Mailman 3 July 2002 - Mailman-Developers

Re: [Mailman-Developers] Opening up a few can o' worms here...
by J C Lawrence 17 Jul '02

17 Jul '02

On Tue, 16 Jul 2002 17:21:17 -0700 Chuq Von Rospach <chuqui(a)plaidworks.com> wrote: > On 7/16/02 3:55 PM, "Jay R. Ashworth" <jra(a)baylink.com> wrote: >> Outlaw Outlook? > Don't blame outlook here. Lots of mail clients do this 'temporary > caching'. $ wc -l ~/.exmh/exmh_addrs 289931 /home/claw/.exmh/exmh_addrs 'nuff said. -- J C Lawrence ---------(*) Satan, oscillate my metallic sonatas. claw(a)kanga.nu He lived as a devil, eh? http://www.kanga.nu/~claw/ Evil is a name of a foeman, as I live.

1 0

Re: [Mailman-Developers] Opening up a few can o' worms here...
by J C Lawrence 17 Jul '02

17 Jul '02

On Tue, 16 Jul 2002 18:55:52 -0400 Jay R Ashworth <jra(a)baylink.com> wrote: > On Tue, Jul 16, 2002 at 10:58:00AM -0700, Chuq Von Rospach wrote: > Automatically verifying PGP sigs as a whitelisting technique is merely > one approach that springs to mind. There are many more. Nothing prevents SPAMmers from creating endless addresses and GPG keys which they register with the various key servers, and they will once that barrier becomes popular enough to notice. > Yeah, but the Outhouse and OE teams aren't ever going there, and > they're your problem. No, they're merely the most visible manifestation. Address collection by MUAs is not new, and most of the other big Windows MUAs either do it as well, or can be relied upon adding that feature in the next 18 months. > Do you have documentary evidence, Chuq, that web harversters are the > *only* way that *a majority* of the spam-complainers addresses could > have gotten on those lists? Have you created test-accounts? Not 1 or > 2; a couple dozen, in different places? I've created a set of addresses on Kanga.Nu which pipe direct into razor-report. Those addresses are __ONLY__ visible on the relevant web pages. Each of them gets an average of 10 SPAM a day -- and those addresses are less than 6 months old. -- J C Lawrence ---------(*) Satan, oscillate my metallic sonatas. claw(a)kanga.nu He lived as a devil, eh? http://www.kanga.nu/~claw/ Evil is a name of a foeman, as I live.

1 0

Re: [Mailman-Developers] Opening up a few can o' worms here...
by J C Lawrence 17 Jul '02

17 Jul '02

On Tue, 16 Jul 2002 12:58:05 -0700 Chuq Von Rospach <chuqui(a)plaidworks.com> wrote: > On 7/16/02 12:19 PM, "John W Baxter" <jwblist(a)olympus.net> wrote: > Problem is, many users don't know how. And one could argue who ought > to solve this problem. True. > Should users be forced to jump through hoops to use a mail list > safely? Its worth noting that this problem is not unique to email or mailing lists. ICQ and other IM SPAM has been around a while. Heck, there have already been multiple attempts to SPAM Groove networks (which has a fairly strong structural protection against such). > Or is it the user's decision how safe to be? Minimally its a mutually complicit relationship. Each side has to assume some responsibility and behave in manners which assist the other in Doing The Right Thing (whatever that may be). The problem is, what is the base definition of Doing The Right Thing? > I could make a pithy comparison between spammers, computer viruses, > AIDS and safe sex, but you'd all throw veggies at me. I prefer eggs. >> I think the issue is larger than just mailing lists: SMTP-based email >> will be unusable soon. > No, but it has to adapt and evolve. Quickly. Yup. -- J C Lawrence ---------(*) Satan, oscillate my metallic sonatas. claw(a)kanga.nu He lived as a devil, eh? http://www.kanga.nu/~claw/ Evil is a name of a foeman, as I live.

