Mailman 3 January 2006 - Mailman-Users

Newbie question regarding multiple domains with one Mailman installation
by Daniel Spreadbury Jan. 30, 2006

Jan. 30, 2006

Hi folks, Apologies if this is covered in the Mailman docs or the FAQs, but I'm having problems finding any concrete information. I've installed Mailman via the FreeBSD ports collection on my FreeBSD server (running 4.7). My MTA is Exim 4.22, and my web server is Apache 1.3.x. I currently have mailman in /usr/local/mailman, and my web server has a virtual host at http://lists.dom.ain/ that points at this installation. My lists therefore have addresses like mailing-list(a)lists.dom.ain. I run a number of different virtual domains from my server, and would like to be able to run mailing lists for each of them, but using their domain names. I don't care about the limitation that they can't use the same list name -- the number of lists will be small, and that's an avoidable problem. So what do I need to do to run e.g. mailing-list-alpha(a)dom.ain and mailing-list-beta(a)another.domain from the same Mailman installation on my server? Any pointers very gratefully received! Thanks, Daniel

2 4

Footers showing up as attachments
by David Ellsworth Jan. 30, 2006

Jan. 30, 2006

Having lots of complaints from listees that they can't unsubscribe when those Instructions are included as a footer in every email. Some have said (on windows computers) arrive as an attachment not in the body of the email. Any ideas how that can be fixed? Thanks David

1 0

Footers showing up as attachments
by David Ellsworth Jan. 30, 2006

Jan. 30, 2006

Having lots of complaints from listees that they can't unsubscribe when those Instructions are included as a footer in every email. Some have said (on windows computers) arrive as an attachment not in the body of the email. Any ideas how that can be fixed? Thanks David

2 1

Why are footers sent as attachments?
by Jp Possenti Jan. 30, 2006

Jan. 30, 2006

Why is it that when I set Mailman to apply a footer with some info, Outlook detects it as an attachment? Is this yet another problem with just outlook? Also does the footer in mailman support HTML? I want to make it so at the bottom of every email I can include a reply to address for them to unsubscribe. This sort of leads me to my next question. To have a user unsubscribe without seeing the web interface and just by email, which would be the right command? Listname-leave(a)domain.com List-unsubscribe(a)domain.com Or are there more? Also does anything need to be written in the subject line? If not, what if someone writes something or writes something that is not right, will it still unsubscribe them? I would like to state that if they want to be removed, to please "click here" to send an email to unsubscribe. Kind regards, Jp

5 7

Templates: Continued
by Jeff Edwards Jan. 30, 2006

Jan. 30, 2006

Can anyone point me to the Python module that Pipermail uses to take templates and render HTML message archives? Jeff Edwards

3 2

any info on this reported exploit?
by Diana Orrick Jan. 30, 2006

Jan. 30, 2006

http://www.securityfocus.com/bid/16248/discuss GNU Mailman Large Date Data Denial Of Service Vulnerability GNU Mailman is prone to a denial of service attack. This issue affects the email date parsing functionality of Mailman. The vulnerability could be triggered by mailing list posts and will impact the availability of mailing lists hosted by the application. ______________________________________________________________________ this notice was from SANS@RISK: 06.3.18 CVE: CVE-2005-4153 Platform: Unix Title: GNU Mailman Large Date Data Denial of Service Description: Mailman is software to help manage email discussion lists, much like Majordomo and SmartList. The application is exposed to a denial of service issue when it attempts to parse very large numbers of dates contained in email messages. All current versions are affected. Ref: http://www.securityfocus.com/bid/16248 ______________________________________________________________________ -------------------------------------------------------------- We are running Mailman 2.1.5 and have just found extraordinary IO wait issues requiring shutdown|restart of Mailman. The notice suggests all versions are vulnerable, is this the case? If so, suggested workaround? Patch/upgrade coming? Thanks for any info on this issue, -DMO ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Diana Mayer Orrick email: orrick(a)ucs.fsu.edu University Computing Services ph: (850) 644-2591 Florida State University fax: (850) 644-8722 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

7 37

Re: [Mailman-Users] New Lists not getting emails from internal domain
by Neilrey Espino Jan. 30, 2006

Jan. 30, 2006

Just realized Mark,,,, The other lists are actually fine,,,I'm only having problems with the newly created list. I'm not sure if there's a typo on the aliases. What else could I check ? Thanks, Neilrey -----Original Message----- From: Mark Sapiro [mailto:msapiro@value.net] Sent: Sunday, January 29, 2006 2:14 PM To: Neilrey Espino; mailman-users(a)python.org Subject: Re: [Mailman-Users] New Lists not getting emails from internal domain Neilrey Espino wrote: > >I have successfully migrated our Mailman to a new server. All seem to >work perfectly on the existing Lists. > >However when, I created a new list, somehow emails coming from the >internet are being accepted/relayed and bounced properly but email >coming from my own domain indicates "unknown user". This appears to be an issue with how your incoming MTA treats mail from your own domain (localhost?) vs. the internet. That would be an MTA configuration issue which would be better addressed on a list or other resource specific to your MTA. -- Mark Sapiro <msapiro(a)value.net> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan

2 1

How hard is it to spoof an email?
by Jp Possenti Jan. 30, 2006

Jan. 30, 2006

How hard would it be for someone to maliciously start sending all the users in my list emails or start deleting people from it by sending bounce errors or by spoofing the admin email and start emailing everyone on the list? Is this a common problem, or is mailman secure about it? What are some ways to help avoid any problems? Please explain carefully and with plenty of details as I am still figuring things out. Kind regards, Jp

6 14

Verifying posts
by Jim Popovitch Jan. 29, 2006

Jan. 29, 2006

Hi all, I've been looking into TMDA (http://tmda.net) and got to wondering if something like this (or a subset of it) should be incorporated into Mailman. Here's my line of thinking: What if Mailman had a means, similar to the current subscription verification process, to verify postings to a given list. For instance, after a user subscribes to a list and verifies their subscription, on their first post they receive an email asking them to verify their intention to post to the list. Subsequently, after XX days of no activity, they would be asked to re-verify their intention to post. It's sort of a means of self-moderation with the sole intention of having the user periodically validate their intention. The user would see text like this: "Hi! This is the Mailman system at blah.com. We received your email for list(a)blah.com but we noticed that you've never posted here before. Prior to processing your email, we ask that you click the URL below to verify that this is your intention." Alternate Text: "Hi! This is the Mailman system at blah.com. We received your email for list(a)blah.com but we noticed that you haven't posted here in the past XX days. Prior to processing your email, we ask that you click the URL below to verify that this is your intention." Why do this? Well, over time very large lists collect lots of email addresses and some end up in "nomail" state for various reasons (not all entirely clear unless the list started post MM 2.0). Admins are faced with leaving the addresses or manually trying to contact all the users to establish the reason for the nomail state. Needless to say, few really do this. So systems wind up having large numbers of email addresses pre-approved to post to a given list even though they probably never will ... at least until a spammer starts using their email address. This seems to me like a good fit, albeit entirely perfect, for Mailman? Thoughts? -Jim P.

3 3

New Lists not getting emails from internal domain
by Neilrey Espino Jan. 29, 2006

Jan. 29, 2006

Hi, I have successfully migrated our Mailman to a new server. All seem to work perfectly on the existing Lists. However when, I created a new list, somehow emails coming from the internet are being accepted/relayed and bounced properly but email coming from my own domain indicates "unknown user". Example : Domain name : network.com Mailing list Server : lists.network.com I updated the /etc/aliases as well. Thanks in advance. Neilrey

2 1