Mailman 3 March 2013 - Mailman-Developers

before next release: disable backscatter in default installation
by Jo Rhett Nov. 7, 2022

Nov. 7, 2022

Hi. There's a fairly simple problem here that needs to be addressed. And it's mostly a documentation/install problem. I'm hoping we can get this resolved before the next release. PROBLEM: Mailman comes out of the box ready to backscatter spam people. Yes, it's easy enough to fix. But because it comes stock this way, and is documented to install this way, most people install it to do this. Those of us who work in abuse departments are tired of hearing "well that's how Mailman works". We also object to having to teach people how to fix their mailman installations because it's not documented in the current manual. This is *exactly* like Sendmail 14 years ago. We didn't accept it then, and Sendmail fixed the problem. RESOLUTION: Mailman default installation should not backscatter in a default configuration. 1. Don't create backscatter aliases for subscribe/unsubscribe/etc by default. Nearly everyone uses web based signup. 2. Discard or hold messages from non-subscribers by default. I would think that it would be perfectly reasonable to have documentation on how to enable the 1980s-style -request / -subscribe etc aliases. However this documentation should have a note that this is against the AUP of nearly every network provider, and enabling it will likely cause them to get listed in various blacklists as a backscatter source. FYI: I know that this goes against the instincts of many old-time mailing list advocates here. But after dealing with a 10k/hour backscatter DoS my tolerance for this problem is understandably limited. Yes, it was a sweet day back in the 1980s. I was running a mailing list server and several UUCP gateways at the time, so I remember them well. But those days are past, and we need to deal with the reality of today. -- Jo Rhett Net Consonance : consonant endings by net philanthropy, open source and other randomness

21 168

Re: [Mailman-Developers] GSOC 2013 : Authenticated REST-API in Postorius/Django
by Richard Wackerbarth April 6, 2013

April 6, 2013

Welcome to our community, I'm happy to see that you are interested in the REST interfaces. In addition to TastyPie, I suggest that you also look at django-rest-framework. Please compare the two and let us know what you see as the advantages and disadvantages of each. Richard On Mar 28, 2013, at 4:02 PM, Rahul Gaur <rahul.nbg(a)gmail.com> wrote: > Hello, > > I have been searching for Python/Django projects for a while and I > stumbled upon the Mailman ideas page today. > I am very much interested in discussing more about the *Authenticated > REST-API in Postorius/Django *and I hope to work on it over the summer *, *but > let me first introduce my self. > > I am into third year of my engineering (Computer Science) and I have been > using Python since my first year and for the past couple of months I have > been using Django for experimental projects at college and for a interest > based social networking site(initially started from pinax). > > I have already cloned the Mailman code base and it's up and running , I > will go through the source code in next couple of days. > > I haven't implemented RESTful API's before , but I have started learning > more about REST and HTTP protocols already and I hope that I would be in a > better state by the time GSOC starts. > > At the moment I am experimenting with the Django Tastypie and I have been > wondering if the developers community here have been considering it or > anything similar to it ? > > I would like to get more involved with this project , if this is something > community is seeking currently . > > Please advice, how can I proceed.

2 1

Re: [Mailman-Developers] GSOC 2013 : Authenticated REST-API in Postorius/Django
by Barry Warsaw March 29, 2013

March 29, 2013

Hi Rahul, welcome to mailman-developers! On Mar 29, 2013, at 02:32 AM, Rahul Gaur wrote: >I haven't implemented RESTful API's before , but I have started learning >more about REST and HTTP protocols already and I hope that I would be in a >better state by the time GSOC starts. I highly recommend Leonard Richardson's and Sam Ruby's O'Reilly book on RESTful Web Services: http://shop.oreilly.com/product/9780596529260.do Although the book's been out for many years now, I still think it holds up well, and will give you a great understanding of the basic concepts and design principles behind REST. It also gives lots of great tips for organizing your resources, etc. Of course, it makes the most sense for the authenticated REST API to as closely mimic the core admin API as possible. Where there are conflicts, we should discuss on this mailing list. Cheers, -Barry

1 0

GSOC 2013 : Authenticated REST-API in Postorius/Django
by Rahul Gaur March 28, 2013

March 28, 2013

Hello, I have been searching for Python/Django projects for a while and I stumbled upon the Mailman ideas page today. I am very much interested in discussing more about the *Authenticated REST-API in Postorius/Django *and I hope to work on it over the summer *, *but let me first introduce my self. I am into third year of my engineering (Computer Science) and I have been using Python since my first year and for the past couple of months I have been using Django for experimental projects at college and for a interest based social networking site(initially started from pinax). I have already cloned the Mailman code base and it's up and running , I will go through the source code in next couple of days. I haven't implemented RESTful API's before , but I have started learning more about REST and HTTP protocols already and I hope that I would be in a better state by the time GSOC starts. At the moment I am experimenting with the Django Tastypie and I have been wondering if the developers community here have been considering it or anything similar to it ? I would like to get more involved with this project , if this is something community is seeking currently . Please advice, how can I proceed. Thanks and Regards ! ---------------------------------------------------------------------------------------------------------------------- *Rahul Gaur* *irc : iamaregee2* *web: *http://www.rahulgaur.info* * *blogs : *aregee.wordpress.com *fb:* http://facebook.com/iamaregee *github: *https://github.com/aregee

