Mailman 3 November 2004 - Mailman-Users

New Mailman user - Contribs.Org (SME/E-Smith) addon - 2.1.3 Bug?
by Jim Danvers 23 Nov '04

23 Nov '04

Hey all... Long story short. Friend of mine has been dealing with cancer for the past 5 years (two distinct types / diagnosis) He has been chronicling his story to fellow cyclists and friends via self built distribution lists using the built in mail client that comes with his windows machine. Needless to say, he has spent quite a bit of time in and out of hospitals for various surgeries, treatments, etc... mail is something that he has come to value. Cutting to the chase - I built him a server (contribs.org - formerly known as mitel / e-smith) that is imap capable. Centralized mail down - with a web interface. He can get to his mail when he doesn't have access to his laptop and his isp connection at home. Now... I mention to him that I ~believe~ that I can turn this same machine into a private list server as the folks that maintain the server (contribs.org) also maintain a fine collection of user contributed (hence the name) of rpm's for use as add-on packages. It is quite nice. Fast forwarding... Indeed I do find a contrib - mailman - cool! I get it setup and installed per some documentaton that I found, get a list all configured and ready to roll. I e-mail Dave (my friend) to let him know that I feel that we are 'ready' to go live with this thing after having been testing / playing with it for a week or so to ensure that it is behaving the way that we want it to. It's private, reply to address has been altered to someone else other than the list, no-one can post to the list except the list owner and delegated moderators, list is kept private - only list owner can view subscribers, etc... it appears to be working perfectly. ;) Then I find out that there was, at some point in the past, some bug that was discovered that would allow for e-mail addresses to be viewed / obtained in some fashion. Something about v2.1.3? Anyway... I start googling (quite a bit)... I do see information (although not much) about the purported issue and how it was patched with some back level patches or something to that effect. I discovered this list via aformention googling, and sure enough, I even came across another sme user who posted with a question back on the 4th of this month (Nov. '04 -- link here: http://mail.python.org/pipermail/mailman-users/2004-November/040616.html) Kind of panicky, and by no means any kind of *nix "guru" I ssh into the box running the list and 'locate' the mailman binaries (I had no idea where it installed itself to). Turns out to be /opt/mailman/bin - don't know if this is typical or not. I find a "version" fle in there, that judging by its "green" color is executable. I run it and it tells me that the version that I have is this: [root@gateway bin]# ./version Using Mailman version: 2.1.3 2.1.3 - ;( Do I have an issue? Privacy on this list is something that Dave holds very dear due to the personal nature of the illness that I suspect many of his recipients are also dealing with. (he currently uses "bcc" for the bulk of the people that he posts to) Is there a means of testing this box to see if the existing list of addresses can be "harvested" There are only three addresses in it @present - mine as builder, Dave's as site owner and my wife ( we needed a guinea pig tester to ensure that she could not post back to the list, reveal e-mail address, etc... lol ) I don't care if those addresses get "harvested" as they are well known anyway. Ok - so this wasn't so short. Sorry. Again - I'm no *nix guy. I'm just a guy who rides and races a bike (as in pedal variety) and happens to know a ~little~ bit about computers. I offered to help out a good friend of mine, and the local cycling club in general, and I would just like to make sure that this thing will be "ok" (ie; secure). (( realizing that secure and a forward facing gizmo on the public internet is kind of an oxymoron - but ya gotta at least do the best ya can, 'eh? )) Thanks all. -=- jd -=- ps - Dave's site that another cyclist from the Syracuse, NY area put up for him is here (if anyone curious): http://www.veloweb.org/davepanella

2 2

RE: [Mailman-Users] %(confirmurl)s variable in verify.txt
by Doug Sampson 23 Nov '04

