Mailman 3 February 2004 - Mailman-Users

Question?
by Rich Mason 23 Feb '04

23 Feb '04

To whom it may concern, Can I use Mailman as strictly a way to distribute information to a list of users without them being able to e-mail other people on the list? If so, can I put several users to send out information on the list without the problem I described above? Thank You Very Much, Richard Mason

2 1

Funny little problem...
by Chris DiBona 23 Feb '04

23 Feb '04

Here's a funny bounce problem we're having, one we fixed by disabling bounce protection, which is non-optimal, of course. Spammer pathetically sends email to one of our 540 or so closed lists. list admin at client gets notice that spam/virus is waiting for judgement. Antivirus software at client go bling, and bounces the mail. Mailman, logically, says "that mailbox isn't accepting mail, lets suspend then unsubscribe that user" So that's my funny change of event. Our choices were, of course: Cut a hole in the virus scanner 'user's mail people: not gonna happen.' Hack up Mailman/Bouncers/* Shut off bounce detection. What could we have done differently. I figured there might be some combination of score and expiration, but the problem needed to be fixed absolutely. Thoughts, and thanks! Chris DiBona

2 1

problem with the url
by Yves Dorfsman 22 Feb '04

22 Feb '04

In a fresh install I put: DEFAULT_URL_PATTERN = 'http://%s/xlist/' At the end of Mailman/mm_cfg.py. It mainly works, but when I go to the url/admin/mailman, I get prompted for a password, I enter it and get to the admin menu for the mailman mailing list. All the way here, the url's when I click are correct (xlist, and not mailman). But then, all the url's on this page point to "mailman" instead of "xlist". Where else do I need to make this modification ? Thanks. Yves. ---- http://www.cuug.ab.ca/~dorfsmay http://www.SollerS.ca

1 0

Help
by Daniel Tan 22 Feb '04

22 Feb '04

can i get help by removing passwords option for subscribes? how can i disable view archive list? how can i disable subscriber's posting? hope to hear from you soon! daniel

1 0

Need Help
by Sean Haddy 22 Feb '04

22 Feb '04

I am designing a site using flash mx. There is no way to send out variables through flash with a dash "-" in the center of them. The password confirm variable is: pw-conf. I would appreciate it if you could let me know how I could get around this ( maybe edit a config file). Thanks -Sean Haddy Graphics | Web | Flash | Applications Custom Designed media to fit your needs Sean Haddy Developer 57373 Joshua Lane Yucca Valley, Ca 92284 seanhaddy(a)jsbc.info mobile: 760 912 9844 Signature powered by Plaxo Want a signature like this? Add me to your address book...

1 0

trouble after security upgrade
by Patrick Lesslie 22 Feb '04

22 Feb '04

I apologise if this has been covered recently. Recently I upgraded mailman running on Debian stable to meet a security upgrade. A couple of days later I noticed that posts weren't appearing, and "help" to -request wasn't being answered. I downgraded again and all the messages came through, with none lost or unanswered. The messages hadn't been in the exim queue, so mailman must have queued them. Errors like this were repeated in /var/log/mailman/error: Feb 11 05:47:05 2004 qrunner(19980): Traceback (most recent call last): Feb 11 05:47:05 2004 qrunner(19980): File "/usr/lib/mailman/cron/qrunner", line 283, in ? Feb 11 05:47:05 2004 qrunner(19980): kids = main(lock) Feb 11 05:47:05 2004 qrunner(19980): File "/usr/lib/mailman/cron/qrunner", line 253, in main Feb 11 05:47:05 2004 qrunner(19980): keepqueued = dispose_message(mlist, msg, msgdata) Feb 11 05:47:05 2004 qrunner(19980): File "/usr/lib/mailman/cron/qrunner", line 157, in dispose_message Feb 11 05:47:05 2004 qrunner(19980): mlist.ParseMailCommands(msg) Feb 11 05:47:05 2004 qrunner(19980): File "/usr/lib/mailman/Mailman/MailCommandHandler.py", line 163, in ParseMailCommands Feb 11 05:47:09 2004 qrunner(19980): splitsubj = string.split(subject) Feb 11 05:47:09 2004 qrunner(19980): File "/usr/lib/python2.1/string.py", line 114, in split Feb 11 05:47:09 2004 qrunner(19980): return s.split(sep, maxsplit) Feb 11 05:47:09 2004 qrunner(19980): AttributeError : 'None' object has no attribute 'split' Since I downgraded it's been fine. The upgrade was from 2.0.11-1woody5 to 2.0.11-1woody7. I'd like to upgrade but of course I'd like to avoid this problem. Should I be stopping some processes first? Thanks, Patrick Lesslie

1 1

Subscribe members via mail
by Laurent Rathle 21 Feb '04

21 Feb '04

Hello, I can't access the members management page of the mailing list I manage. I'll send a pub report to the tracker with all informations, but meanwhile I have to manage the list :-). Is there a way to manage members subscription via the mail like you can do it with Sympa for exemple : a special instruction in the body of the message. I watched the documentation but didn't see anything (or I missed it). Thank you, -- Laurent Rathle lrathle(a)teaser.fr

1 0

Possible XSS in Mailman 2.1.4
by Ho Yin Au 21 Feb '04

21 Feb '04

Hi, I think I've stumbled on a possible Cross-Site-Scripting vulnerability in Mailman 2.1.4. Take a look: * Set up a new list and configure it with private archives * Try to view the archives - enter something like <script language="JavaScript">window.alert(document.cookie)</script> into the EMail Address box. Click on "Let me in." On a side note, is it possible for that page to not reveal any sensitive information such as path and environmental variables? -Ho Yin

1 0

URLs for virutal host user option pages
by Chris Lawson 21 Feb '04

21 Feb '04

I am running mailman 2.1.2 on RH 8.0 and have several clients who host lists on their virtual domains. I was customizing the HTML for the listinfo and user options pages, referencing a linked style sheet in their virtual server's root directory when I noticed that all the URLs on the pages were being built with my server's default domain name. So when a visitor visits their user options page, the link to the external style sheet fails. I have set the list's preferred host name to the MX of virtual domain (atsu.org) and still the page is drawing the listinfo/atsuannounce page with my site's default host name in the form action. I could use an absolute URL for the stylesheet reference in the virtual domain's template. But I don't like the idea of "changing domains" when submitting forms. It just looks a little hinky. Am I missing something? cmkl

1 0

Re: Question on forwarded admin requests.
by Paul H Byerly 21 Feb '04

21 Feb '04

I asked: > > So, could the same system be tweaked to reject any mail sent with > > "Re: <listname> Digest" in the subject? This is a feature on another > > list I am on, and I'd really like to add it to my system. and Al Black wrote: >There's a couple of way you can sort of do this now, fiddling Max message >size/Digest size options, Already have that. > and the taboo header options in 2.1.4. Ah, a reason to upgrade. I have significant modifications py files to 2.1.2, and moving is going to be a real pain. I suppose I will have to set up a second copy and work on it until it's right, then move things. <>< Paul

1 0