1 0

Mailman log access on cPanel
by Mark Sapiro March 26, 2013

March 26, 2013

Many cPanel Mailman users have issues that are difficult to resolve because they don't have access to Mailman's logs. I spoke with a cPanel developer about this at PyCon, and he has created a feature request at <http://features.cpanel.net/responses/as-a-web-site-owner-i-need-access-to-a…>. If you are interested in this, go to the above URL and vote for it. Voting requires registration on the site and that requires providing your name and email address and then waiting for a password to be mailed, but apparently anyone can do it. -- Mark Sapiro <mark(a)msapiro.net> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan

1 0

Interested in GSoC 2013
by Manish Gill March 20, 2013

March 20, 2013

Hello. I'm interested in Participating in Google Summer of Code 2013 and have been searching for good projects in Python. Thought I'd drop by and introduce myself. :) I'm a 22 years old CS student, and have worked been working in Python for the past year or so, primarily web stuff in Flask/Django. 2 projects in particular caught my eye and I hope to work on either one of them with Mailman this summer. :) - The first is the Alternative authentication possibilities - as I've worked on OAuth integration with Facebook/Twitter in a few Flask applications. - The second is the Anti-spam/anti-abuse in Mailman - I admit I don't know much about how anti-spam techniques work, but that's preciously why I'm interested in working on this one, so I can learn new things. :) I've set up a basic virtualenv with Mailman and will be going through the code in the next few days (lots of code!). Thanks!

2 1

Re: [Mailman-Developers] Error in Archive unpack while setting up mailman client 1.0.0
by mahendra singh meena March 16, 2013

March 16, 2013

Thanks a lot Florian, As you suggested I bypassed above issue by replacing "mocker" library with "mock". Its really good to see the development server running on my system. One more thing, I know basic Python and few basics of Django but willing to take part in the upcoming mailman PyCon sprint ( http://wiki.list.org/display/DEV/PyCon+Sprint+2013 ), so that I can get involved and gather more knowledge from you guys about Mailman development. So can I really take part in the sprint remotely ? Regards On Fri, Mar 15, 2013 at 12:53 AM, Florian Fuchs <flo.fuchs(a)gmail.com> wrote: > Hi Mahendra, > > this seems to be caused by the "mocker" library being distributed as a bzip2 > archive. A while ago another developer ran into the same problem and solved > it by installing bzip2 separately and then switching to python 2.6 (IIRC). > Obviously being stuck with py2.6 is a less then ideal solution, but if you > can wait a little: I am currently doing some work on mailman.client to > prepare for the Pycon development sprints starting on monday. Part of that > work is replacing the "mocker" library with another one called "mock", which > is distributed as a less exotic gzipped tarball. This is no solution for > your general problem installing bzipped python packages, but at least it > will most probably solve this particular issue... > > I'll post a message here when I'm done... > > Cheers > Florian > > > > > 2013/3/14 mahendra singh meena <mahendra007.s(a)gmail.com> >> >> This is my first time I am setting up mailman.Using step-by-step >> procedure from >> http://wiki.list.org/display/DEV/A+5+minute+guide+to+get+the+Mailman+web+UI… >> >> when i am doing :- >> $ cd mailman.client >> $ python setup.py develop >> >> I am gettin following error :- >> ... >> Processing mocker-1.1.1.tar.bz2 >> error: Not a recognized archive type: >> /tmp/easy_install-kM8hYI/mocker-1.1.1.tar.bz2 >> >> Any clue how to solve this ? >> I asked the same on irc but i feel its quite inactive might be due to >> the time-zone difference with other developers. >> >> One more thing that I noticed during the same step is when it >> downloads mocker and other requirements using script >> >> python2.7/site-packages/distribute-0.6.10-py2.7.egg/setuptools/package_index.py >> It takes proxy not into account when opening url in >> open_with_auth(url).So, I think we shall modify it to take proxy >> option also. >> >> Please guide me if I have skipped any point or taken a wrong step. >> >> Regards >> Mahendra >> _______________________________________________ >> Mailman-Developers mailing list >> Mailman-Developers(a)python.org >> http://mail.python.org/mailman/listinfo/mailman-developers >> Mailman FAQ: http://wiki.list.org/x/AgA3 >> Searchable Archives: >> http://www.mail-archive.com/mailman-developers%40python.org/ >> Unsubscribe: >> http://mail.python.org/mailman/options/mailman-developers/flo.fuchs%40gmail… >> >> Security Policy: http://wiki.list.org/x/QIA9 > > -- 4th Year Dual Degree | Dept. of CSE | IIT Kharagpur, India