23 Nov '04

> > See the FAQ > >Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py > > Article 4.29. > Below is the data in my mm_cfg.py file. It already has a DEFAULT_HOST_NAME AND A DEFAULT_URL. It would stand to assume that the subscription confirmation would have established 'http://lists.dawnsign.com/mailman' as the value for the %(confirmurl)s variable. ############################################################## # Put YOUR site-specific configuration below, in mm_cfg.py . # # See Defaults.py for explanations of the values. # DEFAULT_HOST_NAME = 'lists.dawnsign.com' #DEFAULT_URL = 'http://lists.dawnsign.com/cgi-bin/mailman/' DEFAULT_URL = 'http://lists.dawnsign.com/mailman/' IMAGE_LOGOS = '/images/' #IMAGE_LOGOS = '/doc/' USE_ENVELOPE_SENDER = 0 DEFAULT_SEND_REMINDERS = 0 MAILMAN_OWNER = 'mailman-owner@%s' % DEFAULT_HOST_NAME PUBLIC_ARCHIVE_URL = '/pipermail' PRIVATE_ARCHIVE_URL = '/cgi-bin/mailman/private' ARCHIVE_HTML_SANITIZER = 3 # Note - if you're looking for something that is imported from mm_cfg, but you # didn't find it above, it's probably in Defaults.py. ~Doug

2 1

RE: [Mailman-Users] Content filtering
by Hong Jiang Tian 23 Nov '04

23 Nov '04

Brad, We have some mailing lists that need to remove all types of attachments (whatever plain text or non-plain text) from the messages. We don't allow users to post the emails with attachments on these mailing lists. I have looked at FAQ 1.8 and 4.13. I also searched the archive of the Mailman user mailing list. I found that I could remove the MIME with HTML, Word or some other content types. But I didn't find the answer to remove attachments of the plain text file. Do you or other people know how to resolve it? Thanks for your help! Hong -----Original Message----- From: Brad Knowles [mailto:brad@stop.mail-abuse.org] Sent: Mon, November 22, 2004 2:15 PM To: Hong Jiang Tian Cc: 'mailman-users(a)python.org' Subject: Re: [Mailman-Users] Content filtering At 10:55 AM -0500 2004-11-22, Hong Jiang Tian wrote: > We use Mailman version 2.1.5. We have some mailing lists needed to strip all > attachments. Since Mailman 2.1.5 has MIME support, could we just use > "Content filtering" to do it? Does anyone know how to set up "Content > filtering" to remove all attachments (including plain text attachments) from > messages? Go to the Mailman FAQ Wizard at <http://www.python.org/cgi-bin/faqw-mm.py>. Look at FAQ 1.8 and 4.13, but you should also search for "attachment". -- Brad Knowles, <brad(a)stop.mail-abuse.org> "Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety." -- Benjamin Franklin (1706-1790), reply of the Pennsylvania Assembly to the Governor, November 11, 1755 SAGE member since 1995. See <http://www.sage.org/> for more info.

3 2

Subscribing to more then one list at a time
by Jewish Learning Centre 23 Nov '04

23 Nov '04

HI, I've set up several new list on my web server and I want users to have the option as to how many and which lists they subscribe to, like using a checkbox system of subscribing to say list 1 and 2 but not 3. With filling in the information once. I had a look in the faq and couldn't see anything to do this. Does anyone know a way to do this? Thanks Michael The Jewish Learning Centre P.O. Box 1543 Double Bay 1360 Tel (02) 9365 5667 Fax (02) 9365 3578 ACN : 075 310 575 ABN : 58 075 310 575

1 0

Generic non-members rejection notice
by Robin Becker 22 Nov '04

22 Nov '04

I see this question asked, but haven't seen a reply. Is there any way to change the response message that non-members receive when rejection is the chosen action? I managed to modify my admin gui to allow adding an attribute nonmember_rejection_notice (had to fake a getattr out as well), but I can't seem to make this message appear in rejections. In fact the code in Moderate.py doesn't seem to get used during rejections. I cchecked and it seems as though the .pck does contain the new attribute. What am I missing/doing wrong? -- Robin Becker

5 4

Content filtering
by Hong Jiang Tian 22 Nov '04

22 Nov '04

Hi, We use Mailman version 2.1.5. We have some mailing lists needed to strip all attachments. Since Mailman 2.1.5 has MIME support, could we just use "Content filtering" to do it? Does anyone know how to set up "Content filtering" to remove all attachments (including plain text attachments) from messages? Thanks for your help! Hong

