Mailman 3 April 2002 - Mailman-Developers

Millist + mysql + postfix
by sarwani＠agrakom.com 25 Apr '02

25 Apr '02

Is there anybody who can make millist which uusing database mysql + postfix?

1 0

Bug in email confirmation of subscription?
by bethe＠neuekraft.org 25 Apr '02

25 Apr '02

hi developers! according to the question of Colin Mackinlay on Sun, 3 Mar 2002 --------------------------------------------------------------------- Bug in email confirmation of subscription? <http://mail.python.org/pipermail/mailman-developers/2002-March/010896.h tml> --------------------------------------------------------------------- i like to ask aswell, if there is any known problem concerning the subscription-procedure via e-mail. We are running MM 2.1b1 and Python 2.2.1 and we have the same problem ... Thanks very much! Thomas Bethe -- bethe(a)neuekraft.org http://neuekraft.org/kontakt/

1 0

Bug in email confirmation of subscription?
by Thomas Bethe 25 Apr '02

25 Apr '02

hi developers! according to the question of Colin Mackinlay on Sun, 3 Mar 2002 --------------------------------------------------------------------- Bug in email confirmation of subscription? <http://mail.python.org/pipermail/mailman-developers/2002-March/010896.h tml> --------------------------------------------------------------------- i like to ask aswell, if there is any known problem concerning the subscription-procedure via e-mail. We are running MM 2.1b1 and Python 2.2.1 and we have the same problem ... Thanks very much! Thomas Bethe -- bethe(a)neuekraft.org http://neuekraft.org/kontakt/

1 0

Re: [Mailman-Developers] MailMan-Traffic
by J C Lawrence 25 Apr '02

25 Apr '02

On Tue, 23 Apr 2002 10:26:11 +0200 h huelsebusch <Henning> wrote: > Hi ! Is it possible that you insert Traffic-Accounting in Mailman ? > Don't know, but I think it's not so difficult, Mailman has to do > something like "(MailSize) * (actually members of the list)", stored > in a PLAIN-textfile, so it will also be possible to parse the total > traffic, monthly oder daily traffic. Several points: Mailman does not store the membership list in a text file. Further, under 2.1 Mailman may not store the membership list at all, but depending on local configuration may only have the ability to query (LDAP, SQL, whatever) an external service for the membership to apply to a specific message. Outbound traffic in a bandwidth sense is not a product of number of list members times size of message. That ignores bounces, RCPT TO bundling, and remote exploders (many companies subscribe a central account to popular lists and then explode that account to all internal interested parties and/or gate it to an internal newsgroup). All the data you seem to want is currently available from both the Mailman logs and your MTA logs. You just have to take it out and parse it. -- J C Lawrence ---------(*) Satan, oscillate my metallic sonatas. claw(a)kanga.nu He lived as a devil, eh? http://www.kanga.nu/~claw/ Evil is a name of a foeman, as I live.

5 5

Re: [Mailman-Developers] MailMan-Traffic
by J C Lawrence 25 Apr '02

25 Apr '02

On Thu, 25 Apr 2002 06:11:10 -0400 Carson Gaspar <carson(a)taltos.org> wrote: > Speaking as someone who has just a few years of computer security > experience, the above proposal accomplishes just about nothing, > security-wise. If the mail list system in the DMZ can get the > subscriber data from the system inside your firewall, then so can any > attacker that compromises the mail list system. If you have some sort > of read-only access to the datastore, then you may be protected from > corruption, but not disclosure. You have to think about in terms of threat vectors and risk containment. With Mailman storing the membership roster locally, the only thing required to expose the roster is compromise of the Mailman box (it can then be copied off at leisure). With the membership roster stored remotely, exposure of the membership roster requires compromise both of the Mailman box and of the authentication/access controls for the membership roster (assuming a reasonably constrained ACL/capability system). That need not be a trivial second step. Further, Chuq's rosters are likely approaching large enough that he needs to keep them under an external DB. In such case, moving that DB off the Mailman box gives various advantages and disadvantages, primary among which are reduced complexity on the mailman box, no need for external access/export of the DB to other systems (eg marketing), better segmentation of risks, and reduced exposure to same-network-segment (as the mailman server) system compromise. -- J C Lawrence ---------(*) Satan, oscillate my metallic sonatas. claw(a)kanga.nu He lived as a devil, eh? http://www.kanga.nu/~claw/ Evil is a name of a foeman, as I live.

