Mailman 3 August 2010 - Mailman-Developers

before next release: disable backscatter in default installation
by Jo Rhett Nov. 7, 2022

Nov. 7, 2022

Hi. There's a fairly simple problem here that needs to be addressed. And it's mostly a documentation/install problem. I'm hoping we can get this resolved before the next release. PROBLEM: Mailman comes out of the box ready to backscatter spam people. Yes, it's easy enough to fix. But because it comes stock this way, and is documented to install this way, most people install it to do this. Those of us who work in abuse departments are tired of hearing "well that's how Mailman works". We also object to having to teach people how to fix their mailman installations because it's not documented in the current manual. This is *exactly* like Sendmail 14 years ago. We didn't accept it then, and Sendmail fixed the problem. RESOLUTION: Mailman default installation should not backscatter in a default configuration. 1. Don't create backscatter aliases for subscribe/unsubscribe/etc by default. Nearly everyone uses web based signup. 2. Discard or hold messages from non-subscribers by default. I would think that it would be perfectly reasonable to have documentation on how to enable the 1980s-style -request / -subscribe etc aliases. However this documentation should have a note that this is against the AUP of nearly every network provider, and enabling it will likely cause them to get listed in various blacklists as a backscatter source. FYI: I know that this goes against the instincts of many old-time mailing list advocates here. But after dealing with a 10k/hour backscatter DoS my tolerance for this problem is understandably limited. Yes, it was a sweet day back in the 1980s. I was running a mailing list server and several UUCP gateways at the time, so I remember them well. But those days are past, and we need to deal with the reality of today. -- Jo Rhett Net Consonance : consonant endings by net philanthropy, open source and other randomness

21 168

Exporting member info (including options)
by Aaron Kreider Aug. 24, 2010

Aug. 24, 2010

Is there a good way to export all of the member info for a list? I want all the mailing list options as well as the email address, so that I can import it into MySQL and use the MySQL adaptor. I know "list_members" gives just the email addresses. Is the best method for me to use dbdump to access the "pickle" files and then write a script to parse that? Aaron -- Energy Justice Communities Map Developer - http://www.energyjustice.net/map

4 12

Subscription Authentication.
by Ian Eiloart Aug. 19, 2010

Aug. 19, 2010

Hi, We've been discussing mailing lists over on the ietf-dkim mailing list, and the issue of when a receiving MTA should trust mail from a list. I had an idea, though it's only vaguely formed: It would be nice if a list server would verify subscription requests using OAuth, Windows Live ID Delegated Authentication, or similar. Perhaps instead of the usual verification by email. If <http://fingerprintapp.com/email-client-stats> is accurate, that's about 35% of email users with Gmail, Yahoo, and Hotmail. If that happened, then then the subscriber's mail system has a chance of understanding that the subscriber has, indeed, subscribed to the list. At that point, the receiving mail system might whitelist mail from that list, provided that it had a good DKIM signature, or an SPF pass, perhaps. One might even build some sort of federated list management infrastructure, so a user could go to one site to manage all their Mailman3 mailing list subscriptions. With some kind of future standard, perhaps other MLMs could join the party later. -- Ian Eiloart IT Services, University of Sussex 01273-873148 x3148 For new support requests, see http://www.sussex.ac.uk/its/help/

2 1

MM3 nntp support?
by Tanstaafl Aug. 14, 2010

Aug. 14, 2010

Hello, Back in December Barry had mentioned that he was exploring adding nntp (and IMAP) support to the archives, but didn't clarify much further... and I googled quite a bit, and these 2 or 3 posts on the subject is all I could find.: > Re: [Mailman-Users] NNTP server for "local" newsgroups ? > > John Fitzsimons > Tue, 22 Dec 2009 14:44:10 -0800 > > On Mon, 21 Dec 2009 22:13:15 -0500, Barry Warsaw wrote: > >>On Dec 21, 2009, at 7:36 PM, John Fitzsimons wrote: > > Hi Barry, > >>> In another thread we were talking about Mailman to web forum >>> options. As Mailman can manage NNTP I wondered whether anyone >>> here had come across an NNTP server for "local" (not usenet) >>> newsgroups ? >> Yes. I intend to explore using Twisted in Mailman 3 to provide NNTP >> and IMAP access to Mailman archives. My question is - would this (hopefully? please!?) also include posting support from a newsreader, so that nntp users could also interact with the list discussion(s) using their preferred newsreader? Or was this for reading only? Thanks, Charles

