Mailman 3 October 2012 - Mailman-Users

mailan and postfix config problems
by soportek 31 Oct '12

31 Oct '12

I am migrating mailman lists from somedomain.org to lists.somedomain.org I can create new lists for lists.somedomain.org and receive mail from the list but sending mail to lists.somedomain.org results in " Recipient address rejected: User unknown;" I know this is postfix related but I am follwing the postfix config INSTALL instructions from /var/lib/mailman/bin/postfix-to-mailman.py and I have edited... /etc/postfix/main.cf /etc/postfix/master.cf /etc/postfix/transport /etc/mailman/mm_cfg.py ..as per those instructions. I have also read these guides which provide more or less identical instructions. http://wiki.debian.org/Postfix#Mailman_with_Postfix http://library.linode.com/email/mailman/debian-6-squeeze The relevant section of my /etc/postfix/main.cf looks like this alias_maps = hash:/etc/aliases, hash:/var/lib/mailman/data/aliases alias_database = hash:/etc/aliases virtual_alias_maps = hash:/etc/postfix/virtual local_recipient_maps = $alias_maps, proxy:unix:passwd.byname relay_domains = $mydestination, lists.somedomain.org relay_recipient_maps = hash:/var/lib/mailman/data/virtual-mailman transport_maps = hash:/etc/postfix/transport mailman_destination_recipient_limit = 1 Something I find odd is that with the above config is that when I create a new list nothing is being written to the file: /var/lib/mailman/data/virtual-mailman I understood that should happen automatically.

2 6

list of subcriber diggest
by Jesus Rivas 30 Oct '12

30 Oct '12

Hi, there are any way to get list of subscriber digests? regards Sistemas ---------------------- Evangelización Activa Comunicación Digital al Servicio del Evangelio www.evangelizacion.org.mx 8347-5438 y 8123-1293

2 1

Automated Subscription Bots Inundating List Owners With Subscription Requests
by Kalbfleisch, Gary 30 Oct '12

30 Oct '12

For the past couple days my Mailman server has been hammered with automated subscription requests. I've always seen a few here and there but nothing like this. Thousands of them, exploiting the web interface and replying to confirmation email messages. Many of our lists were open subscription and so some got through. Not a lot though. What's most annoying is that list owners are being inundated with confirmation request messages, and you cannot delete them all at once on the "Tend to pending moderator requests" screen. You have to select "Discard" for each of them individually. I don't know if this has been changed yet. I am running 2.1.9 because that is the latest version available from Redhat as a package. I had to block access to the web interface from off site at our router to stop the deluge of messages. I have seen this starting to occur at some other Mailman sites as well. Anyone else seeing this or have any ideas about how best to handle this? I have it under control for now but it is changing the way we use our lists. -- Gary Kalbfleisch -- Director of Technology Support Services -- Shoreline Community College -- (206) 546-5813 -- (206) 546-6943 Fax

10 26

There are no pending requests when clicking on the link in the mail
by Andreas Nitsche 30 Oct '12

30 Oct '12

Hello, I tried to search some answers for this problem but didn't find anyone. I'm getting a daily mail which says that there is one mail which needs to be moderated. The link I get is http://lists.mydomain.com/mailman/admindb/orga When clicking on that link the site says that there are no pending requests. From other posts I got the hint to have a look at some files, so there is heldmsg-orga file within the data directory and even in lists/orga/request.pck is a hint to this mail. I also checked the permissions with check_perms and corrected them after the mail was received with check_perms -f. Can you tell me what's going wrong here? cheers Andi

2 1

POST based subscribe attacks
by Ben Cooksley 30 Oct '12

30 Oct '12

Hi all, We at KDE are currently experiencing attacks upon our Mailman installation, attempting to subscribe random email addresses (which more often than not are valid unfortunately). These attacks are conducted essentially through performing mass HTTP POST requests to /subscribe/listname with few proceeding GET requests. It seems that the attackers are capitalizing on Mailman's lack of CSRF protection. Does anyone know if there are plans to add CSRF protection into Mailman 2? Alternately, is anyone aware of any form of CAPTCHA protection which can be applied to Mailman? It has gotten to the point where we have had to disable web based subscriptions to our mailing lists due to this abuse. Thanks, Ben Cooksley KDE Sysadmin

5 5

Mailman Downgrade from 2.1.15 to 2.1.13 possible ?
by Torsten Giebl 29 Oct '12

29 Oct '12

Hello ! Is a downgrade from Mailman 2.1.15 to 2.1.13 possible ? I know downgrades are not officially supported. If it is possible, what do i have to do ? Thanks.

