Mailman 3 December 2005 - Mailman-Users

Released: Mailman 2.1.7b1
by Tokio Kikuchi Dec. 30, 2005

Dec. 30, 2005

Hi all, I've just released Mailman 2.1.7rc1 Release Candidate. I'm sorry for the violation of file name extension convention because I made a small mistake when tagging the release number. I will be releasing 2.1.7 final by December 31 if there is no problem. Please download it from SF or: http://mm.tkikuchi.net/mailman-2.1.7rc1.tar.gz Cheers, Tokio ------------------------------------------------------- 2.1.7rc1 (24-Dec-2005) Security - The fix for CAN-2005-0202 has been enhanced to issue an appropriate message instead of just quietly dropping ./ and ../ from URLs. - A note on CVE-2005-3573: Although the RFC2231 bug example in the CVE has been solved in mailman-2.1.6, there may be more cases where ToDigest.send_digests() can block regular delivery. We put the send_digests() calling part in try - except clause and leave a message in the error log if something happened in send_digests(). Daily call of cron/senddigests will notify more detail to the site administrator. - List administrators can no longer change the user's option/subscription globally. Site admin can change these only if mm_cfg.ALLOW_SITE_ADMIN_COOKIES is set to Yes. - Script tag is disallowd in edithtml script. - Since probe message for the disabled users may reach unexpected persons, the password was excluded from sendProbe() and probe.txt. Note that the default value of VERP_PROBE has been set to `No' from 2.1.6., thus this change doesn't change the default behavior. New Features - Always remove DomainKey (and similar) headers (1287546) from messages sent to the list. - List owners can customize content filter behavior as not to collapse multipart/alternative to its first content. This allows HTML part to pass through after other content filtering is done. Internationalization - New language: Interlingua. Bug fixes and other patches - Defaults.py.in: SCRUBBER_DONT_USE_ATTACHMENT_FILENAME is set to True for safer operation. - Fix Scrubber.py mungs quoted-printable bug with introducing 'X-Mailman-Scrubbed' header for marking that the payload is scrubber-munged. The flag is referenced in ToDigest.py, ToArchive.py, Decorate.py and Archiver. Similar problem in ToDigest.py where the plain digest is generated is also fixed. - Fix Syslog.py to write quopri encoded message when it fail to write 8-bit characters. - Fix MTA/Postfix.py to check aliases group permission in check_perms and fix mailman-install document on this matter (1378270). - Fix private.py to go to the original URL after authorization (1080943). - Fix bounce log score messages to be more consistent. - Fix bin/remove_members to accept no arguments when both --fromall and --file= options are specified. - Change cgi-bin and mail wrapper "group not found" error message to be more descriptive of the actual problem. - Apply the list's ban_list to address changes and admin mass subscribe and invite and to confirmations/approvals of address changes, subscriptions and invitations. - Decode quoted-printable and base64 encoded parts before passing to HTML_TO_PLAIN_TEXT_COMMAND (1367783). - Remove Approve: header from post - treat as Approved: (1355707). - Stop removing line following Approve(d): line in body of post (1318883). - Remove Approve(d): <password> from all text/* parts in addition the initial text/plain part. It still must be the first non-blank line in the first text/plain part or it won't be found or removed at all (1181161). - Log post in post log with true sender, not listname-bounces (1287921). - Correctly initialize and remember the list's default_member_moderation attribute in the web list creation page (1263213). - Add PEP263 charset in config_list output (1343100). - header_filter_rules get lost if accessed directly and needed authenti- cation by login page (1230865). - Obscure email when the poster doesn't set full name in 'From:' header. - Take preambles and epilogues into account when calculating message sizes for holding purposes (Mark Sapiro). - Logging/Logger.py unicode transform option (1235567). - bin/update crashes with bogus files (949117). - Bugs and patches: 1212066/1301983 (Date header in create/remove notice)

4 13

Question (Bounce Management)
by Hugo Rodríguez Pinillos Dec. 30, 2005

Dec. 30, 2005

Hello, I'm using the mailman software and I have a question. When the bounce emails are generated I receive them in my email account but I would need to have another type of management of those emails. For example, one inform of those emails or statistics of them. Might you help me? Exits any software for this or any option for doing this? Thank you very much. Hugo

