Mailman 3 November 2013 - Mailman-Developers

Re: [Mailman-Developers] Mailman DMARC Support (it's not what you think!)
by Franck Martin Nov. 7, 2013

Nov. 7, 2013

Yes this is one of the other options to do. The last one is to do Original Authentication Header, but transitive trust on email is complicated. To be noted, the procedure, in this patch, to find the policy record in the DNS, is not in line with the best current practice specified in the DMARC spec, far from it. Also, what about p=quarantine? ----- Original Message ----- From: "Jim Popovitch" <jimpop(a)gmail.com> To: Mailman-Developers(a)python.org Sent: Sunday, October 20, 2013 3:17:17 PM Subject: [Mailman-Developers] Mailman DMARC Support (it's not what you think!) Hello, Having read the archives, I see that (at least 6 of) you are aware of DMARC, or as I like to call it YAPFS. (Yet Another Panacea For Spam) :-) Earlier this year Mark asked me to run by MM-Dev a patch that Phil Pennock and I collaborated on. Mark, thank you for your valuable feedback, I have addressed all but 1 of those issues. Phil's and my take is that mailing lists, like MTAs, have no business modifying the From header; nor should mailing lists accept mail that they knowingly can't reflect. To that end, we have added support for testing the From domain for a DMARC p=reject policy, and if it exists, allowing lists to Accept/Hold/Reject/Discard the message. Here is the LP diff for your perusal: http://bazaar.launchpad.net/~jimpop/mailman/dmarc-reject/revision/1379?reme… I will soon be porting this to 3.0, and I will return here for input on that as well. Thank you everyone for your valued opinions, -Jim P. _______________________________________________ Mailman-Developers mailing list Mailman-Developers(a)python.org https://mail.python.org/mailman/listinfo/mailman-developers Mailman FAQ: http://wiki.list.org/x/AgA3 Searchable Archives: http://www.mail-archive.com/mailman-developers%40python.org/ Unsubscribe: https://mail.python.org/mailman/options/mailman-developers/franck%40peachym… Security Policy: http://wiki.list.org/x/QIA9

2 1

Re: [Mailman-Developers] Mailman DMARC Support (it's not what you think!)
by Franck Martin Nov. 7, 2013

Nov. 7, 2013

----- Original Message ----- > From: "Andreas Schulze" <sca(a)andreasschulze.de> > To: mailman-developers(a)python.org > Sent: Wednesday, November 6, 2013 11:28:42 PM > Subject: Re: [Mailman-Developers] Mailman DMARC Support (it's not what you think!) > > > Zitat von Jim Popovitch <jimpop(a)gmail.com>: > > > ... that mailing lists, like MTAs, have no business modifying the > > From header; > I fully agree with these opinions an like to add "should not modify > the messagebody" > The lists at apache.org do not modify the body and works well with DKIM/DMARC. However there are lists that do modify the message body...

1 0

Re: [Mailman-Developers] Mailman DMARC Support (it's not what you think!)
by Andreas Schulze Nov. 7, 2013

Nov. 7, 2013

Zitat von Jim Popovitch <jimpop(a)gmail.com>: > ... that mailing lists, like MTAs, have no business modifying the > From header; I fully agree with these opinions an like to add "should not modify the messagebody" > nor should mailing lists accept mail that they knowingly can't reflect. "reflect" is a really good word for the listmanagers job. Andreas

1 0

REST API call for creating archive view?
by Colin Fleming Nov. 7, 2013

Nov. 7, 2013

Hi all, I'm interested in using Mailman to set up a mailing list for my product. I'd like to have it be fully integrated into my website, so I'm planning to use Mailman 3 and the REST API. I've checked out mailman.client and poked around, and also looked at http://bazaar.launchpad.net/~mailman-coders/mailman/3.0/files/head:/src/mai…, but the one thing I couldn't see was any way to access mail messages themselves. Is there a way to create an archive view (i.e. present a view of all messages in a list and allow reading particular mails) using the current API? Thanks, Colin

1 0

Wiki Migration Update
by Paul Boddie Nov. 4, 2013

Nov. 4, 2013

Hello, Time has passed and some more time has been spent on the wiki migration. As always, the results can be found here: http://mmwiki.boddie.org.uk/ The archived content now reflects the real wiki from yesterday - 2nd November - so the translated content should reflect the existing wiki fairly accurately and include recent edits. Dates and History ----------------- One matter that was not addressed at all before now was that of accurate date information in the page histories. I needed to patch the MoinMoin package installer for this, and there turns out to be a good reason why it doesn't support preserving the editing dates: the edit log would need sorting afterwards, and that would probably need to be done offline. Moreover, taking different packages of pages and combining them requires the histories from the different packages to be merged, so I had to write a script to do this. The result is that, subject to time zone ambiguity, the edit dates should be accurate in the converted content and the RecentChanges should reflect what you see on the current Confluence wiki. Users ----- Last time, I reintroduced user details to the migrated wiki, but one item that remains is that of actually importing users. To illustrate user import, I imported four recent users of the wiki that happened to be useful for testing various aspects of the conversion. For example: http://mmwiki.boddie.org.uk/DEV/A_5_minute_guide_to_get_the_Mailman_web_UI_… Here, you'll see that the comments at the bottom of the page bear the name of the commenter, who helpfully supplied some non-ASCII characters in her name so that I could encounter some problems with MoinMoin's command option handling. :-) As I mentioned last time, the method of acquiring user profile information is not as satisfactory as that of getting the page data out of Confluence, but I imagine that people will want to review the user list, exclude obvious spammers, and then send out account reset e-mails - there must be some e-mail experts here willing to do that nicely ;-) - and so the process will necessarily involve some manual work. Redirects --------- Also done last time were redirects: http://mmwiki.boddie.org.uk/x/AgA3 http://mmwiki.boddie.org.uk/pages/viewpage.action?pageId=3604482 This time, I've added support for various other Confluence URL paths, such as searching: http://mmwiki.boddie.org.uk/dosearchsite.action?searchQuery.queryString=exi… The special PDF export action is supported, although this really requires Java, fop, xsltproc and DocBook XSL resources: http://mmwiki.boddie.org.uk/pages/doexportpage.action?pageId=3604482&type=T… Confluence seems to use this kind of URL as well: http://mmwiki.boddie.org.uk/spaces/flyingpdf/pdfpageexport.action?pageId=36… And there's also the highly sophisticated dashboard action (which just redirects to the front page): http://mmwiki.boddie.org.uk/dashboard.action Comments -------- I have reviewed the import of comments and improved the functionality of the MoinMoin extensions supporting new comments. I gave an example of comments above in the "Users" section. New comments assign complete ownership of a comment to the author, but that author must have write access to the page on which the comment will appear (even though they are actually making a subpage). Existing comments from Confluence already assign ownership to the author of the comment when converted. To Do ----- I always provide a list of things that still need doing, so here are some familiar items: It might also be nice to have a list of attachments on pages that have them, and I will take a look to see how Confluence tends to present such things. (I'm not sure if this is a great priority, though. You can always follow the "Attachments" link to see what's there.) User home pages should probably be populated and have things like profile images (if provided), activity indicators, and maybe the dashboard functionality should be emulated, too. (People agreed that this wasn't a priority.) In Conclusion ------------- As I have mentioned previously, the source code for the converter can be found here: http://hgweb.boddie.org.uk/ConfluenceConverter/ Please take another look at your favourite pages and let me know if anything has gone badly wrong in the conversion process. With this I hope we are nearing the point of final migration. Paul

2 1