Trolls can wreak havoc by subscribing to one or more high volume mailing lists
on behalf of a target one. For example, someone could subscribe this list to
the Linux kernel mailing list. Everybody would see the confirmation message,
but by the time someone realizes the need to unsubscribe, the list will have
been flooded, thereby realizing the DoS.
Are there mechanisms to prevent that?
Best
Ale
--
Hi all,
I've installed my reverting DKIM verifier. Today it failed on a specific
message which I also received directly. The reason it failed is the Subject:
field was rewritten like so:
ORIGINAL:
Subject: RE: [dmarc-ietf] A policy for direct mail flows only, was ARC
questions
REWRITTEN:
Subject: Re: [dmarc-ietf] A policy for direct mail flows only,
was ARC questions
The message is tagged X-Mailman-Version: 2.1.29. Is it Mailman doing that
change? I found some code which may seem to be doing something like that in
CookHeaders.py:
rematch = re.match(
'(\s*(RE|AW|SV|VS)\s*(\[\d+\])?\s*:\s*)+',
subject, re.I)
if rematch:
subject = subject[rematch.end():]
recolon = 'Re:'
It seems I have to save the subject if it matches that string, correct?
Best
Ale
--
Hi Everyone,
I am pleased to announce that with a week long delay from the planned date,
GNU Mailman Core 3.3.2 is now finally out. This release includes both bug fixes
and some new features.
Some notable changes include:
- Support for inviting users to join mailing lists.
- New adddmembers, delmembers and syncmembers command to manage membership from CLI.
- Addition of new REST API endpoints that return the count of held messages and subscription requests of much faster page loads in Postorius.
- Addition of support for filtering in some API endpoints like Members and Subscription requests.
- Support for address= option in email join command to subscribe an address other then sending address.
- Addition of who email command to lookup memberships.
- Expose emergency field for MailingList resource in REST API.
- Several bug fixes to support new major version of libraries like dnspython, flufl.* etc.
You can install it using:
$ pip install --upgrade mailman
The tarball for the release is available at PyPI:
https://pypi.org/project/mailman/
Finally, many thanks to all the contributors who have helped make this release a success!
--
Abhilash Raj (maxking) on behalf of Mailman Core team
