Mailman 3 July 2015 - Mailman-Developers

before next release: disable backscatter in default installation
by Jo Rhett Nov. 7, 2022

Nov. 7, 2022

Hi. There's a fairly simple problem here that needs to be addressed. And it's mostly a documentation/install problem. I'm hoping we can get this resolved before the next release. PROBLEM: Mailman comes out of the box ready to backscatter spam people. Yes, it's easy enough to fix. But because it comes stock this way, and is documented to install this way, most people install it to do this. Those of us who work in abuse departments are tired of hearing "well that's how Mailman … [View More]

21 168

Mailman 3 Error & some questions
by Krinetzki, Stephan Aug. 5, 2015

Aug. 5, 2015

Hello, I am planning to migrate from mailman 2.1.14 to mailman 3. At the moment mailman 3 is running on a new CentOS 7 server with postfix as MTA. But I have some questions and problems: 1. I have an error with hyperkitty ERROR 2015-07-29 08:11:02,287 update_index 7216 140406344681280 Failed to update the fulltext index: 'Command' object has no attribute 'commit' Traceback (most recent call last): File "/opt/mailman/mailman-bundler/eggs/HyperKitty-1.0.1-py2.7.egg/hyperkitty/… [View More]

4 7

Re: [Mailman-Developers] Merging users
by Barry Warsaw Aug. 4, 2015

Aug. 4, 2015

On Jul 21, 2015, at 06:39 PM, Aurelien Bompard wrote: >If I try to associate an existing address to an existing user (without >this address obviously), the Mailman API will reply with a 400 error >"User already exists". Postorius currently does not detect that and >just errors out with a 500 page (but that's not the issue here). > >I think I need to merge the two users, and that's currently not >supported. I believe it would be a useful feature, so I'd like to >discuss … [View More]

2 1

Re: [Mailman-Developers] [Mailman-Users] Mailman 3: Deployment without LMTP
by Barry Warsaw July 31, 2015

July 31, 2015

[Redirecting to mailman-developers] On Jul 25, 2015, at 01:34 PM, Michael Hierweck wrote: >We are currently running Mailman 2 in an very low-traffic environment >without access to the mail server configuration. We can either use >.forward or aliases to forward mails directly to Mailman via pipe. >Fetching mails from POP3/IMAP mailboxes would be possible, too. > >We would like to upgrade to Mailman 3 now. Thanks for lots of good work >over many years btw. However Mailman 3 … [View More]only supports feeding mails via >LTMP. Is is possible to build a bridge between .forward/aliases and >Mailmans LMTP interface in a convenient and secure manner? > >An option might be letting fetchmail fetch the mails from a mailbox and >forward them via LTMP. As the mails have already been successfully >delivered to the mailbox before Mailman might reject them I can't image >a chance of handling bounces due to rejects correctly in this setup. > >Therefore I'm thinking of a small Python script that receives mail from >stdin and forwards them via LMTP but I'm unsure whether this would be a >correct way to achieve the goal because there might by problems with >bounces when Mailman rejects those mails. This script oughts to >terminate unsuccessfully when the LTMP delivery fails and should >therefore make Postfix bounce the mail itself. > >Postfix -> .forward -> pipe --(stdin)--> script --(LMTP)--> Mailman 3 > >Any opinions or hints are appreciated. Thanks in advance. It wouldn't be out of the question to do it this way, although you're right that you have to have some special handling for rejections. Technically speaking, Mailman would still support "bounces", which are messages created out of whole-cloth by Mailman sent to the original sender out of band to the LMTP conversation, encapsulating the original message. In fact, your dot-forward-to-LMTP bridge would probably have to capture the LMTP 4xx and 5xx rejection codes and craft a bounce, although it could potentially allow Mailman itself to deliver this. Remember though that the LMTP runner isn't all *that* special, in that upon successful acceptance of the message, it will just drop it in the appropriate queue for further processing. It's certainly conceivable that one could implement a new type of runner that interfaced with dot-forward files in much the same way that MM2 did, but with logic a bit more compatible with MM3's queue structure and database. The trickiest part of all this is handling the security implications of using a dot-forward program. The core only supports LMTP delivery by default in MM3 so we get to ignore all the C wrappers and gid-mismatch fun of MM2. FWIW, this could all be built as a separate plugin for the core. Cheers, -Barry [View Less]

1 0

Migration from mailman2 to mailman3
by Shivam Shukla July 31, 2015

July 31, 2015

Hi, I want to install mailman3 and use it for all my mailing facilities. Previously i was using mailman2. So i need to migrate all my mailman2 data to mailman3 for which i am not able to find any resource. Although i read at few places that migration will be supported in mailman3.1. Can anyone please provide more information if migration will be supported in mailman3.1 and if it will be then at what time i can expect that release? Thanks

