Mailman 3 June 2002 - Mailman-Developers

[ mailman-Patches-565346 ] suggested wording change
by noreply＠sourceforge.net 06 Jun '02

06 Jun '02

Patches item #565346, was opened at 2002-06-06 11:09 You can respond by visiting: http://sourceforge.net/tracker/?func=detail&atid=300103&aid=565346&group_id… Category: list administration Group: Mailman 2.0.x Status: Open Resolution: None Priority: 5 Submitted By: Glen Foster (gafoster) Assigned to: Nobody/Anonymous (nobody) Summary: suggested wording change Initial Comment: The message: rejection = 'Non-members are not allowed to post messages to this list.' in ${PREFIX}/Mailman/Handlers/Hold.py line 60 is confusing when lists are run by membership-based organizations. It is unclear to non-subscribed posters that the word "members" refers to list members and not members of the organization itself. A suggested rewording is: rejection = 'You must subscribe to this list before you may post.' ---------------------------------------------------------------------- You can respond by visiting: http://sourceforge.net/tracker/?func=detail&atid=300103&aid=565346&group_id…

1 0

[ mailman-Bugs-229568 ] Pipermail won't resolve author names of aol.com addresses
by noreply＠sourceforge.net 06 Jun '02

06 Jun '02

Bugs item #229568, was opened at 2001-01-20 22:53 You can respond by visiting: http://sourceforge.net/tracker/?func=detail&atid=100103&aid=229568&group_id… Category: Pipermail Group: None >Status: Open Resolution: Works For Me Priority: 5 Submitted By: Aharon Varady (aharon) Assigned to: Nobody/Anonymous (nobody) Summary: Pipermail won't resolve author names of aol.com addresses Initial Comment: Pipermail does not resolve the "author" of emails sent from aol.com. Instead, Pipermail gives the email address of the listserve. For example: "John" <user(a)aol.com> is resolved by pipermail as: listname(a)foo.com and not as John. This bug only occurs for users of aol.com addresses. ---------------------------------------------------------------------- >Comment By: Aharon Varady (aharon) Date: 2002-06-05 21:37 Message: Logged In: YES user_id=139355 Well, this remains (and has always been) a problem for my lists. I have never had a user posting with an aol.com address that this hasn't been the case with. Currently my solution is to replace the wrong address shown (philly_ambient(a)phobos.serve.com) with a generic or balnk mark. Here is the html source of a typical email from our pipermail archive, and below it the source email with headers. ------------------------------------------------------------- <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN"> <html> <head> <title> [Philly_ambient] tool! </title> <link REL="Index" HREF="index.html" > <link REL="made" HREF="mailto:philly_ambient%40phobos.serve.com"> <meta NAME="robots" CONTENT="index,nofollow"> <link REL="Previous" href="http://phobos.serve.com/pipermail/philly_ambient/2002-June/002904.html"> <link REL="Next" href="http://phobos.serve.com/pipermail/philly_ambient/2002-June/002911.html"> <style TYPE="text/css"></style></head> <body BGCOLOR="#cccccc"><font face="Arial,Helvetica" size=-1><ul> <h4>[Philly_ambient] tool!</h4>Posted by <b>. . . .. . . .</b> on <i>Mon Jun 3 23:17:02 2002</i> <p></font><table cellpadding=3><tr><td bgcolor=#FFFFFF width="475"><font face="geneva,courier"><tt>  <pre>hey all a friend can get me some free tickets to see TOOL on monday august 12 at sovereign bank arena in trenton. i know mondays suck, but oh well. is anyone here into going? if so, contact me privately. i know it's not ambient, but neither is some of what we discuss here :) let me know asap, please gina </pre>  </tt></font></td></tr></table><font face="Arial,Helvetica" size=-1> <p>  <li> Previous message: <a href="http://phobos.serve.com/pipermail/philly_ambient/2002-June/002904.html">[Philly_ambient] Noise Deafinitions and playlist </a></li> <li> Next message: <a