2 1

Archives, the "Forbidden Zone"
by Nathan Fiedler 22 Nov '04

22 Nov '04

Let me start with a big "Thank You" to the Mailman authors for their great work on this fine list management software. I have been using Mailman for over four years and have had very few problems. Recently I installed Fedora Core 3 and I am in the process of setting up the system to once again host several Mailman lists. However, I have run into a problem that I am unable to solve. It is the typical "403 Forbidden" problem often seen by newbies when attempting to view the archives of a list. I have searched the mailman-users archives. I have searched Google Groups. I have read the INSTALL.REDHAT and UPGRADING files included in the mailman rpm, as well as several other pertinent files. I have found nothing that can explain why I continue to see the 403 Forbidden error. First off, the lists have been imported from backup, so there is the possibility something went wrong in that. However, check_perms reports no problems. And "check_db -a" also reports nothing. I also ran the 'update' command successfully. Sending mail to the lists appears to be working, as does the administrative interface. The only problem really is accessing the archives. Now before you tell me that I need to set up the Apache configuration, let me say that the mailman rpm in FC3 includes a .conf file already. I have pasted it in below for your reference. And I suppose you will ask "What about the permissions on the files/directories?" Ah, I'm one step ahead of you there. See the detailed output below the .conf file. So the question becomes, what is preventing the browser from accessing the archives? nathan P.S. You can see the problem for yourself at http://www.bluemarsh.com/mailman/listinfo ------------------------------------------------------------ # # httpd configuration settings for use with mailman. # ScriptAlias /mailman/ /usr/lib/mailman/cgi-bin/ <Directory /usr/lib/mailman/cgi-bin/> AllowOverride None Options ExecCGI Order allow,deny Allow from all </Directory> Alias /pipermail/ /var/lib/mailman/archives/public/ <Directory /var/lib/mailman/archives/public/> Options Indexes MultiViews FollowSymLinks AllowOverride None Order allow,deny Allow from all </Directory> # Uncomment the following line, replacing www.example.com with your server's # name, to redirect queries to /mailman to the listinfo page (recommended). RedirectMatch ^/mailman[/]*$ http://www.bluemarsh.com/mailman/listinfo ------------------------------------------------------------ Apache user can read the files: ------------------------------------------------------------ # echo "head /var/lib/mailman/archives/private/jswat- announce/index.html" | su -fm apache <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN"> <HTML> <HEAD> <title>The jswat-announce Archives</title> <META NAME="robots" CONTENT="noindex,follow"> <META http-equiv="Content-Type" content="text/html; charset=us- ascii"> </HEAD> <BODY BGCOLOR="#ffffff"> <h1>The jswat-announce Archives </h1> <p> [To double-check, apache cannot read root's files.] # echo "head /root/.bashrc" | su -fm apache head: cannot open `/root/.bashrc' for reading: Permission denied ------------------------------------------------------------ Directory permissions in detail: ------------------------------------------------------------ # ls -l / drwxr-xr-x 22 root root 4096 Nov 16 00:05 var # ls -l /var drwxr-xr-x 23 root root 4096 Nov 19 16:09 lib # ls -l /var/lib drwxrwsr-x 6 root mailman 4096 Nov 20 23:00 mailman # ls -l /var/lib/mailman drwxrwsr-x 4 mailman mailman 4096 Jun 16 2003 archives # ls -l /var/lib/mailman/archives drwxrws--x 13 mailman mailman 4096 Nov 20 22:33 private drwxrwsr-x 2 mailman mailman 4096 Nov 20 22:33 public # ls -l /var/lib/mailman/archives/private drwxrwsr-x 9 mailman mailman 4096 Oct 17 03:27 jswat-announce drwxrwsr-x 2 mailman mailman 4096 Feb 24 2004 jswat-announce.mbox # ls -l /var/lib/mailman/archives/private/jswat-announce drwxrwsr-x 2 mailman mailman 4096 Apr 29 2004 2004-April -rw-rw-r-- 1 mailman mailman 805 Apr 29 2004 2004-April.txt -rw-rw-r-- 1 mailman mailman 544 Apr 30 2004 2004-April.txt.gz drwxrwsr-x 2 mailman mailman 4096 Aug 17 00:05 2004-August -rw-rw-r-- 1 mailman mailman 699 Aug 17 00:05 2004-August.txt -rw-rw-r-- 1 mailman mailman 512 Aug 17 03:27 2004-August.txt.gz drwxrwsr-x 2 mailman mailman 4096 Feb 27 2004 2004-February -rw-rw-r-- 1 mailman mailman 1674 Feb 27 2004 2004-February.txt -rw-rw-r-- 1 mailman mailman 935 Feb 28 2004 2004-February.txt.gz drwxrwsr-x 2 mailman mailman 4096 May 9 2004 2004-May -rw-rw-r-- 1 mailman mailman 435 May 9 2004 2004-May.txt -rw-rw-r-- 1 mailman mailman 361 May 10 2004 2004-May.txt.gz drwxrwsr-x 2 mailman mailman 4096 Oct 16 17:28 2004-October -rw-rw-r-- 1 mailman mailman 810 Oct 16 17:28 2004-October.txt -rw-rw-r-- 1 mailman mailman 549 Oct 17 03:27 2004-October.txt.gz drwxrwsr-x 2 mailman mailman 4096 Sep 22 00:17 2004-September -rw-rw-r-- 1 mailman mailman 1455 Sep 22 00:17 2004-September.txt -rw-rw-r-- 1 mailman mailman 827 Sep 22 03:27 2004-September.txt.gz drwxrws--- 2 mailman mailman 4096 Oct 16 17:28 database -rw-rw-r-- 1 mailman mailman 3229 Oct 16 17:28 index.html -rw-rw---- 1 mailman mailman 915 Oct 16 17:28 pipermail.pck ------------------------------------------------------------

