Mailman 3 February 2002 - Mailman-Developers

Potential risk of VERP?
by barry＠zope.com 16 Feb '02

16 Feb '02

I just thought of a potential risk to VERPing, and I'd like to get some feedback from you all about it. Let's say I run a mailing list foo(a)python.org and someone like (oh, I dunno) yahoogroups subscribes to the list and provides subscription services of its own. I.e. people can subscribe to foo(a)yahoogroups.com and they'll get all the messages posted to foo(a)python.org. Yes, we've seen this happen quite a bit. Now, suppose someone on foo(a)yahoogroups.com starts bouncing, and we're VERPing. Won't our Mailman think that foo(a)yahoogroups.com is the bouncing member? In a sense they are, but I can see an attack vector: - subscribe to some downstream reflector for a group, e.g. foo(a)yahoogroups.com - purposely set your address to bounce - foo(a)yahoogroups.com gets disabled, thus shutting off a large list of recipients. Or will/should yahoogroups rewrite the envelope sender for /its/ downstream members? -Barry

4 3

Exim setup and "mailman" local user vs. list
by Ben Gertzfield 13 Feb '02

13 Feb '02

The INSTALL docs suggest that you create a "mailman" list where all the password reminders will come from. I did that on an exim system, then followed the instructions to add sections to my exim.conf; most of the mailman-created aliases are automatically then available, except for "mailman", since I have a local user! ben@list:~/src/mailman$ /usr/sbin/exim -v -bt mailman mailman(a)list.interq.or.jp deliver to mailman in domain list.interq.or.jp director = localuser, transport = local_delivery ben@list:~/src/mailman$ /usr/sbin/exim -v -bt mailman-request user "mailman-request" for file existence test not found mailman-request(a)list.interq.or.jp deliver to mailman in domain list.interq.or.jp director = mm21_director, transport = mm21_transport ben@list:~/src/mailman$ /usr/sbin/exim -v -bt mailman-bounces user "mailman-bounces" for file existence test not found mailman-bounces(a)list.interq.or.jp deliver to mailman in domain list.interq.or.jp director = mm21_director, transport = mm21_transport Should we add instructions to work around this, or should the README.EXIM be changed? Ben -- Brought to you by the letters G and B and the number 7. "A baloo is a bear." Debian GNU/Linux maintainer of Gimp and Nethack -- http://www.debian.org/

1 0

Czech catalogs for Mailman
by Dan Ohnesorg 11 Feb '02

11 Feb '02

I send attached updated versions of catalogs and templates for CVS version of mailman. cheers dan -- ----------------------------------------------------------- / Dan Ohnesorg Dan(a)ohnesorg.cz \ < Jinočanská 7 252 19 Rudná u Prahy > \ tel: +420 311 679679 +420 311 679976 fax: +420 311 679311 / -----------------------------------------------------------

1 0

Re: [Mailman-Announce] Verio VPS Solaris - Anyone use this service with MailMan?
by barry＠zope.com 11 Feb '02

11 Feb '02

>>>>> "DS" == Donaven Staab <donaven(a)scseaside.com> writes: DS> Dear MailMan announce list members, DS> I'd appreciated any feedback here. DS> Does anyone currently use the MailMan Mailing List Utility DS> with a Verio VPS Solaris account? DS> I'm interested in giving it a try and would like some feedback DS> of current users. DS> Thank you for your time. My fault folks. I was modding this posting and hit the wrong button. This should not have gone to mailman-announce. -Barry

2 1

mailman 2.1a4 and moderation
by Stijn Hoop 08 Feb '02

08 Feb '02

Hi, I have this list, run on Mailman 2.1a4, for which the list administrator wants to moderate *all* postings. I have turned on the 'mod' flag for all users and this works fine; except that now every time someone posts a message they get an auto-reply saying that their message awaits moderation. Is there an option to turn this off? I'm mailing this to -developers because it's using the development version of Mailman. --Stijn -- Help Wanted: Telepath. You know where to apply.