1 0

Re: [Mailman-Developers] Error in Archive unpack while setting up mailman client 1.0.0
by Florian Fuchs March 14, 2013

March 14, 2013

Hi Mahendra, this seems to be caused by the "mocker" library being distributed as a bzip2 archive. A while ago another developer ran into the same problem and solved it by installing bzip2 separately and then switching to python 2.6 (IIRC). Obviously being stuck with py2.6 is a less then ideal solution, but if you can wait a little: I am currently doing some work on mailman.client to prepare for the Pycon development sprints starting on monday. Part of that work is replacing the "mocker" library with another one called "mock", which is distributed as a less exotic gzipped tarball. This is no solution for your general problem installing bzipped python packages, but at least it will most probably solve this particular issue... I'll post a message here when I'm done... Cheers Florian 2013/3/14 mahendra singh meena <mahendra007.s(a)gmail.com> > This is my first time I am setting up mailman.Using step-by-step > procedure from > http://wiki.list.org/display/DEV/A+5+minute+guide+to+get+the+Mailman+web+UI… > > when i am doing :- > $ cd mailman.client > $ python setup.py develop > > I am gettin following error :- > ... > Processing mocker-1.1.1.tar.bz2 > error: Not a recognized archive type: > /tmp/easy_install-kM8hYI/mocker-1.1.1.tar.bz2 > > Any clue how to solve this ? > I asked the same on irc but i feel its quite inactive might be due to > the time-zone difference with other developers. > > One more thing that I noticed during the same step is when it > downloads mocker and other requirements using script > > python2.7/site-packages/distribute-0.6.10-py2.7.egg/setuptools/package_index.py > It takes proxy not into account when opening url in > open_with_auth(url).So, I think we shall modify it to take proxy > option also. > > Please guide me if I have skipped any point or taken a wrong step. > > Regards > Mahendra > _______________________________________________ > Mailman-Developers mailing list > Mailman-Developers(a)python.org > http://mail.python.org/mailman/listinfo/mailman-developers > Mailman FAQ: http://wiki.list.org/x/AgA3 > Searchable Archives: > http://www.mail-archive.com/mailman-developers%40python.org/ > Unsubscribe: > http://mail.python.org/mailman/options/mailman-developers/flo.fuchs%40gmail… > > Security Policy: http://wiki.list.org/x/QIA9 >

1 0

Error in Archive unpack while setting up mailman client 1.0.0
by mahendra singh meena March 14, 2013

March 14, 2013

This is my first time I am setting up mailman.Using step-by-step procedure from http://wiki.list.org/display/DEV/A+5+minute+guide+to+get+the+Mailman+web+UI… when i am doing :- $ cd mailman.client $ python setup.py develop I am gettin following error :- ... Processing mocker-1.1.1.tar.bz2 error: Not a recognized archive type: /tmp/easy_install-kM8hYI/mocker-1.1.1.tar.bz2 Any clue how to solve this ? I asked the same on irc but i feel its quite inactive might be due to the time-zone difference with other developers. One more thing that I noticed during the same step is when it downloads mocker and other requirements using script python2.7/site-packages/distribute-0.6.10-py2.7.egg/setuptools/package_index.py It takes proxy not into account when opening url in open_with_auth(url).So, I think we shall modify it to take proxy option also. Please guide me if I have skipped any point or taken a wrong step. Regards Mahendra

1 0

GSoC 2013 ideas page updates
by Terri Oda March 12, 2013

March 12, 2013

Just FYI: I've linked Mailman from the PSF GSoC 2013 page here: http://wiki.python.org/moin/SummerOfCode/2013 I don't know that it'll result in us attracting more students just yet (again, org applications don't open 'till March 18th) but if it seems like there's a small surge after this weekend, you can blame me. GSoC's running on a much later schedule this year than last, so we've got a lot of anxious students worrying about deadlines even though it's pretty early by the schedule. I've also updated our GSoC page with a few more ideas from my mental Postorius queue: http://wiki.list.org/display/DEV/Google+Summer+of+Code+2013 I'd particularly like to see some more hyperkitty ideas up -- Aurelien, are you able to mentor a student this summer? Anyone else working on hyperkitty who'd like to chime in? Pipermail has been a weakness for a while so I expect there'll be students who are really interested in improving it if we give them some starting points. Those of you coming to the sprints can expect me to harass you for ideas/refinement at PyCon next week, of course. But if you, like me, are going through bug queues right now trying to prepare for pycon and figure out what to work on at the sprints... now's a great time to make a list of "I don't think we'll get to this" features to put up as potential GSoC projects! Terri

2 1