2 3

MySQL adaptor - storing in a remote database - ping times
by Aaron Kreider Aug. 13, 2010

Aug. 13, 2010

I'm using the MySQL adaptor and am wondering whether it is acceptable to have the database in a remote location with a 30 ms ping time between it and the server that runs mailman? We'd be running medium sized lists of 100-300 subscribers. It depends on whether the MySQL adaptor will do a couple queries to send out an email, or if it does a query for every single subscriber (in which case a ping time of 30 ms is unacceptable). My organization has a database that is on a server in our office and our website server is located in a different spot. So if we had the Mailman database in our office, it would integrate faster and easier with the rest of the organization database. -- Energy Justice Communities Map Developer - http://www.energyjustice.net/map

2 1

Mailman MySQL adaptor - MySQLdb module error
by Aaron Kreider Aug. 12, 2010

Aug. 12, 2010

I'm trying to get the Mailman MySQL adaptor to work, while we're waiting for Mailman 3 to be finished. I'd love some help! I followed the instructions on: http://loeki.tv/log/archives/81-Setting-up-Mailman-to-store-members-in-a-My… I have a VPS (virtual private server) running Centos, cPanel, and Mailman 2.1.13. I create a new list to test the adaptor. When I go to the list's page it gives me an error. Mailman's error log says "ImportError: No module named MySQLdb". I've installed the MySQLdb module and am able to run a simple test script at the command line (that connects to the mysql database), without a problem. So what could be the problem? My setup has two versions of python running - one in /usr/bin/python and another in /usr/bin/python2.4, however both of them run the test script without a problem. I'm wondering if having two versions might be the cause? Or could there be a user permissions issue? Test Script: import MySQLdb # Open database connection db = MySQLdb.connect("localhost","testuser","test123456","TESTDB" ) # prepare a cursor object using cursor() method cursor = db.cursor() # execute SQL query using execute() method. cursor.execute("SELECT VERSION()") # Fetch a single row using fetchone() method. data = cursor.fetchone() print "Database version : %s " % data # disconnect from server db.close()

