Mailman 3 July 2016 - Mailman-Users

Is mailman vulnerable to the httpoxy bug?
by Perry E. Metzger 23 Jul '16

23 Jul '16

https://httpoxy.org/ seems to impact any python program (among many others) that runs under cgi. Does it cause trouble for mailman? What is a reasonable mitigation? Perry -- Perry E. Metzger perry(a)piermont.com

6 15

Yahoo policy on list messages
by Christian F Buser 23 Jul '16

23 Jul '16

I have received several bounce notices for subscribers of my list with the following contents: Action: failed Final-Recipient:rfc822;ekxxxxxka@yahoo.com Status: 5.0.0 Remote-MTA: dns; mta7.am0.yahoodns.net Diagnostic-Code: smtp; 554 5.7.9 Message not accepted for policy reasons. Seehttps://help.yahoo.com/kb/postmaster/SLN7253.html Action: failed Final-Recipient:rfc822;mail@xxxxx-xxxx.info Status: 5.0.0 Remote-MTA: dns; mxcluster1.one.com Diagnostic-Code: smtp; 550 5.7.1 The messages violates the DMARC policy of yahoo.com (eb9fcd83-501a-11e6-b513-b82a72d854f0) Action: failed Final-Recipient:rfc822;mxxxxxw@yahoo.de Status: 5.0.0 Remote-MTA: dns; mx-eu.mail.am0.yahoodns.net Diagnostic-Code: smtp; 554 5.7.9 Message not accepted for policy reasons. Seehttps://help.yahoo.com/kb/postmaster/SLN7253.html I asked my provider for help about this, and he wrote back: "from what I can see from the text files you sent me, it's a matter of the mailing list configuration. The sender ( From: ) needs to be set as the mailing list address and not as the original sender (eg, ekxxxxxka(a)yahoo.com) Read here: https://help.yahoo.com/kb/postmaster/SLN7253.html - but all mailing lists I know usually have the original sender's name in the From-field... So what am I doing wrong here? My list runs on the cPanel 56.0.28 version of Mailman 2.1.20 Thank you, Christian -- Christian F. Buser, Hohle Gasse 6, CH-5507 Mellingen (Switzerland) Hilfe für Strassenkinder in Ghana: http://www.chance-for-children.org

3 2

DMARC problems
by Richard Johnson 21 Jul '16

21 Jul '16

I've been running a number of mailing lists for quite a while and never noticed any problems until I setup one which has some yahoo and hotmail addresses on it. Now I have to deal with the DMARC problem. :( Looking at: https://wiki.list.org/DEV/DMARC I see it says: > In 2.1.16 a from_is_list feature was implemented which if enabled by a site configuration option would offer a list admin the ability to either: > > • Rewrite (Munge) the From: header with the posters name 'via the list' and the list's address and merge the poster's address into Reply-To: or > • Wrap the message as a message/rfc822 sub-part in a MIME format outer message with From: and Reply-To: as above. I'm running 2.1.17 and the only thing I see which seems related to this is the "anonymous list" option under General Options. Is this what's being referred to here, or is there some other "site configuration" (i.e., per-site configuration?) method somewhere? /raj

3 6

Support for Internationalized Domain Names and Email Addresses
by Russ Housley 21 Jul '16

21 Jul '16

In August 2010, the IETF published the specifications for Internationalized Domain Names (IDNs) as RFCs 5890 through 5894. In February 2012, the IETF published the specifications for Email Address Internationalization (EAI) as RFC 6530. As far as I can tell, Mailman will not let me include an email address that uses IDN or EAI as a mail list recipient. Has anyone figure out how to use either one of these? Thanks in advance, Russ

4 4

Problems with Membership List and Extraneous Characters in URL
by Mark Graves 19 Jul '16

19 Jul '16

I'm running Mailman version 2.1.21. On the web interface Membership Management/Membership List, if I use the Find member and get too many results to show on one screen, the lettered links at the top do not work correctly. The problem is an extraneous U. Here's an example: https://listserv.acog.org/mailman/admin/coding/u'https://listserv.acog.org/mailman/admin/coding/members?letter=b&findmember=…<https://listserv.acog.org/mailman/admin/coding/u'https:/listserv.acog.org/mailman/admin/coding/members?letter=b&findmember=acog.org>' and here's the source from the link on the page: <a href="u'https://listserv.acog.org/mailman/admin/coding/members?letter=b&findmember=…'">B</a>   Is this a bug? I found someone else complaining about this in 2003, but nothing since. Any ideas?

2 2

Error while searching the archives
by Odhiambo Washington 19 Jul '16

19 Jul '16

Hi everyone, I have a strange problem here. When I try a search on my list archives, I see this on the browser: Bug in Mailman version 2.1.22 We're sorry, we hit a bug! Please inform the webmaster for this site of this problem. Printing of traceback and other system information has been explicitly inhibited, but the webmaster can find this information in the Mailman error logs. And in the error log I see the details here ->: http://gw.kictanet.or.ke/~wash/error.txt Kindly advise what the problem could be. -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft."

