Mailman 3 March 2019 - Mailman-Developers

before next release: disable backscatter in default installation
by Jo Rhett Nov. 7, 2022

Nov. 7, 2022

Hi. There's a fairly simple problem here that needs to be addressed. And it's mostly a documentation/install problem. I'm hoping we can get this resolved before the next release. PROBLEM: Mailman comes out of the box ready to backscatter spam people. Yes, it's easy enough to fix. But because it comes stock this way, and is documented to install this way, most people install it to do this. Those of us who work in abuse departments are tired of hearing "well that's how Mailman works". We also object to having to teach people how to fix their mailman installations because it's not documented in the current manual. This is *exactly* like Sendmail 14 years ago. We didn't accept it then, and Sendmail fixed the problem. RESOLUTION: Mailman default installation should not backscatter in a default configuration. 1. Don't create backscatter aliases for subscribe/unsubscribe/etc by default. Nearly everyone uses web based signup. 2. Discard or hold messages from non-subscribers by default. I would think that it would be perfectly reasonable to have documentation on how to enable the 1980s-style -request / -subscribe etc aliases. However this documentation should have a note that this is against the AUP of nearly every network provider, and enabling it will likely cause them to get listed in various blacklists as a backscatter source. FYI: I know that this goes against the instincts of many old-time mailing list advocates here. But after dealing with a 10k/hour backscatter DoS my tolerance for this problem is understandably limited. Yes, it was a sweet day back in the 1980s. I was running a mailing list server and several UUCP gateways at the time, so I remember them well. But those days are past, and we need to deal with the reality of today. -- Jo Rhett Net Consonance : consonant endings by net philanthropy, open source and other randomness

21 168

Re: How strict are the dependencies on the django-compressor related backends?
by Christian Ehrhardt June 11, 2019