href="http://phobos.serve.com/pipermail/philly_ambient/2002-June/002911.html">[Philly_ambient] Do you hear what I hear? (re: noise deaf) </a></li> <li> <b>Messages sorted by:</b> <a href="http://phobos.serve.com/pipermail/philly_ambient/2002-June/date.html#2907">[ date ]</a> <a href="http://phobos.serve.com/pipermail/philly_ambient/2002-June/thread.html#2907">[ thread ]</a> <a href="http://phobos.serve.com/pipermail/philly_ambient/2002-June/subject.html#2907">[ subject ]</a> <a href="http://phobos.serve.com/pipermail/philly_ambient/2002-June/author.html#2907">[ author ]</a> </li> </body></html> --------------------------------------------------------------------- Here is the original email with headers: --------------------------------------------------------------- >From - Tue Jun 04 01:16:56 2002 X-UIDL: m;n!!9'f!!a2E"!3;D"! X-Mozilla-Status: 0001 X-Mozilla-Status2: 00000000 Return-Path: <philly_ambient-admin(a)phobos.serve.com> Delivered-To: aharon(a)phobos.serve.com Received: from phobos.serve.com (localhost.localdomain [127.0.0.1]) by phobos.serve.com (Postfix) with ESMTP id 6BC4D52D2B; Mon, 3 Jun 2002 23:17:06 -0400 (EDT) Delivered-To: philly_ambient(a)phobos.serve.com Received: from imo-r06.mx.aol.com (imo-r06.mx.aol.com [152.163.225.102]) by phobos.serve.com (Postfix) with ESMTP id 6F82F52D1D for <philly_ambient(a)phobos.serve.com>; Mon, 3 Jun 2002 23:16:46 -0400 (EDT) Received: from Mistsojorn(a)aol.com by imo-r06.mx.aol.com (mail_out_v32.5.) id p.d4.184e63f9 (17378) for <philly_ambient(a)phobos.serve.com>; Mon, 3 Jun 2002 23:14:35 -0400 (EDT) From: Mistsojorn(a)aol.com Message-ID: <d4.184e63f9.2a2d8a9b(a)aol.com> To: philly_ambient(a)phobos.serve.com MIME-Version: 1.0 Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: 7bit X-Mailer: AOL 4.0 for Mac - Post-GM sub 66 Subject: [Philly_ambient] tool! Sender: philly_ambient-admin(a)phobos.serve.com Errors-To: philly_ambient-admin(a)phobos.serve.com X-BeenThere: philly_ambient(a)phobos.serve.com X-Mailman-Version: 2.0.9 Precedence: bulk Reply-To: philly_ambient(a)phobos.serve.com List-Help: <mailto:philly_ambient-request@phobos.serve.com?subject=help> List-Post: <mailto:philly_ambient@phobos.serve.com> List-Subscribe: <http://phobos.serve.com/mailman/listinfo/philly_ambient>, <mailto:philly_ambient-request@phobos.serve.com?subject=subscribe> List-Id: a discussion list relevant to Philadelphia Ambient and Experimental Psychedelic Music Enthusiasts <philly_ambient.phobos.serve.com> List-Unsubscribe: <http://phobos.serve.com/mailman/listinfo/philly_ambient>, <mailto:philly_ambient-request@phobos.serve.com?subject=unsubscribe> List-Archive: <http://phobos.serve.com/pipermail/philly_ambient/> X-Original-Date: Mon, 3 Jun 2002 23:14:35 EDT Date: Mon, 3 Jun 2002 23:14:35 EDT X-UIDL: m;n!!9'f!!a2E"!3;D"! hey all a friend can get me some free tickets to see TOOL on monday august 12 at sovereign bank arena in trenton. i know mondays suck, but oh well. is anyone here into going? if so, contact me privately. i know it's not ambient, but neither is some of what we discuss here :) let me know asap, please gina _______________________________________________ Philly_ambient mailing list Philly_ambient(a)phobos.serve.com Subscribe, Unsubscribe, Edit Options at: http://phobos.serve.com/mailman/listinfo/philly_ambient a PAC(MaN) List http://simpletone.com -------------------------------------------------------------------- I don't know why pipermail would treat my aol subscribers different either. But it is. Aharon ---------------------------------------------------------------------- Comment By: Barry A. Warsaw (bwarsaw) Date: 2002-04-28 21:11 Message: Logged In: YES user_id=12800 Bizarre. I've never seen this, and I can't see any reason why Pipermail would treat aol.com addresses any different. ---------------------------------------------------------------------- You can respond by visiting: http://sourceforge.net/tracker/?func=detail&atid=100103&aid=229568&group_id…