1 0

Re: [Mailman-Developers] Opening up a few can o' worms here...
by J C Lawrence 17 Jul '02

17 Jul '02

On Tue, 16 Jul 2002 12:19:16 -0700 John W Baxter <John> wrote: > I think the issue is larger than just mailing lists: SMTP-based email > will be unusable soon. The replacement will be something permission > based with electronic signatures involved, and some TMDA-like way to > get started conversing with someone. Note that TMDA handling is trivially automated by SPAMmers and that they will so automatically handle and bypass TMDA as soon as it becomes popular enough for them to notice. Heck, I'm using Mimefilter which mails back insulting messages (which mentioned the -owner address for the relevant list) to posters who send unwanted MIME parts. It took little time for the SPAM rate on -owner to increase by an order of magnitude. -- J C Lawrence ---------(*) Satan, oscillate my metallic sonatas. claw(a)kanga.nu He lived as a devil, eh? http://www.kanga.nu/~claw/ Evil is a name of a foeman, as I live.

1 0

[ mailman-Patches-582567 ] No Archive Message
by noreply＠sourceforge.net 17 Jul '02

17 Jul '02

Patches item #582567, was opened at 2002-07-16 19:36 You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=300103&aid=582567&group_i… Category: Web UI Group: None Status: Open Resolution: None Priority: 5 Submitted By: Susan Dridi (sdridi) Assigned to: Nobody/Anonymous (nobody) Summary: No Archive Message Initial Comment: If there are no messages in a private archive (a new list, for example), and if a user visits the archives, they are given a message with more path information than they need. For example, if I have a Mailman list called yippee and my user name is smith, the message displayed is: No file /yippee/ (/evenhigherdirectory/higherdirectory/smith/archives/private/yippee/) The path is generated by the "safetruefilename" variable which comes from: line 102 of Mailman/Cgi/private.py: path = os.environ.get('PATH_INFO') true_filename = os.path.join( mm_cfg.PRIVATE_ARCHIVE_FILE_DIR, true_path(path)) and line 194 of Mailman/Cgi/private.py except IOError: # Avoid cross-site scripting attacks safetruefilename = cgi.escape(true_filename) safepath = cgi.escape(path) print 'Content-type: text/html\n' print "<H3>Archive File Not Found</H3>" print "No file", safepath, '(%s)' % safetruefilename This is more information than a user can deduce from the URL. Users of a private list have the right to view info posted to the list. Unauthorized users shouldn't be able to learn directory structure of the host. This is not even information that the admin needs to debug anything - the admin ought to know where the archives are stored! By commenting out the variables after print "No file", safepath, the user is given a better info message, in this example, No file /yippee/ This may not be the best solution, but it works for my project:) -Susan ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=300103&aid=582567&group_i…

1 0

[ mailman-Bugs-582274 ] Duplicate Subscription Request
by noreply＠sourceforge.net 16 Jul '02

16 Jul '02

Bugs item #582274, was opened at 2002-07-16 10:44 You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=100103&aid=582274&group_i… Category: (un)subscribing Group: 2.0.x Status: Open Resolution: None Priority: 5 Submitted By: rich cowan (leftlink) Assigned to: Nobody/Anonymous (nobody) Summary: Duplicate Subscription Request Initial Comment: Someone submitted a subscription request twice and instead of rejecting the second request, Mailman allowed it and it appeared twice in the subscriber approve window. here is an example of how this appeared: Date: Tue, 16 Jul 2002 06:25:19 -0400 Subject: 2 devel admin request(s) waiting From: devel-admin(a)lists.democracygroups.org To: devel-admin(a)lists.democracygroups.org X-Ack: no X-BeenThere: devel(a)lists.democracygroups.org X-Mailman-Version: 2.0.9 Precedence: bulk Message-Id: <E17UPWC-0002Ww-00@rainier> Sender: devel-owner(a)lists.democracygroups.org Errors-To: devel-owner(a)lists.democracygroups.org X-BeenThere: devel(a)lists.democracygroups.org List-Help: <mailto:devel- request(a)lists.democracygroups.org?subject=help> List-Post: <mailto:devel@lists.democracygroups.org> List-Subscribe: <http://lists.democracygroups.org/mailman/listinfo/de vel>, <mailto:devel- request(a)lists.democracygroups.org? subject=subscribe> List-Id: OC Software Development Volunteer <devel.lists.democracygroups.org> List-Unsubscribe: <http://lists.democracygroups.org/mailman/listinfo/de vel>, <mailto:devel- request(a)lists.democracygroups.org? subject=unsubscribe> List-Archive: <http://lists.democracygroups.org/pipermail/devel/> Status: The devel(a)lists.democracygroups.org mailing list has 2 request(s) waiting for your consideration at: http://lists.democracygroups.org/mailman/a dmindb/devel Please attend to this at your earliest convenience. This notice of pending requests, if any, will be sent out daily. Pending subscriptions: ksnyder@..ny.org Tue Jul 16 05:10:03 2002 ksnyder@..ny.org Tue Jul 16 05:20:02 2002 ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=100103&aid=582274&group_i…