1 0

permission problems
by Lic. Martin Marques Dec. 29, 2005

Dec. 29, 2005

I started having permission problems with mailman just now. All messages sent to the lists get shunt, and when I try to unshunt them I get these errors in mailman/error log: Dec 28 21:05:41 2005 (23314) Archive file access failure: /var/lib/mailman/archives/private/depto.mbox/depto.mbox [Errno 13] Permission denied: '/var/lib/mailman/archives/private/depto.mbox/depto.mbox' Dec 28 21:05:41 2005 (23314) Uncaught runner exception: [Errno 13] Permission denied: '/var/lib/mailman/archives/private/depto.mbox/depto.mbox' Dec 28 21:05:41 2005 (23314) Traceback (most recent call last): File "/usr/lib/mailman/Mailman/Queue/Runner.py", line 111, in _oneloop self._onefile(msg, msgdata) File "/usr/lib/mailman/Mailman/Queue/Runner.py", line 167, in _onefile keepqueued = self._dispose(mlist, msg, msgdata) File "/usr/lib/mailman/Mailman/Queue/ArchRunner.py", line 73, in _dispose mlist.ArchiveMail(msg) File "/usr/lib/mailman/Mailman/Archiver/Archiver.py", line 199, in ArchiveMail self.__archive_to_mbox(msg) File "/usr/lib/mailman/Mailman/Archiver/Archiver.py", line 168, in __archive_to_mbox mbox = self.__archive_file(afn) File "/usr/lib/mailman/Mailman/Archiver/Archiver.py", line 156, in __archive_file return Mailbox.Mailbox(open(afn, 'a+')) IOError: [Errno 13] Permission denied: '/var/lib/mailman/archives/private/depto.mbox/depto.mbox' Now permissions look OK, and check_perms finishes with everything OK: [root@newweb mailman]# ./bin/check_perms No se han encontrado problemas [root@newweb mailman]# ls -ld /var/lib/mailman/archives/private/depto.mbox/ drwxrwsr-x 2 root mailman 4096 ene 7 2005 /var/lib/mailman/archives/private/depto.mbox/ What is wrong, and why did it work OK until now? I'm using FC4 with mailman 2.1.5. -- 08:10:01 up 6 days, 19:22, 1 user, load average: 0.01, 0.10, 0.53 --------------------------------------------------------- Lic. Martín Marqués | SELECT 'mmarques' || Centro de Telemática | '@' || 'unl.edu.ar'; Universidad Nacional | DBA, Programador, del Litoral | Administrador ---------------------------------------------------------

1 0

delivering contents of private archive, bad MIME types
by maeder+mm＠mathconsult.ch Dec. 29, 2005

Dec. 29, 2005

for a private archive, the Cgi/private script not only checks authentication/ authorisation, but also delivers the contents. (This task would probably better be left to Apache.) Here's one problem: the script has its own logic for determining the MIME type of attachments, separate from Apache. The one private list I am running accepts attachments of many types (images, vrml files, zip archives, ...), and I let MHonArc do the archiving. My members told me that they could not view vrml files, and indeed Cgi/private treats them as HTML. It uses the Python library mimemtypes.py to guess the mime type of files, and this in turn uses a random-looking list of files to check, in my case (Python 2.3) it is knownfiles = [ "/etc/mime.types", "/usr/local/etc/httpd/conf/mime.types", "/usr/local/lib/netscape/mime.types", "/usr/local/etc/httpd/conf/mime.types", # Apache 1.2 "/usr/local/etc/mime.types", # Apache 1.3 ] as a quick fix, I edited Cgi/private.py to override this with a line mimetypes.init(["/www/apache/conf/mime.types"]) which is where my Apache lives. In this way it is at least synchronized with Apache. However, this is a bad hack. If it is deemed ok that Mailman takes on the role of Web server, there should probably be a config option that points to the mime.types file to use. Roman Maeder