1 0

[ mailman-Bugs-565052 ] make install fails
by noreply＠sourceforge.net 05 Jun '02

05 Jun '02

Bugs item #565052, was opened at 2002-06-05 21:41 You can respond by visiting: http://sourceforge.net/tracker/?func=detail&atid=100103&aid=565052&group_id… Category: configuring/installing Group: 2.1 beta Status: Open Resolution: None Priority: 5 Submitted By: Aliet Santiesteban Sifontes (aliet) Assigned to: Nobody/Anonymous (nobody) Summary: make install fails Initial Comment: Hi boy: I've been trying to build a rpm for mailman 2.1 b2 but the make install fails when you define something like this, make install prefix=/var/tmp/var/mailman var_prefix=/var/tmp/var/mailman I thought I was making something wrong so I did it with the sources rather than throught rpm, and I got the same error, this error causes that I can't not build a rpm for this version of mailman, this is the error Compiling: /var/tmp/var/mailman/Mailman/version.pr... Traceback (most recent call last); File "bin/update", line 45, in ? from Mailman import mm_cfg Import error: No module named Mailman make: *** [update] Error 1 I'm building in a Linux RedHat 7.3 ---------------------------------------------------------------------- You can respond by visiting: http://sourceforge.net/tracker/?func=detail&atid=100103&aid=565052&group_id…

1 0

hide web interface from users and "Results of your email commands"
by totschnig.michael＠uqam.ca 05 Jun '02

05 Jun '02

Hello, I am sorry if my question is not appropriate here, but I am using mailman from CVS, and I imagine things work quite different on Mailman 2.0 and 2.1. I have a list that is a newsletter associated to a web site on another host as the one mailman is running, and we have a form for subscription on the web site, which simply sends an email to list-subscribe@host. Ideally we would like that the process would be the most simple possible for the users, and that she does not see all the details of ours mailman system. The only page from the mailman web interface, I would like to show them is the "Confirm subscription page" when they activate the "confirm cookie" URL. Once they have confirmed, I would like to redirect them immediately to the web site, instead of showing them the confirmation page. Unfortunately this page is not customizable via the admin interface, otherwise I could use a redirect meta tag, as I did succesfully with the main info page for the list. And I would like to suppress the "Results of your email commands" since it is considered redundant by many users, even if they subscribe by email, and for this list they do not send the email themselves, but is originated by a script on the web site. So my two questions are: - Can I suppress the "Results of your email commands" email for this list or alternatively for the whole site? - Is there a way to suppress most parts of the web-interface for a list. Thanks in advance, Michael

2 2

Interesting study -- spam on posted addresses...
by Chuq Von Rospach 05 Jun '02

05 Jun '02

Interesting article on slashdot: <http://slashdot.org/article.pl?sid=02/02/17/2031249> Basically, DSLreports did a test, and found that e-mail addresses posted on a web site could start seeing spam in as little as 8 hours. I mention it for two reasons. One, since mail lists manage e-mail addresses (and archives of e-mail addresses), it is yet antother indication of just why we have to be careful about presenting and disclosing that stuff. And second, since one of the addresses presented and disclosed is that of the admin, we really need to come up with ways that allow newbies to contact an admin without easily disclosing addresses to spammers. And, unfortunately, the security problems with formmail.pl have shown THAT isn't really the answer... Chuq -- Chuq Von Rospach (chuqui(a)plaidworks.com -- http://www.chuqui.com/) Will Geek for hardware. Very funny, Scotty. Now beam my clothes down here, will you?