1 0

Scrubbing Mailman lists
by Dan Kohn 15 Jul '02

15 Jul '02

I'd appreciate help adding the following features to Mailman to "scrub" questionable mailing lists into fully verified opt-in lists: I want to start with an unverified mailing list, and segment it into 2 lists containing those who have verified acceptance and those who haven't. Specifically, I'd like to add a footer to messages being sent to the non-verified list segment asking them to click a URL or send email to an address to verify. Taking the verification step would then move them onto the verified list segment. Also, anyone posting to the list would be moved to the verified list segment. I'd like this whole bundle of features to be bottled up as a standard Mailman option for "scrubbing" lists that are not initially 100% verified opt-in (i.e., that didn't originate with Mailman's confirm subscription feature turned on). Has anyone put something similar together already? If not, and you would be interested in doing so, could you please email me directly about doing so as consulting work? Since Mailman is GPL, I would of course release all patches back to the community. Thanks in advance for your help. - dan -- Dan Kohn <mailto:dan@dankohn.com> <http://www.dankohn.com/> <tel:+1-650-327-2600>

2 1

mailman and nfs
by Dave Stern - Former Rocket Scientist 15 Jul '02

15 Jul '02

I set up mailman (2.0.11) on a solaris 2.8 machine and am relatively happy with it. For various reasons, we want the mailman software (and homedir) nfsmounted from elsewhere. Configuring it with a hard nfsmount seems to work well but some here would rather it be automounted. Does mailman support automount? Is it suggested? I got it working with automount but on occasion get unexpected results eg webpage unavailable and giving traceback. I'm wondering if this is just a result of my testing (manually unmounting, reconfiguring, remounting) and getting a sort of race condition ie the partition isn't yet available for web access. Anyone? Thanks =-=-=-=-=-=-=-=-=-=-=-=- generated by /dev/dave -=-=-=-=-=-=-=-=-=-=-=-=-=-= David Stern University of Maryland Institute for Advanced Computer Studies

1 0

HELP
by At10109fer＠aol.com 14 Jul '02

14 Jul '02

I will appreciate your help.-I am traying to download & install the Mailman to Windows could you have info abuot that?.Thank you very much in advance.SINCERELY YOURS FERNANDO ESPINOSA R.

2 1

[ mailman-Feature Requests-581103 ] do not moderate mails from nntp-groups
by noreply＠sourceforge.net 13 Jul '02

13 Jul '02

Feature Requests item #581103, was opened at 2002-07-13 20:35 You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=350103&aid=581103&group_i… Category: None Group: None Status: Open Resolution: None Priority: 5 Submitted By: Markus Mandalka (mandalka) Assigned to: Nobody/Anonymous (nobody) Summary: do not moderate mails from nntp-groups Initial Comment: i wish to have an setting for the nntp-gateway that allows posting the nntp-articles without moderating on lists, that need confirmation for member-postings. The moderation should only be for the emails sendet to the list, not for nntp-postings. ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=350103&aid=581103&group_i…

1 0