2 1

mod.py: query/set/reset moderation flag
by Dan Mick 06 Feb '02

06 Feb '02

Sometimes the web interface isn't what you're after. Here's a bin/withlist plugin: # mod.py from Mailman import mm_cfg import sys def mod(list): for member in list.getMembers(): if list.getMemberOption(member, mm_cfg.Moderate): print member, "is moderated" def set(list, member, value): value = not not (int(value)) if list.isMember(member): list.Lock() list.setMemberOption(member, mm_cfg.Moderate, value) print "%s's moderated flag set to %d" % (member, value) list.Save() list.Unlock() else: print member, "not a member" Invoke with: bin/withlist -r mod <list> to dump moderated membernames bin/withlist -r mod.set <list> <member> [0|1] to set moderation status

1 0

VERP_DELIVERY_INTERVAL not yet functional ?
by Fil 05 Feb '02

05 Feb '02

Hi, what should one set in order to have VERP but not always? If I set VERP_DELIVERY_INTERVAL=3 it never verps. If I set VERP_DELIVERY_INTERVAL=1 it always verps. Does it apply only to lists not yet created? Did I forget to set one variable? (I'm using today's CVS version. I had the same trouble a while ago. Personalization and other verp features work correctly.) -- Fil

1 0

News gateway logging glitch.
by Chuq Von Rospach 05 Feb '02

05 Feb '02

Looks like messages posted to the lists through the news <-> mail gateway (2.0.8) aren't ever logged into the system. They go into qfile and I never see entries in either post or smtp. That means, effectively, if you're trying to do accounting or usage reports, they're invisible, so reports are understating the actual usage of the list. -- Chuq Von Rospach (chuqui(a)plaidworks.com -- http://www.chuqui.com/) Will Geek for hardware.

2 2

Bug on web managed digest?
by Gian Franco Baroni 05 Feb '02

05 Feb '02

Hi, I've got this error on my install of 2.1a4: Traceback: Traceback (most recent call last): File "/home/mailman/scripts/driver", line 86, in run_main main() File "/home/mailman/Mailman/Cgi/admin.py", line 187, in main show_results(mlist, doc, category, subcat, cgidata) File "/home/mailman/Mailman/Cgi/admin.py", line 510, in show_results form.AddItem(show_variables(mlist, category, subcat, cgidata, doc)) File "/home/mailman/Mailman/Cgi/admin.py", line 562, in show_variables add_options_table_item(mlist, category, subcat, table, item) File "/home/mailman/Mailman/Cgi/admin.py", line 577, in add_options_table_item val = get_item_gui_value(mlist, category, kind, varname, params) File "/home/mailman/Mailman/Cgi/admin.py", line 616, in get_item_gui_value value = getattr(mlist, varname) File "/home/mailman/Mailman/MailList.py", line 135, in __getattr__ raise AttributeError, name AttributeError: _new_volume When trying to set the digest options of the list. All other admin tasks work fine. Thanks GFB

1 0

Re: [Mailman-Developers] Bug: Usernames with spaces
by Dan Mick 04 Feb '02

04 Feb '02

Here's a simple fix to prevent people from subscribing through the web page with addresses including space characters: Index: Utils.py =================================================================== RCS file: /cvsroot/mailman/mailman/Mailman/Utils.py,v retrieving revision 2.26 diff -u -r2.26 Utils.py --- Utils.py 2002/01/08 04:43:27 2.26 +++ Utils.py 2002/02/04 22:34:27 @@ -180,7 +180,7 @@ def ValidateEmail(s): """Verify that the an email address isn't grossly evil.""" # Pretty minimal, cheesy check. We could do better... - if not s: + if not s or ' ' in s: raise Errors.MMBadEmailError if _badchars.search(s) or s[0] == '-': raise Errors.MMHostileAddress > > Somehow I accumulated several users who had either embedded > > (luser@hot mail.com) or trailing ('luser(a)hotmail.com ') addresses in > > s/addresses/spaces/ > > > Mailman; bounce processing wasn't matching and therefore not working, > > but outgoing mail still was, so I was still getting bounces. > > > > Someone somewhere isn't (or wasn't) validating by removing spaces or > > rejecting fields with spaces. > > I'll try to examine the web-page subscription stuff. > > > > > Thank you, clone_member. > > > _______________________________________________ > Mailman-Developers mailing list > Mailman-Developers(a)python.org > http://mail.python.org/mailman/listinfo/mailman-developers

2 1