> wrote: >> >> On 07/22/2018 04:25 PM, Richard Damon wrote: >> What actions do you think mailing lists are doing improperly? > > I personally believe that mailing lists are their own end entity, just like > our individual mailbo

Re: [Mailman-Users] non-subscribers getting through--email address in "Real Name"

2018-07-24 Thread Mark Sapiro
On 07/24/2018 05:20 PM, Grant Taylor via Mailman-Users wrote: > On 07/24/2018 03:16 PM, John Levine wrote: >> Turning it on for aol.com, yahoo.com, and other domains with user >> mailboxes, > > So, are you stating that DMARC should NOT be used on domains that > (predominantly) contain end user mai

Re: [Mailman-Users] non-subscribers getting through--email address in "Real Name"

2018-07-24 Thread Grant Taylor via Mailman-Users
On 07/24/2018 03:16 PM, John Levine wrote: Turning it on for aol.com, yahoo.com, and other domains with user mailboxes, So, are you stating that DMARC should NOT be used on domains that (predominantly) contain end user mailboxes? to outsource the pain of the spam they were getting I'm not

[Mailman-Users] Mailman 2.1.29 Release

2018-07-24 Thread Mark Sapiro
I am not so pleased to announce the release of Mailman 2.1.29. It turned out there was a bug in the security fix in 2.1.28 that broke the web admin and listinfo overview pages. This is fixed in Mailman 2.1.29. The patch referred to below has been corrected to fix this bug. There is also a patch at

Re: [Mailman-Users] Mailman 2.x to 3.1.x Migration

2018-07-24 Thread Mark Sapiro
On 07/24/2018 06:32 AM, Andrew Hodgson wrote: > > Once done you can see the results by navigating to your Mailman instance and > you can see the data about the list such as the creation date, number of > posts and the members. For some reason on my instance the last post date is > still the la

Re: [Mailman-Users] non-subscribers getting through--email address in "Real Name"

2018-07-24 Thread John Levine
In article <78baab65-f7d3-ce56-bc36-a16a15118...@spamtrap.tnetconsulting.net> you write: >> If AOL and Yahoo just used the quarantine option for DMARC, it wouldn’t >> have been quite as bad. But they ABUSED DMARC by their settings. > >I still don't grok what you are considering "abuse" in this co

Re: [Mailman-Users] non-subscribers getting through--email address in "Real Name"

2018-07-24 Thread Grant Taylor via Mailman-Users
On 07/22/2018 04:25 PM, Richard Damon wrote: What actions do you think mailing lists are doing improperly? I personally believe that mailing lists are their own end entity, just like our individual mailboxes. (Particularly discussion mailing lists.) I also believe that SPF, DKIM, and DMARC

[Mailman-Users] Mailman Migration 2.1.X to 3.2

2018-07-24 Thread Ryan McClung
Hey All, Looking to migrate 2.1.15 to 3.2. Right now we have a lot of lists and pretty big archives. Is there a best practices for the migration or can anyone offer scripts that have worked for them? Info: 1 -- Mailman 2 server 1 -- Mailman 3 server Both are on the same network. ---

Re: [Mailman-Users] ARC, was non-subscribers getting through--email address in "Real Name"

2018-07-24 Thread Grant Taylor via Mailman-Users
On 07/22/2018 11:02 PM, Stephen J. Turnbull wrote: You're misunderstanding. The ARC community doesn't discourage whitelisting other sites. The work to do whitelisting does. Thank you for clarifying Stephen. I was afraid that you were somehow implying that there was some sort of guideline on

Re: [Mailman-Users] Mailman 2.x to 3.1.x Migration

2018-07-24 Thread Andrew Hodgson
Hi, This isn't a step by step guide or anything but just my experiences. It is a 2 stage process: - Import the list configuration (subscribers, list options etc); - Import list archives. Import list configuration using the command mailman import21. This expects a .pck file to import and the l

Re: [Mailman-Users] Mailman 2.x to 3.1.x Migration

2018-07-24 Thread Sebastian Hagedorn
--On 23. Juli 2018 um 10:43:52 -0400 Ryan McClung wrote: I haven't read anything on gitlab about whether or not this has been finalized. Is there a migration process available? I also read about scripting it but unfortunately I can't find any resources on a way to do so. Can anyone provide me

[Mailman-Users] Mailman 2.x to 3.1.x Migration

2018-07-24 Thread Ryan McClung
Hey All, I haven't read anything on gitlab about whether or not this has been finalized. Is there a migration process available? I also read about scripting it but unfortunately I can't find any resources on a way to do so. Can anyone provide me with a best-practices on how to migrate? Ryan