20 125

[ mailman-Bugs-474616 ] SECURITY: Pipermail permissions problem
by noreply＠sourceforge.net 05 Jun '02

05 Jun '02

Bugs item #474616, was opened at 2001-10-24 22:35 You can respond by visiting: http://sourceforge.net/tracker/?func=detail&atid=100103&aid=474616&group_id… Category: Pipermail Group: None Status: Closed Resolution: Wont Fix Priority: 8 Submitted By: H. Peter Anvin (hpa) Assigned to: Nobody/Anonymous (nobody) Summary: SECURITY: Pipermail permissions problem Initial Comment: $mailman_root/archive/private is o+x in the default installation. This allows anyone with local access to the machine to read the archives of private mailing lists, as long as they know the (trivial) structure of the files beneath this directory. I have verified that changing this directory to o-x causes *all* pipermail pages to become inaccessible, so that does not resolve the problem. There presumably needs to be a setgid program involved which can verify that the user is authenticated and give access to the archives if appropriate; then that directory can be made o-x. ---------------------------------------------------------------------- Comment By: Arne Georg Gleditsch (argggh) Date: 2002-06-05 11:00 Message: Logged In: YES user_id=387572 I'm not comfortable with this remaining unfixed. Is there any reason it couldn't be handled by doing --- Mailman/Archiver/Archiver.py 15 Feb 2002 16:28:03 -0000 1.1 +++ Mailman/Archiver/Archiver.py 5 Jun 2002 08:54:18 -0000 @@ -250,8 +250,12 @@ self._internal_name + '.mbox') privmbox = self.archive_directory + '.mbox' if self.archive_private: + os.chmod(privdir, 02770) + os.chmod(privmbox, 02770) breaklink(pubdir) breaklink(pubmbox) else: + os.chmod(privdir, 02775) + os.chmod(privmbox, 02775) makelink(privdir, pubdir) makelink(privmbox, pubmbox) or something? ---------------------------------------------------------------------- Comment By: Barry A. Warsaw (bwarsaw) Date: 2002-04-12 00:40 Message: Logged In: YES user_id=12800 I'm not inclined to fix this, since this arrangement is crucial to the web security of private archives. Since Mailman is usually run on mail and/or web servers that have very limited access anyway, I don't consider this an important vulnerability. ---------------------------------------------------------------------- You can respond by visiting: http://sourceforge.net/tracker/?func=detail&atid=100103&aid=474616&group_id…

1 0

[ mailman-Patches-564747 ] Makes "powered by" icons into links
by noreply＠sourceforge.net 05 Jun '02

05 Jun '02

Patches item #564747, was opened at 2002-06-05 07:42 You can respond by visiting: http://sourceforge.net/tracker/?func=detail&atid=300103&aid=564747&group_id… Category: Web UI Group: Mailman 2.0.x Status: Open Resolution: None Priority: 5 Submitted By: W Isaac Carroll (zaak) Assigned to: Nobody/Anonymous (nobody) Summary: Makes "powered by" icons into links Initial Comment: This makes the Mailman, Python, and GNU icons at the bottom of the web UI pages into links to their respective web sites. There are already links if mm_cfg.IMAGE_LOGOS is false. This patch simply makes the graphical version have the links as well. Patch against version 2.0.9 ---------------------------------------------------------------------- You can respond by visiting: http://sourceforge.net/tracker/?func=detail&atid=300103&aid=564747&group_id…

1 0

Re: [Mailman-Developers] bug demonstration
by Marc MERLIN 04 Jun '02

04 Jun '02

On Tue, Jun 04, 2002 at 12:28:33PM -0700, Paul Dickson wrote: > It happened to me today. A message from a Mailman 2.0.11 mailing list, > created by Mutt/1.2.5.1i. > > The References: field had 5 message-ids separated by spaces only, making > the line 254 characters long. The next line was a blank line (in which a > Status field had been added), pushing the rest of the header info into the > body (the mailing list info, which is why my filters could not sort the > message). > > I thought this problem was with my POP3 mailbox server I was using until > the test message came through on this list. I'm pretty sure the bugs are different. The one I refer to only happens if you have a very long line with no spaces, and it does not happen with mailman 2.0.11 (at least I couldn't get it to happen) Marc -- Microsoft is to operating systems & security .... .... what McDonalds is to gourmet cooking Home page: http://marc.merlins.org/ | Finger marc_f(a)merlins.org for PGP key

2 2

[ mailman-Bugs-564587 ] config_list breaks at filter_mime_types
by noreply＠sourceforge.net 04 Jun '02