4 9

wrapper busted
by Dave Stern - Former Rocket Scientist 22 Nov '04

22 Nov '04

I've got an old install (2.10.12) where, while mail to the lists goes thru, the daily reminders do not ie the cron /usr/local/bin/python -S /fs/mailman/cron/checkdbs produces ...to="|/fs/mailman/mail/wrapper mailowner mylist", ctladdr=<mylist-admin@myhost> (1/0), delay=00:00:01, xdelay=00:00:00, mailer=prog, pri=139995, dsn=5.3.0, stat=unknown mailer error 2 >From searching the archive, I believe this is often caused by bad gid but the logfiles aren't indicating this. More importantly, this install has been up and working correctly for a while but I believe an operator whacked a few files (including wrapper) an restored it from the install. Perms and ownership on the file look ok (2755, root:mailman) . I may be screwed, I may need to try to reinstall the build or find an older backup. Anyone have any ideas on further diagnosing this. This'll probably just force the users to finally go to the newer (2.1.5) install TIA =-=-=-=-=-=-=-=-=-=- generated by /dev/dave -=-=-=-=-=-=-=-=-=-=-=-= David Stern University of Maryland Institute for Advanced Computer Studies

1 0

Apache won't show Mailman pages after reboot
by Torsten Ehlers 22 Nov '04

22 Nov '04

Hi, I'm running Mailman 2.1 on a Debian Woody system. It worked fine, but today I rebooted the server (after > 200 days) and now the web server (Apache) does not display mailman's web interfaces (e.g. mysite.com/mailman/listinfo as well as the other mailman pages). It shows: "Forbidden You don't have permission to access /mailman/listinfo on this server. Apache/1.3.29 Server" instead. I did not change any configuration (neither Mailman nor Apache). Does anyone know what I can do about it? Thanks a lot! Torsten

1 0

RE: [Mailman-Users] Email to list rejected
by Brad Knowles 22 Nov '04

22 Nov '04

At 1:54 PM -0800 2004-11-21, Tom Barton wrote: >> This looks like an alias problem. > > That was it. There were two places in /etc/postfix/main.cf where alias_maps > was set. The final one did not include the mailman aliases file. I checked > that darned alias_maps variable 50 times, but didn't check to see if it was > set elsewhere in the file. Sigh. > > Thanks, Mark! > > Should I add this to the FAQ? This is covered in the README.POSTFIX file. Personally, I don't think we need to put this in the FAQ as well. -- Brad Knowles, <brad(a)stop.mail-abuse.org> "Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety." -- Benjamin Franklin (1706-1790), reply of the Pennsylvania Assembly to the Governor, November 11, 1755 SAGE member since 1995. See <http://www.sage.org/> for more info.

1 0