3 11

Mailman 3.0 install woes...
by Max Lanfranconi Aug. 12, 2010

Aug. 12, 2010

HI all, I am trying to install mailman 3 on Solaris 10 x86 as I would like to test a few new features that would greatly simplify our current deployment. (mailman 2.1.12) I got the latest bazaar image as per the website instructions: bzr branch lp:mailman I then ran #python2.6 bootstrap.py Downloading http://pypi.python.org/packages/2.6/s/setuptools/setuptools-0.6c11-py2.6.egg Creating directory '/usr/local/mailman3/mm3bzr/mailman/bin'. Creating directory '/usr/local/mailman3/mm3bzr/mailman/parts'. Creating directory '/usr/local/mailman3/mm3bzr/mailman/eggs'. Creating directory '/usr/local/mailman3/mm3bzr/mailman/develop-eggs'. Generated script '/usr/local/mailman3/mm3bzr/mailman/bin/buildout'. # followed by # bin/buildout Getting distribution for 'setuptools'. Got setuptools 0.6c12dev-r80622. Upgraded: setuptools version 0.6c12dev-r80622; restarting. Generated script '/usr/local/mailman3/mm3bzr/mailman/bin/buildout'. Develop: '/usr/local/mailman3/mm3bzr/mailman/.' Downloading http://pypi.python.org/packages/source/d/distribute/distribute-0.6.8.tar.gz Extracting in /tmp/tmpsHTFX9 Now working in /tmp/tmpsHTFX9/distribute-0.6.8 Building a Distribute egg in /usr/local/mailman3/mm3bzr/mailman /usr/local/mailman3/mm3bzr/mailman/distribute-0.6.8-py2.6.egg warning: no previously-included files matching '*.egg-info' found anywhere in distribution no previously-included directories found matching 'src/attic' no previously-included directories found matching 'src/web' Getting distribution for 'z3c.recipe.sphinxdoc'. Got z3c.recipe.sphinxdoc 0.0.8. Getting distribution for 'Sphinx'. Got Sphinx 1.0.1. Getting distribution for 'docutils'. warning: no files found matching 'MANIFEST' warning: no previously-included files matching '.cvsignore' found under directory '*' warning: no previously-included files matching '*.pyc' found under directory '*' warning: no previously-included files matching '*~' found under directory '*' warning: no previously-included files matching '.DS_Store' found under directory '*' zip_safe flag not set; analyzing archive contents... docutils.parsers.rst.directives.misc: module references __file__ docutils.writers.html4css1.__init__: module references __file__ docutils.writers.pep_html.__init__: module references __file__ docutils.writers.s5_html.__init__: module references __file__ docutils.writers.latex2e.__init__: module references __file__ docutils.writers.newlatex2e.__init__: module references __file__ docutils.writers.odf_odt.__init__: module references __file__ Got docutils 0.7. Getting distribution for 'zc.recipe.egg'. Got zc.recipe.egg 1.2.3b2. Getting distribution for 'Jinja2>=2.2'. warning: no previously-included files matching '*' found under directory 'docs/_build/doctrees' warning: no previously-included files matching '*.pyc' found under directory 'jinja2' warning: no previously-included files matching '*.pyc' found under directory 'docs' warning: no previously-included files matching '*.pyo' found under directory 'jinja2' warning: no previously-included files matching '*.pyo' found under directory 'docs' Got Jinja2 2.5. Getting distribution for 'Pygments>=0.8'. Got Pygments 1.3.1. Getting distribution for 'z3c.recipe.filetemplate'. Got z3c.recipe.filetemplate 2.1.0. Getting distribution for 'zope.testing<4'. warning: no files found matching '*.test' under directory 'src' warning: no files found matching 'sampletests' under directory 'src' Got zope.testing 3.10.0. Getting distribution for 'zope.interface'. Got zope.interface 3.6.1. Getting distribution for 'zope.configuration'. Got zope.configuration 3.7.2. Getting distribution for 'zope.component'. Got zope.component 3.9.5. Getting distribution for 'storm'. Got storm 0.17. Getting distribution for 'restish'. Got restish 0.11. Getting distribution for 'locknix'. No Pyrex, trying Cython... The python package 'Pyrex' is not available. If the .c files are available, they will be built, but modifying the .pyx files will not rebuild them. bzrlib/_bencode_pyx.c: In function `__pyx_f_6bzrlib_12_bencode_pyx_7Encoder_process': bzrlib/_bencode_pyx.c:1783: warning: '__pyx_exc_lineno' might be used uninitialized in this function bzrlib/_bencode_pyx.c: In function `__pyx_f_6bzrlib_12_bencode_pyx_7Decoder__decode_int': bzrlib/_bencode_pyx.c:648: warning: '__pyx_exc_lineno' might be used uninitialized in this function bzrlib/_bencode_pyx.c: In function `__pyx_f_6bzrlib_12_bencode_pyx_7Decoder__decode_object': bzrlib/_bencode_pyx.c:380: warning: '__pyx_r' might be used uninitialized in this function bzrlib/_bencode_pyx.c:491: warning: '__pyx_exc_lineno' might be used uninitialized in this function bzrlib/_groupcompress_pyx.c: In function `__pyx_f_6bzrlib_18_groupcompress_pyx__apply_delta': bzrlib/_groupcompress_pyx.c:1271: warning: '__pyx_v_cmd' might be used uninitialized in this function bzrlib/_rio_pyx.c: In function `__pyx_f_6bzrlib_8_rio_pyx__read_stanza_unicode': bzrlib/_rio_pyx.c:681: warning: '__pyx_r' might be used uninitialized in this function bzrlib/_rio_pyx.c:935: warning: '__pyx_exc_lineno' might be used uninitialized in this function bzrlib/_rio_pyx.c: In function `__pyx_f_6bzrlib_8_rio_pyx__read_stanza_utf8': bzrlib/_rio_pyx.c:367: warning: '__pyx_r' might be used uninitialized in this function bzrlib/_rio_pyx.c:624: warning: '__pyx_exc_lineno' might be used uninitialized in this function bzrlib/_readdir_pyx.c: In function `__pyx_f_6bzrlib_12_readdir_pyx_13UTF8DirReader_read_dir': bzrlib/_readdir_pyx.c:992: warning: '__pyx_exc_lineno' might be used uninitialized in this function bzrlib/_readdir_pyx.c:1035: warning: '__pyx_exc_lineno' might be used uninitialized in this function In file included from /usr/local/include/python2.6/Python.h:8, from bzrlib/_patiencediff_c.c:28: /usr/local/include/python2.6/pyconfig.h:1004:1: warning: "_FILE_OFFSET_BITS" redefined In file included from /usr/include/iso/stdlib_iso.h:30, from /usr/include/stdlib.h:18, from bzrlib/_patiencediff_c.c:26: /usr/include/sys/feature_tests.h:188:1: warning: this is the location of the previous definition error: Setup script exited with error: SandboxViolation: mkdir('/usr/share/apport',) {} The package setup script has attempted to modify files on your system that are not within the EasyInstall build area, and has been aborted. This package cannot be safely installed by EasyInstall, and may not support alternate installation locations even if you run its setup script by hand. Please inform the package's author and the EasyInstall maintainers to find out if a fix or workaround is available. An error occured when trying to install locknix 1.0.2. Look above this message for any errors that were output by easy_install. While: Installing. Getting section filetemplates. Initializing part filetemplates. Getting distribution for 'locknix'. Error: Couldn't install: locknix 1.0.2 Please help ? Thanks in advance, Max -- Oracle <http://www.oracle.com> Max Lanfranconi | Principal Product Manager Phone: +1 408 276 3280 <tel:+1%20408%20276%203280> | Fax: +1 408 521 2016 <fax:+1%20408%20%20521%202016> | Mobile: +1 408 505 1020 <tel:+1%20408%20505%201020> Oracle Java Community Process 4220 Network Circle | Santa Clara, CA 95054 Green Oracle <http://www.oracle.com/commitment> Oracle is committed to developing practices and products that help protect the environment