04 Jun '02

Bugs item #564587, was opened at 2002-06-04 14:06 You can respond by visiting: http://sourceforge.net/tracker/?func=detail&atid=100103&aid=564587&group_id… Category: command line scripts Group: 2.1 beta Status: Open Resolution: None Priority: 5 Submitted By: Devin L. Ganger (dlganger) Assigned to: Nobody/Anonymous (nobody) Summary: config_list breaks at filter_mime_types Initial Comment: When running: config_list -o cpunk.conf cpunk-secpro on my list cpunk-secpro(a)lists.thecabal.org, I get the following error: (bofh:mailman) /home/mailman $ config_list -o cpunk.conf cpunk-secpro Traceback (most recent call last): File "/home/mailman/bin/config_list", line 268, in ? main() File "/home/mailman/bin/config_list", line 261, in main do_output(listname, outfile) File "/home/mailman/bin/config_list", line 113, in do_output do_list_categories(mlist, k, None, outfp) File "/home/mailman/bin/config_list", line 162, in do_list_categories lines = value.replace('\r', '').split('\n') AttributeError: 'list' object has no attribute 'replace' Doing a tail of the cpunk.conf file show the following: (bofh:mailman) /home/mailman $ tail cpunk.conf # matching MIME major type, e.g. image. Blank lines are ignored. # # After stripping message parts, any multipart attachment that is empty # as a result is removed all together. If the outer part's MIME type # matches one of the strip types, or if all of the outer part's subparts # are stripped, then the whole message is discarded. Finally, each # multipart/alternative section will be replaced by just the first # alternative that is non-empty after the specified types have been # removed. filter_mime_types = ---------------------------------------------------------------------- >Comment By: Devin L. Ganger (dlganger) Date: 2002-06-04 14:08 Message: Logged In: YES user_id=478874 This is on Solaris 7, Python 2.2: (bofh:devin) /home/devin $ python -V Python 2.2 (bofh:devin) /home/devin $ uname -a SunOS bofh.thecabal.internal 5.7 Generic_106541-14 sun4m sparc SUNW,SPARCsystem-600 ---------------------------------------------------------------------- You can respond by visiting: http://sourceforge.net/tracker/?func=detail&atid=100103&aid=564587&group_id…

1 0

[ mailman-Bugs-564587 ] config_list breaks at filter_mime_types
by noreply＠sourceforge.net 04 Jun '02

04 Jun '02

Bugs item #564587, was opened at 2002-06-04 14:06 You can respond by visiting: http://sourceforge.net/tracker/?func=detail&atid=100103&aid=564587&group_id… Category: command line scripts Group: 2.1 beta Status: Open Resolution: None Priority: 5 Submitted By: Devin L. Ganger (dlganger) Assigned to: Nobody/Anonymous (nobody) Summary: config_list breaks at filter_mime_types Initial Comment: When running: config_list -o cpunk.conf cpunk-secpro on my list cpunk-secpro(a)lists.thecabal.org, I get the following error: (bofh:mailman) /home/mailman $ config_list -o cpunk.conf cpunk-secpro Traceback (most recent call last): File "/home/mailman/bin/config_list", line 268, in ? main() File "/home/mailman/bin/config_list", line 261, in main do_output(listname, outfile) File "/home/mailman/bin/config_list", line 113, in do_output do_list_categories(mlist, k, None, outfp) File "/home/mailman/bin/config_list", line 162, in do_list_categories lines = value.replace('\r', '').split('\n') AttributeError: 'list' object has no attribute 'replace' Doing a tail of the cpunk.conf file show the following: (bofh:mailman) /home/mailman $ tail cpunk.conf # matching MIME major type, e.g. image. Blank lines are ignored. # # After stripping message parts, any multipart attachment that is empty # as a result is removed all together. If the outer part's MIME type # matches one of the strip types, or if all of the outer part's subparts # are stripped, then the whole message is discarded. Finally, each # multipart/alternative section will be replaced by just the first # alternative that is non-empty after the specified types have been # removed. filter_mime_types = ---------------------------------------------------------------------- You can respond by visiting: http://sourceforge.net/tracker/?func=detail&atid=100103&aid=564587&group_id…

1 0