Mailman 3 November 2022 - Mailman-Developers

New Mailman Core Release
by Mark Sapiro 14 Nov '22

14 Nov '22

We are pleased to announce the release of Mailman core 3.3.7. It is published to PyPI and you can find links to all the PyPI projects: https://docs.mailman3.org/en/latest/ The change log is at https://docs.mailman3.org/projects/mailman/en/latest/src/mailman/docs/NEWS.… - please note the `BREAKING CHANGE` documented there and due to our now using SQLAlchemy >-1.4. Finally, the minimum Python version required is 3.7 although, 3.9 is recommended if you are doing a new install for longest support. 3.10 is supported for Django apps, but Mailman Core is missing that due to one of the core dependencies (aiosmtpd) not supporting 3.10 yet. -- Mark Sapiro <mark(a)msapiro.net> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan

1 0

Mailman Core Dutch translation in progress
by Michael Smith 14 Nov '22

14 Nov '22

Hi all, I used to run Mailman 2 a while ago for some Dutch speaking volunteer groups in Belgium. But that has since stopped. Mailman 2 had support for Dutch. Now I'm getting back into hosting mailing lists for another group of volunteers so I spun up Mailman 3. To my surprise switching to 'nl' for Dutch did nothing and after investigating I noticed there's no 'nl' folder in mailman's messages folder. It looks like the original Dutch translation from Mailman 2 was not ported over to Mailman 3. I've since found out that the translation can be done through https://hosted.weblate.org/projects/gnu-mailman/mailman/nl/ and so I have started the process there. It will take me a while longer to complete it but I'm definitely motivated to do so. I'm using the Dutch .po file from the source code of the latest Mailman 2 version as a guide. I just wanted to post this here in case anyone had remarks about this. How likely is it to see version bump / Mailman 3 release once a Dutch translation is complete? Or will there be no separate release for new locales? No problem anyway, I can patch the Dutch into my local installation when I'm done and I figure out how to do that :) Kind regards Michael

2 1

before next release: disable backscatter in default installation
by Jo Rhett 07 Nov '22

07 Nov '22

Hi. There's a fairly simple problem here that needs to be addressed. And it's mostly a documentation/install problem. I'm hoping we can get this resolved before the next release. PROBLEM: Mailman comes out of the box ready to backscatter spam people. Yes, it's easy enough to fix. But because it comes stock this way, and is documented to install this way, most people install it to do this. Those of us who work in abuse departments are tired of hearing "well that's how Mailman works". We also object to having to teach people how to fix their mailman installations because it's not documented in the current manual. This is *exactly* like Sendmail 14 years ago. We didn't accept it then, and Sendmail fixed the problem. RESOLUTION: Mailman default installation should not backscatter in a default configuration. 1. Don't create backscatter aliases for subscribe/unsubscribe/etc by default. Nearly everyone uses web based signup. 2. Discard or hold messages from non-subscribers by default. I would think that it would be perfectly reasonable to have documentation on how to enable the 1980s-style -request / -subscribe etc aliases. However this documentation should have a note that this is against the AUP of nearly every network provider, and enabling it will likely cause them to get listed in various blacklists as a backscatter source. FYI: I know that this goes against the instincts of many old-time mailing list advocates here. But after dealing with a 10k/hour backscatter DoS my tolerance for this problem is understandably limited. Yes, it was a sweet day back in the 1980s. I was running a mailing list server and several UUCP gateways at the time, so I remember them well. But those days are past, and we need to deal with the reality of today. -- Jo Rhett Net Consonance : consonant endings by net philanthropy, open source and other randomness

21 168