1 0

Re: the klez thing
by Tom Neff 24 Apr '02

24 Apr '02

This is only peripherally a mailman development issue. :) I use all three steps, in this order: - virus scan+block (inflex/uvscan) - demime - members-only posting As a result, the worst I have ever had is a short, stripped text component appearing mysteriously on a list. And that happened because some PREVIOUS virus scanner out in the wild had caught the virus, removed it and PASSED THE REST ON. Thanks ever so much, whoever you were :)

1 0

Warning: nasty variant of this new virus.
by Chuq Von Rospach 24 Apr '02

24 Apr '02

I just got sent a new copy of the Klez.E virus. The text it sends to the user is this: -- Klez.E is the most common world-wide spreading worm.It's very dangerous by corrupting your files. Because of its very smart stealth and anti-anti-virus technic,most common AV software can't detect or clean it. We developed this free immunity tool to defeat the malicious virus. You only need to run this tool once,and then Klez will never come into your PC. NOTE: Because this tool acts as a fake Klez to fool the real worm,some AV monitor maybe cry when you run it. If so,Ignore the warning,and select 'continue'. If you have any question,please mail to me <mailto:lady_ice@pacbell.net> . -- If you follow these instructions, you'll be infected by the worm. Don't run ANYTHING from anyone you don't explicitly can guarantee as a valid source of help. -- Chuq Von Rospach, Architech chuqui(a)plaidworks.com -- http://www.chuqui.com/ He doesn't have ulcers, but he's a carrier.

3 2

Re: [Mailman-Users] mailman loops because of & in an address
by J C Lawrence 23 Apr '02

23 Apr '02

On Tue, 23 Apr 2002 14:49:37 +0200 (CEST) Antenna Support <support(a)antenna.nl> wrote: > Dear people, We just experienced a loop: a message was sent many times > because it wasn't deleted in the /home/mailman/qfiles directory The > error mailed was: > /usr/bin/python -S /home/mailman/cron/qrunner > sh: c.lovell(a)xtra.co.nz: command not found c... User unknown > It appeared that there was an address added to the list: > m&c.lovell(a)xtra.co.nz > The loop could only be stopped by removing the .msg and .db file in > the qfiles directory. I also removed this address from the > subscribers. Aiiieee! We should really sanitise inbound email addresses. "&" is not a legal char in a LHS. -- J C Lawrence ---------(*) Satan, oscillate my metallic sonatas. claw(a)kanga.nu He lived as a devil, eh? http://www.kanga.nu/~claw/ Evil is a name of a foeman, as I live.

1 0

New emerging virus/worm. Grr.
by Chuq Von Rospach 23 Apr '02

23 Apr '02

Passing this along, because this has implications to list owners. A new emerging worm is out there in windows land. That's bad enough, but this one has the hack that instead of repropogating via email using the owners email address, it repropogates using a random address in the infected machine's address book as the From, while sending to other random addresses in the book. Last night, I started getting email from a friend (who happens to be a top computer security guy in the country) from an address he hasn't used in three years, and he doesn't use windows. Other people started getting email from ME that was infected. This morning, the complaints started coming in that my mailman system was sending out infected emails, or that it was sending people admin messages because some infected machine was sending TO my mailman system as someone else, so they were getting the return notice. Here's what I'm currently sending out to people that complain about these bogus mailman messages.... --- Someone out there has both your address and our address in their address book, and is infected with this virus: <http://www.symantec.com/avcenter/venc/data/w32.klez.h@mm.html> One of the side effects is that when it tries to reinfect, it takes an address from the address book at random, and uses it as the "from" in sending to someone else. So there's some third party that's hijacked your email address and using it to forward infected messages. And there's not a thing either of us can do about it, because neither of us are infected (or at least, we aren't) or control the machine doing it. This is an emerging worm, and it looks pretty ugly. It has hit Hong Kong and Great Britain worst so far, but it's spreading rapidly accordind to people I've talked to. --- This one has the possibility to get really ugly and nasty, folks, because it's hijacking addresses. Users can't depend on being yelled at by friends for being infected, because this new worm hides behind random return addresses. Which means the only thing you know is that the "person" sending you the email isn't the one infected, but someone who knows both of you is... At least, as far as I can tell so far. The experts still seem to be trying to get a handle on it... -- Chuq Von Rospach, Architech chuqui(a)plaidworks.com -- http://www.chuqui.com/ The Cliff's Notes Cliff's Notes on Hamlet: And they all died happily ever after

5 6

MailMan-Traffic
by Henning Hülsebusch 23 Apr '02

23 Apr '02

Hi ! Is it possible that you insert Traffic-Accounting in Mailman ? Don't know, but I think it's not so difficult, Mailman has to do something like "(MailSize) * (actually members of the list)", stored in a PLAIN-textfile, so it will also be possible to parse the total traffic, monthly oder daily traffic. So it will be possible, that the MailMan-big-boss-guru can have a look on Mailman-Traffic.... later on it could also be Moderator-Role. Is it possible to insert something like this ? Henning

1 0