1 0

Re: [Mailman-Developers] [Mailman Confluence] Development > Web UI Mockups
by Adam McGreggor Aug. 5, 2010

Aug. 5, 2010

On Thu, Aug 05, 2010 at 05:21:00AM -0700, wiki(a)list.org wrote: > Page: Web UI Mockups (http://wiki.list.org/display/DEV/Web+UI+Mockups) > > Attached by Anna Granudd: > --------------------------------------------------------------------- > mockup_user_membership_settings.png (118 kB) - http://wiki.list.org/download/attachments/8978877/mockup_user_membership_se… -------- explanation of the pictures -------- For those who can't see this page, it's a few (very good) drawing showing two tabs: user settings and membership settings. the user settings tab has: [ Logout ] Real name [ box ] Password [ box ] Language [ drop-down: Language 1 / Language 2 / Language 3 ] [ Save changes ] the membership settings tab has: [ Logout ] Membership settings Some mockup text asking the user to click the membership list they wish to edit... [ LINK: Membership list 1 ] [ LINK: Membership list 2 ] [ LINK: Membership list 3 ] With an arrow, demonstrating what happens on click: Lorem ipsum dolor ... labore et Hide address () Yes () No Receive list copy () Yes () No Receive own postings () Yes () No Delivery mode [ drop-down: Mode 1 / Mode 2 / Mode 3 ] --------- end explanation -------------- What that's missing to me is: * a password change option; * a password reset option; * a list of "my email addresses"; * the ability to set language for the lists, rather than settings, or perhaps change 'Language' to 'Default/Prefered Language' It'd be nice if clicking on a list where one's an admin/moderator, there was a special link or something to take one to those options for the list. -- ``Government incompetence [is] one of the UK's most important safeguards against totalitarianism.'' (John Lettice)

4 4