June 11, 2019

On Fri, Mar 15, 2019 at 10:19 AM Jonas Smedegaard <dr(a)jones.dk> wrote: > > Quoting Christian Ehrhardt (2019-03-15 06:39:08) > > On Fri, Mar 15, 2019 at 12:08 AM Abhilash Raj <maxking(a)asynchronous.in> wrote: > > > On Thu, Mar 14, 2019, at 1:42 PM, Jonas Meurer wrote: > > > Christian Ehrhardt: > > > > I was evaluating the Dependencies of mailman3 in Ubuntu and I was > > > > wondering if I could cut them down a bit. One thing that got my > > > > attention is the dependency from mailman3-web [1] to nodejs for > > > > less [2] and ruby-sass [3]. > > > > > > > > I was wondering if we could by default not install > > > > node-less/ruby-sass and what exactly that would imply. > > less is a reinvention of sass: It is often adaptable to sass with a > simple patch. > > Original sass processor was ruby-sass, but nowadays a better processor > is sassc. Or if you want to integrated processing with Python then > python3-libsass which uses same core library for its processing. > > I have not looked closely on mailman3, but I highly doubt there is a > real need for dynamic processing of less/sass during runtime. Yeah I doubt that as well. In the meantime I also found [1] which seems to have come to the same conclusion for the majority of default setups. For upstream to disable it by default it was mentioned that there is a need for a customize kit which seems fine [1]. There is a further argument to disable the live compressors, at least as I read COMPRESS_OFFLINE that seems helpful for production setups anyway to speed up and safe CPU load. So while upstream waits until a "customize kit" exists to switch defaults, as a downstream like Debian/Ubuntu I wonder if we already could: - drop sass/less compilers to a suggest - disable the live compression in the default config that we ship - keep the config commented-out to make it easy for admins that want to enable it later - pre-compress at build time and enable compress_offline for speed - maybe call `django_admin compress` [3][4] or similar at build time? - having sass/less as build dependencies seems much safer than pulling it in at runtime @Jonas M.: what do you think about [2] (again maybe after Buster)? Sorry to not know more of this yet, but I hope suggesting what I think might work helps to get us the right way. [1]: https://lists.mailman3.org/archives/list/mailman-users@mailman3.org/thread/… [2]: https://salsa.debian.org/paelzer-guest/mailman-suite/commits/make-sass-less… [3]: https://django-compressor.readthedocs.io/en/latest/usage/#offline-compressi… [4]: https://gitlab.com/mailman/django-mailman3/issues/17#note_81807465 > - Jonas > > -- > * Jonas Smedegaard - idealist & Internet-arkitekt > * Tlf.: +45 40843136 Website: http://dr.jones.dk/ > > [x] quote me freely [ ] ask before reusing [ ] keep private > -----BEGIN PGP SIGNATURE----- > > iQIzBAABCgAdFiEEn+Ppw2aRpp/1PMaELHwxRsGgASEFAlyLbfwACgkQLHwxRsGg > ASHlqw//Vkkke6aulFYeLkq7vQOIt08j+DMMDBpJ/vXapwtQJ2WbWEYsHbbFv75v > k80SILudsOyGMwQ0HKRGqDmhJw2Voi9mWoV2fBQeCQn5w/G9N2Ddw8hAMrzGsLxO > C2FOV8Db0irJ6FS6AO0YQpAselKnnX387AvyWBCpVcWWuydf46pMkPpYajVJTvZg > UZxtBh1epmv/VdQlw2OeLrV+bZJWfjULjr1qFPYdqFnEUnOA2cC44RMagxSV7kNh > JmCc7DvL/VjX/dkPHJCW/VvRrvfxzOR4bimVr7BeuvcjNljlUnKhRwP+PQZt80gp > CbOoVCeEOFJuHwqTlvasUpxo/aSZZPFeF8aQBtdyzefEx9QjjGwx8bYQFn+Zo0CX > TVsB7qWyCwMZIR0DP5+A8ityXQb+FwOTXjySMzO+Z/rA9+h1PHZrK+WJMB0O9z5r > hWYDk3jGSJIkwL+AemE06gUPuSaXZWhzoduI2Mbzs8a20qhrW08Ij338RVGalyhC > QHJT4JoI3bXylaK+IEpH9xxUEW0i8gOge32dBFiqg9/dGFm06Tf3z8dUuBFyXgG3 > BsNJaO6Cn3ghfNS/OfNN04nPS+luPqPQ1r9yZMztrIqwv8oOWyVj1YQpKW1vRN/v > BK/2IpBA+6O3OE2X4RCW8pouwPmsSgMmXpIsuFE61dox/8tOPmE= > =490O > -----END PGP SIGNATURE----- -- Christian Ehrhardt Software Engineer, Ubuntu Server Canonical Ltd

3 4

Regarding aquaintance with community and source code
by Satbir Singh Ghai April 6, 2019

April 6, 2019

Hello, I am Satbir Singh, a sophomore pursuing B.Tech in Information and Communication Technology at DA-IICT. I am a full stack web developer proficient in Django Framework. I want to contribute to Mailman. I am aiming for GSoC 2019. I have previously contributed to open source organizations and really excited to contribute in this project. I am new to this organization please help me to get started! Thanking you Satbir Singh

2 2

Introduction
by Rushang Gajjal April 1, 2019

April 1, 2019

Hey, I am Rushang Gajjal. Hey, I am interested in automating tasks for fun. Enthusiastic about ML, DL, web development and programming in general. I am currently in the 2nd year of my Bachelors of Technology at K.J.Somaiya College of Engineering, Mumbai, India. I am currently a part of the Tech Team in our College Council KJSCE CodeCell. I am a backend developer with experience in Python along with it's web frameworks Flask and Django and basic knowledge of HTML, CSS, Javascript. I have made quite a few Web application using these library frameworks. In the recent year, I have participated in quite a few hackathons and achieve merits in them. I have been exploring the field of AI too and made a few projects. Participated in a national Level Capture The Flag competition with my team and placed 2nd in the Country. I am used to getting accustomed to new environments, code bases, technologies. You can have a look at my GitHub Page. The projects are available at : https://github.com/RusherRG https://github.com/Team-Probably GSOC is an amazing platform to showcase one's skills and gain loads of experience. The project ideas of MailmanGNU caught my interest. I am eager to start working on the project ideas. Postorious is one of the things I would like to contribute to as I feel it would be better for me but the Mailmancore is also interesting to work on. I know that I am a bit late. I wanted to know are there any chances that I might get selected for GSOC under MailmanGNU if I start working from now. Any guidance in preparing the Proposal and contributing would be helpful. Thanking you.

