Public bug reported:
At least sometimes, when a message is shunted because an exception is
thrown in IncomingRunner the pipeline saved in the msgdata of the
shunted message can start with the handler following the one being
handled when the exception is thrown.
This has been observed when Moderate attempted to reject a message and
raised Errors.RejectMessage. IncomingRunner then called BounceMessage to
send a reject notice and BounceMessage threw an IOError exception. The
message was shunted with a pipeline starting with the handler following
Moderate which had already been successfully popped from the pipeline.
When the message was unshunted, Moderate was skipped and the message
which should have been rejected was delivered to the list.
** Affects: mailman
Importance: Medium
Assignee: Mark Sapiro (msapiro)
Status: In Progress
--
You received this bug notification because you are a member of Mailman
Coders, which is subscribed to GNU Mailman.
https://bugs.launchpad.net/bugs/1519062
Title:
Unshunting a shunted message can skip the original shunting handler.
To manage notifications about this bug go to:
https://bugs.launchpad.net/mailman/+bug/1519062/+subscriptions
Public bug reported:
NewsRunner, when gating a list post to usenet, will append the
appropriate usenet group name to any existing Newsgroups: header in the
post that doesn't already contain the name.
If the existing names in the header are a group or groups that don't
exist on the gated news server, at least one server has been observed to
reject the post. In some cases with the python-list(a)python.org list, we
have seen
441 No valid newsgroups in "gmane.comp.python.general, comp.lang.python"
This would actually seem to be a bug in the news server, but I will try
prepending rather than appending the group name to see if that helps.
** Affects: mailman
Importance: Medium
Assignee: Mark Sapiro (msapiro)
Status: In Progress
--
You received this bug notification because you are a member of Mailman
Coders, which is subscribed to GNU Mailman.
https://bugs.launchpad.net/bugs/1512866
Title:
Some news servers reject some posts from the mail<->news gateway
To manage notifications about this bug go to:
https://bugs.launchpad.net/mailman/+bug/1512866/+subscriptions
Public bug reported:
If the site has set 'VERP_PROBES = Yes', when a user's bounce score
reaches threshold, that user's score is reset and a probe message with a
confirmation token is sent to the user. If the probe bounces, the user's
delivery is disabled by bounce.
The issue is if the probe bounces, but for some reason, the bounce is
not returned within bounce_info_stale_after days, the user's bounce_info
can be deleted before the probe bounce is returned. Then the probe
processing gets the user's bounce_info which is None and attempts to
disable the member's delivery with bounce_info = None, and
disableBouncingMember attempts to get the cookie attribute from None
resulting in
AttributeError: 'NoneType' object has no attribute 'cookie'
** Affects: mailman
Importance: Medium
Assignee: Mark Sapiro (msapiro)
Status: In Progress
--
You received this bug notification because you are a member of Mailman
Coders, which is subscribed to GNU Mailman.
https://bugs.launchpad.net/bugs/1482940
Title:
A bounced probe can throw AttributeError
To manage notifications about this bug go to:
https://bugs.launchpad.net/mailman/+bug/1482940/+subscriptions
Public bug reported:
An address of the form mailman(a)example.com is exposed on the web admin
and listinfo overview pages where 'mailman' is the name of the site list
and 'example.com' is the 'email domain' associated with the host in the
URL of the page.
This means that the 'mailman' address should work in all Postfix virtual
domains and Mailman/MTA/Postfix.py should generate virtual mappings for
that.
** Affects: mailman
Importance: Medium
Assignee: Mark Sapiro (msapiro)
Status: In Progress
--
You received this bug notification because you are a member of Mailman
Coders, which is subscribed to GNU Mailman.
https://bugs.launchpad.net/bugs/1459236
Title:
Mailman/Postfix integration doesn't generate virtual maps for all site
list domains.
To manage notifications about this bug go to:
https://bugs.launchpad.net/mailman/+bug/1459236/+subscriptions
Public bug reported:
The fix for (LP: #1082746) implemented a SUBSCRIBE_FORM_SECRET feature.
If this is enabled by a site, the subscribe form on the listinfo page
contains a hidden input field which includes a hash of various data
including the IP address that the GET of the listinfo came from. Upon
submission of the form, this hash is recomputed using the IP address
that the POST of the form came from, and if the hashes don't match, the
subscribe fails.
This can cause legitimate subscribes to fail if the user is connected
via a load balancer or other device which submits http(s) requests using
a possibly different IP for each request.
** Affects: mailman
Importance: Medium
Assignee: Mark Sapiro (msapiro)
Status: In Progress
--
You received this bug notification because you are a member of Mailman
Coders, which is subscribed to GNU Mailman.
https://bugs.launchpad.net/bugs/1447445
Title:
Web subscribe can fail in cases of load balancers or other devices.
To manage notifications about this bug go to:
https://bugs.launchpad.net/mailman/+bug/1447445/+subscriptions
Public bug reported:
Headers DKIM-Signature:, DomainKey-Signature: and Authentication-
Results: are not removed by default from mail to an anonymous list.
These headers can reveal the sending domain.
** Affects: mailman
Importance: Medium
Assignee: Mark Sapiro (msapiro)
Status: In Progress
--
You received this bug notification because you are a member of Mailman
Coders, which is subscribed to GNU Mailman.
https://bugs.launchpad.net/bugs/1444673
Title:
Anonymous lists can expose the sending domain.
To manage notifications about this bug go to:
https://bugs.launchpad.net/mailman/+bug/1444673/+subscriptions
Public bug reported:
At the moment it is difficult for a user to find out which lists they
have been subscribed to. With sensible list owners this would not be a
problem, but if list owners silently subscribe people to a list without
asking then a person can find themselves receiving mail for lists they
did not know they were on.
I can see two possible interfaces for this:
1) A search form on e.g. http://example.com/mailman/listinfo that allows
a user to type in their email address and request a search for lists
that they are subscribed to. For security reasons this would forward
them an email with a confirmation code. Responding with the correct
code would perform the search.
2) Sending an email to e.g. which-lists-am-i-on(a)lists.example.com would
automatically respond with the lists the sender's email address is
subscribed to.
Obviously this does not stop rogue admins continuing to add email lists
and silently subscribe people to them, but it does make it easy for a
user to find and unsubscribe themselves. This proposal does not intend
to combat spam because there are much easier ways of sending spam than
setting up mailman :-)
Thanks in advance,
Paul
** Affects: mailman
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Mailman
Coders, which is subscribed to GNU Mailman.
https://bugs.launchpad.net/bugs/1517712
Title:
Web or email interface to show all lists an address is subscribe to.
To manage notifications about this bug go to:
https://bugs.launchpad.net/mailman/+bug/1517712/+subscriptions