2 1

Re: [Mailman-Developers] REST API speed
by Eric Searcy July 30, 2015

July 30, 2015

On 7/29/15 10:38 PM, Abhilash Raj wrote: > Hi Eric, > > It's curious to me that Mailman Bundler makes references to Gunicorn > support, but it seems there code would run into the same problems I did > (multiple initiations and argument count mismatch). Is anybody using > this from Bundler currently and can help me figure out why the > difference? > > > The references to Gunicorn in Mailman-Bundler is just for deplying the > django > … [View More]

1 0

REST API speed
by Eric Searcy July 30, 2015

July 30, 2015

I'm curious about how the REST interface scales out. I've posted a bug to Gitlab about Postorius making a REST request for every list member on the list info page [1], but aside from waiting for a fix for that, I've also been looking more into the performance of the Mailman3 REST interface itself. Testing with siege (15 concurrent users) on a production VM, I get 29 requests/sec and a concurrency of just 1.3x requesting the "/3.0/domains" URL. For "/3.0/system/versions" I get only about 0.2x … [View More]

5 6

Re: [Mailman-Developers] Merging users
by Abhilash Raj July 29, 2015

July 29, 2015

On 29 July 2015 at 20:03, Abhilash Raj <raj.abhilash1(a)gmail.com> wrote: > Hi Eric, > > On 21 July 2015 at 23:31, Eric Searcy <eric(a)linuxfoundation.org> wrote: > >> On 7/21/15 9:39 AM, Aurelien Bompard wrote: >> > Hey devs! >> > >> > I'm hitting a problem when migrating from 2.1 to 3, but I think it's a >> > generic issue (or rather a missing feature) and I'd like to fix it. >> > >> > If I try to associate … [View More]an existing address to an existing user (without >> > this address obviously), the Mailman API will reply with a 400 error >> > "User already exists". Postorius currently does not detect that and >> > just errors out with a 500 page (but that's not the issue here). >> > >> > I think I need to merge the two users, and that's currently not >> > supported. I believe it would be a useful feature, so I'd like to >> > discuss it here. IMHO, the only tricky part would be to merge the >> > preferences associated with each user, but if I know which of my two >> > users has priority, I can just resolve the conflicts that way. >> > Am I missing something? Do you agree it would be a useful feature to >> have? >> >> This is a generic issue for us too; not just migration-related. I also >> would support consolidation/merging of Postorius users to solve this. >> >> In fact, there are a few inter-related blockers for us: >> >> a) authenticating as the wrong email address + attempt to add subscribed >> email as alternate (especially happens with social-type logins where >> correcting the authenticated email is a pain) >> > > I don't get any error while adding an already existing user. However, > since > I don't have postfix setup, I can't verify the address from email. I can > however. > do it from the backend. > Sorry for this one. Yes it indeed raise a 400 error when adding an already subscribed address even if there is no User objects associated with it in core. This probably is a bug. Also, probably postorius should check this before sending the confirmation email. > > >> b) cannot social-authenticate as an email address which is an alternate, >> not the primary >> > > So, it is correct that you cannot social-authenticate to the same account > using an alternate address. I am thinking about how we can fix this. > However, this is not a very critical bug. Even if you login into two > seperate > Postorius accounts, the underlying MailmanUser is the same. You can > view your subscriptions from both the addresses in both the accounts. > Also, you can change subscriptions to other alternate addresses in both > the accounts. > > >> c) attempting to social-authenticate as an email address which exists >> but has no account ... at least I think this is what is described by >> https://bugs.launchpad.net/postorius/+bug/1227461 (no matching gitlab >> bug) >> > > I checked out this one it is no more a bug. I can login with person to an > address > that already exists and is not associated with any account. > > However, note that I am using the master branch from source code. > > -- > thanks, > Abhilash Raj > -- thanks, Abhilash Raj [View Less]

1 0

Running Mailman 3.0 on Shared Hosting
by Jason Glazer July 29, 2015

July 29, 2015

I have a shared hosting account (Dreamhost) that I have been running Mailman 2.1.17 for many years with 15 low volume lists (5 to 100 messages per month). I would like to switch to using Mailman 3.0 and stay using a shared hosting environment. Has anyone successfully used Mailman 3.0 in a shared hosting environment? Were there any performance issues or other problems? Thanks Jason

1 0

Re: [Mailman-Developers] Merging users
by Eric Searcy July 29, 2015

July 29, 2015

On 7/21/15 9:39 AM, Aurelien Bompard wrote: > Hey devs! > > I'm hitting a problem when migrating from 2.1 to 3, but I think it's a > generic issue (or rather a missing feature) and I'd like to fix it. > > If I try to associate an existing address to an existing user (without > this address obviously), the Mailman API will reply with a 400 error > "User already exists". Postorius currently does not detect that and > just errors out with a 500 page (but that's not the … [View More]

2 1