4 8

Mailman Core start error
by Arun H March 29, 2019

March 29, 2019

I am facing an error while starting mailman core, it shows the following error: $ mailman start Traceback (most recent call last): File "/usr/bin/mailman", line 11, in <module> load_entry_point('mailman==3.1.1', 'console_scripts', 'mailman')() File "/usr/lib/python3/dist-packages/mailman/bin/mailman.py", line 94, in main initialize(config_path) File "/usr/lib/python3/dist-packages/mailman/core/initialize.py", line 188, in initialize initialize_1(config_path) File "/usr/lib/python3/dist-packages/mailman/core/initialize.py", line 123, in initialize_1 mailman.config.config.load(config_path) File "/usr/lib/python3/dist-packages/mailman/config/config.py", line 106, in load with open(filename, 'r', encoding='utf-8') as user_config: PermissionError: [Errno 13] Permission denied: '/etc/mailman3/mailman.cfg' Could anyone tell me how to I correct this error? Thanks.

4 6

(no subject)
by aaryan bhagat March 29, 2019

March 29, 2019

I understand you point Steve. What I want to ask mainly is that-- It is obvious that posts will not be deleted even if the user unsubscribed. But there is a "Discussion you have commented" section. It is linked with each user. If a user resubscribes will this section appear or it will start fresh?

3 3

Loss of data when unsubscribed?
by Aaryan Bhagat March 28, 2019

March 28, 2019

When we unsubscribed a user after sending a probe. We currently remove it from the list's roster. Let's suppose the email is resubscribed. Will the discussion the email has posted earlier will remain there or the account will start fresh as any other new account?

4 7

Introduction to community
by SHIVANGI SINGH March 26, 2019

March 26, 2019

Hello everyone. I am Shivangi Singh, pursuing Bachelors of Engineering in Computer Science from BITS Pilani, Pilani campus. I am a 2nd yearite. I am really sorry for my late introduction. I couldn't do it earlier because of my university exams. I have been contributing to Mailman for sometime now. I am primarily a backend developer. I have good knowledge of Django and Python.I have been doing backend since my first year and have done a lot of projects involving the same. Apart from this I have good knowledge of C, C# ,JAVA, HTML, CSS and bootstrap. I have also worked on REST APIs and flask. I have also tried hosting websites on pythonanywhere and Heroku. I was excited to see the project ideas of MailmanGNU and am eager to contribute for mailman as a GSOC candidate. I have been working on github since 2 years, though I am new to git lab. I am quite flexible in adapting to new technical environments and I have also explored in depth my interests in game development, cyber security and microcontroller programming- ArduinoUNO. I am a learning enthusiast and am looking forward to work with all of you. Please guide me whenever and wherever needed. Thanking you. Warm regards.

5 5

GSoC Proposal
by Arun H March 25, 2019

March 25, 2019

Is this proposal OK? The link is below: https://docs.google.com/document/d/1Kcxfx1OFAmjrsMvEmaFgtaVkCHksRt_YrxKxTf3…

2 1

Draft of GSoC Proposal on project "Add support for bounce processing in Core"
by Aaryan Bhagat March 25, 2019

March 25, 2019

This is my current Draft of GSoC Proposal. In it, I have just explained the working of the whole process of handling bounce events. I have not yet provided a tentative timeline and the execution of this work ( although I had planned both of them). This is because I first want a review on my procedure's methodology, then I will think of executing it. Please provide some pointers on the features I have mentioned in the draft. This google doc is shared with comments access so anybody can provide the review there only. https://docs.google.com/document/d/1I3QuffTxzEAFj1I3N_B08538VISHUADDQjbbGBd…

1 2