1 0

Command-line moderation...
by Brad Knowles Dec. 29, 2005

Dec. 29, 2005

Folks, I recently ran into a minor problem, and took the opportunity to update the FAQ with the latest information I've been able to find so far on the topic. In another open-source project I'm involved with, I also manage the mail server and the mailing list services. Through a fault of my own, one of the lists on this server hasn't seen any moderation in weeks, or maybe months. Hundreds, possibly thousands, of spam messages built up in the moderation queue -- this is a very popular address for spammers, as far as I can tell. Of course, the web interface was way too bloody slow. So, I tried to find some of those command-line moderation tools that we've talked about before. Unfortunately, I wasn't able to find very much that was useful. I did find Skip's "mmfold.py" script, but on our server we do the same HTTP/HTTPS modification as outlined in FAQ 4.27, but my command-line web client doesn't support HTTPS, so mmfold.py doesn't help me. Anyway, I pulled together all the rest of the information I know on the subject, and put it into FAQ entry 3.61. Now, if we can get some of those "large list" sites to contribute their command-line moderation tools, the entire rest of the Mailman community will benefit. Meanwhile, I'm going to go make yet another update to my "mmdsr" script so that I won't get blind-sided again, at least not in this same way. -- Brad Knowles, <brad(a)stop.mail-abuse.org> "Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety." -- Benjamin Franklin (1706-1790), reply of the Pennsylvania Assembly to the Governor, November 11, 1755 LOPSA member since December 2005. See <http://www.lopsa.org/>.

1 0

Delivery Rates
by Jason (WeatherServer) Dec. 29, 2005

Dec. 29, 2005

Anyone know the best numbers to have in Delivery Rates in PostFix for mailman lists? Or is there a better server to use with mailman then postfix

2 1

Virtual hosting + virtual domain mailman
by list Dec. 28, 2005

Dec. 28, 2005

Hi list, I'm sure this is a redundant question but i search a quiet good method to allow my users to get the same maillist name for different domains. I use Postfix with virtual alias and mailbox suport on a mysql server. Like: test(a)test.com is different of test(a)test.org On a google/archive search i've read somes solutions : 1/ run more than one mailman, but it is not possible for me. 2/ Use a test-test.com style and canonical postfix method, but the sent mail is not clearly test(a)test.com. 3/ Use a patch for mailman (http://al.blog.free.fr/mailman/mailman-vh-2.1.5.patch or http://mithrandr.moria.org/blog/139.html). But they don't seem work very well when i tryed them. All this solutions don't work for me ... Do you have a solution? a working patch? Someone had succeed to do what i want whith the same implementation (Postfix...)? thanks.

1 0

Documentation
by Dennis Putnam Dec. 28, 2005

Dec. 28, 2005

Is there a document somewhere, online, that details all the variables so templates can be customized? Thanks. Dennis Putnam Sr. IT Systems Administrator AIM Systems, Inc. 11675 Rainwater Dr., Suite 200 Alpharetta, GA 30004 Phone: 678-240-4112 Main Phone: 678-297-0700 FAX: 678-297-2666 or 770-576-1000 The information contained in this e-mail and any attachments is strictly confidential. If you are not the intended recipient, any use, dissemination, distribution, or duplication of any part of this e-mail or any attachment is prohibited. If you are not the intended recipient, please notify the sender by return e-mail and delete all copies, including the attachments.

1 0

Can you discard the entire pending queue for a list?
by Scott P. Miller Dec. 26, 2005

Dec. 26, 2005

I have some lists which were "moderated" by my users where they basically left the pending queue untouched (great moderation, eh?) I now have about 10 lists with anywhere between 100 and 400 pending messages. Clicking "discard" 4000 times doesn't appeal to me. I guess I could re-create the list under a new name, re-import the users and delete the old one, but that seems the long way around. what I need is just a way to "discard all" on the pending messages. Is there an obvious way I am missing? Any suggestions? Thanks, Scott Miller

2 1

Mailman unicode support
by Munzir Taha Dec. 25, 2005

Dec. 25, 2005

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi Sirs, What is exactly needed to be done I want my mailman installation to support unicode on the web interface and the mails sent? - -- Munzir Taha Telecommunications and Electronics Engineer Maintainer of Fedora Arabic Translation Project https://listman.redhat.com/mailman/listinfo/fedora-trans-ar Maintainer of the OpenBugs project page at http://www.arabic-fedora.org/munzir/OpenBugs.html Master CIW Designer, ICDL, MOUS, Linux+, LPI 101 Riyadh, SA -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.0 (GNU/Linux) iD8DBQFDrr/SOBlicvBnGCERAmAYAJ0fIqxBpjneqvWunFUrJOqWQIyK7QCgj1TY szxN9/kO4M8VADO01fbvkdw= =Fy7+ -----END PGP SIGNATURE-----

1 0