2 1

Re: [Mailman-Users] mailman running very slow
by Lindsay Haisley 29 Oct '12

29 Oct '12

On Thu, 2012-10-25 at 15:10 -0400, Richard Shetron wrote: > What arguments do you use to pretend to be mailman delivering to postfix > with swaks? I would run swaks from the same box on which you run Mailman, and use -f with whatever Mailman uses as the envelope sender address for posts, If you have VERP personalization turned on, this would be a "bounces" address. Send to a sample (test) address that's on the list, and use -s with the FQN of the server which your Mailman installation uses. All of this assumes, of course, that you're using postfix as a SMTP server (DELIVERY_MODULE = 'SMTPDirect' as opposed to DELIVERY_MODULE='Sendmail'). If you're using the latter, then swaks won't help you. BTW, it would be a good idea if you'd cc questions such as this to the list. There are some very good minds on the list who might well chime in helpfully, and/or critique my response. > I'm running on too much stress, too little sleep/food ;) > > > On 10/24/2012 2:17 PM, Lindsay Haisley wrote: > > On Wed, 2012-10-24 at 11:06 -0700, Brad Knowles wrote: > >>> Another very useful tool for analyzing mail issues is swaks. > >> > >> Now that's a tool I had not heard of before. I'm assuming you mean > >> the tool at <http://www.jetmore.org/john/code/swaks/>? > >> > > That's the one. I used to test SMTP stuff by using telnet to port 25 > > and talking to an SMTP server, but swaks does all the lifting for you, > > and gives you a terminal display of the entire dialog in real time, so > > you can see where a SMTP transaction is hanging, or timing out, or > > whatever. It's written in perl, and self-docs with a man-page like help > > system. It has a ton of useful options, and is truly, as advertised, > > "the Swiss army knife for SMTP". As a mail admin, I couldn't be without > > it :) > >

3 4

Strange list problem
by Brian Carpenter 26 Oct '12

26 Oct '12

Hi Everyone: I have come across some strange behavior that has me stumped. Here are the symptoms: 1. List is moderated. When a moderated member's post is approved by a moderator, the post is sent to the list as expected. 2. The post shows up in the Archives of the list. 3. The post DOES NOT get distributed to the mailing list members (non-digest). 4. It seems the post(s) ARE distributed to the digest members. I am only guessing at this but digests are being sent out so I am assume it because there is something to send out. Our mailman lists were recently upgraded to Mailman 2.1.15. This seemed to suddenly start happening out of no where since Oct 15th. I am not seeing this behavior with other lists. Any advice? Thanks! *Brian Carpenter *EMWD.com T: 336-755-0685 E: brian(a)emwd.com http://www.emwd.com Facebook <http://www.facebook.com/pages/EMWDcom/192156034142506> LinkedIn <http://www.linkedin.com/in/brianemwd>

2 1

change existing subscribers setting
by Judy Angel 25 Oct '12

25 Oct '12

I have a list of 6000 users and I wish to change the setting for all subscribers to Conceal the member's address Acknowledge the member's posting I can see how to set it for new members but not existing existing members. Thanks Judy Angel University of Hertfordshire

2 1

Mailman redundancy setup
by David Westlund 25 Oct '12

25 Oct '12

Hi I am investigating doing a redundant setup of a mailman installation. We do not care about load balancing, only fail over. I have read through all I can found about this, including the following article on the FAQ: http://wiki.list.org/pages/viewpage.action?pageId=4030621 I am planning to solve this by having an ordinary passive - active with a shared ip number between the hosts. My idea is to have mailman installations on both servers, but point out an NFS area for storing the data that needs to be available on all nodes in the setup. The big difference between failover and load balancing (described in the FAQ post that I linked to) is of course that whenever there is a fail over, there is a good chance that the other mailman instance exited abruptly, leaving lock files and temporary data. This makes an argument for storing lock files locally. On the other hand, we do not want a situation where data gets corrupted even if both hosts end up running simultaneously. I have some questions, perhaps someone here has an answer: * If we store lock files on an NFS area and one node goes down without removing any locks, will the other node be able to start mailman? * According to http://wiki.list.org/pages/viewpage.action?pageId=4030621, qrunner does not use locks. However, I see a file named "master-qrunner" in the locks directory. Suppose that our master node went down without removing any lock files, would the master-qrunner file cause the qrunner on the other node to not start? * On the page http://wiki.list.org/pages/viewpage.action?pageId=4030621 they mention that "If you set up /usr/local/mailman/qfiles to be shared across NFS and don't set up dedicated slices for each group of queue runners, you will be SERIOUSLY SCREWED." In what way? * Say that we store locks locally, store data on an NFS node and accidentally start two instances of mailman on two different machines. Do we risk data corruption, or is the worst thing that can happen that changes are overwritten? * Is there some documentation that I have not found about how locks are used in Mailman? BR, David Westlund

2 1