2 4

From http to https
by Teijo 16 Jul '16

16 Jul '16

Hello, I have Mailman 2.1.22 installed. Web pages are at addresses starting with http, and I'd like to move to https so that all content would be updated to use https. No need to change domain name. Is there any documentation for this (unfortunately I did not find)? Best, Teijo

2 2

Re: [Mailman-Users] MailMan won't send list emails
by Caesar Samsi 15 Jul '16

15 Jul '16

Sorry, fixed below ... > On Jul 15, 2016, at 3:08 PM, Mark Sapiro <mark(a)msapiro.net> wrote: > > On 07/15/2016 11:03 AM, Caesar Samsi wrote: >> Results below, it seems to still translate yugi.us <http://yugi.us> to mail >> >> POSTFIX_MAILMAN_LOCAL_DOMAIN = 'localhost' > > > No! > > VIRTUAL_MAILMAN_LOCAL_DOMAIN = 'localhost' > > and then run Mailman's bin/genaliases and verify that the entries in > /var/lib/mailman/data/virtual-mailman are like > > test(a)yugi.us test@localhost > ... > > -- > Mark Sapiro <mark(a)msapiro.net> The highway is for gamblers, > San Francisco Bay Area, California better use your sense - B. Dylan Result: <test@localhost>: Host or domain name not found. Name service error for name=localhost type=AAAA: Host not found Reporting-MTA: dns; mail.samsi.us <http://mail.samsi.us/> X-Postfix-Queue-ID: 27A383FFFD X-Postfix-Sender: rfc822; caesar(a)samsi.us <mailto:caesar@samsi.us> Arrival-Date: Fri, 15 Jul 2016 16:11:39 -0700 (PDT) Final-Recipient: rfc822; test@localhost Original-Recipient: rfc822;test(a)yugi.us <mailto:test@yugi.us> Action: failed Status: 5.4.4 Diagnostic-Code: X-Postfix; Host or domain name not found. Name service error for name=localhost type=AAAA: Host not found From: Caesar Samsi <caesar(a)samsi.us <mailto:caesar@samsi.us>> Subject: test Date: July 15, 2016 at 4:11:35 PM PDT To: test(a)yugi.us <mailto:test@yugi.us> test mm_cfg.py ======== # -*- python -*- # Copyright (C) 1998,1999,2000 by the Free Software Foundation, Inc. # # This program is free software; you can redistribute it and/or # modify it under the terms of the GNU General Public License # as published by the Free Software Foundation; either version 2 # of the License, or (at your option) any later version. # # This program is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU General Public License for more details. # # You should have received a copy of the GNU General Public License # along with this program; if not, write to the Free Software # Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA # 02110-1301 USA """This is the module which takes your site-specific settings. From a raw distribution it should be copied to mm_cfg.py. If you already have an mm_cfg.py, be careful to add in only the new settings you want. The complete set of distributed defaults, with annotation, are in ./Defaults. In mm_cfg, override only those you want to change, after the from Defaults import * line (see below). Note that these are just default settings - many can be overridden via the admin and user interfaces on a per-list or per-user basis. Note also that some of the settings are resolved against the active list setting by using the value as a format string against the list-instance-object's dictionary - see the distributed value of DEFAULT_MSG_FOOTER for an example.""" ####################################################### # Here's where we get the distributed defaults. # from Defaults import * ############################################################## # Put YOUR site-specific configuration below, in mm_cfg.py . # # See Defaults.py for explanations of the values. # #------------------------------------------------------------- # The name of the list Mailman uses to send password reminders # and similar. Don't change if you want mailman-owner to be # a valid local part. MAILMAN_SITE_LIST = 'mailman' #------------------------------------------------------------- # If you change these, you have to configure your http server # accordingly (Alias and ScriptAlias directives in most httpds) DEFAULT_URL_PATTERN = 'http://%s/' IMAGE_LOGOS = '/images/mailman/' #------------------------------------------------------------- # Default domain for email addresses of newly created MLs DEFAULT_EMAIL_HOST = 'yugi.us' #------------------------------------------------------------- # Default host for web interface of newly created MLs DEFAULT_URL_HOST = 'mail.samsi.us' #------------------------------------------------------------- # Required when setting any of its arguments. #add_virtualhost(DEFAULT_URL_HOST, DEFAULT_EMAIL_HOST) add_virtualhost(DEFAULT_URL_HOST, DEFAULT_EMAIL_HOST) #------------------------------------------------------------- # The default language for this server. DEFAULT_SERVER_LANGUAGE = 'en' #------------------------------------------------------------- # Iirc this was used in pre 2.1, leave it for now USE_ENVELOPE_SENDER = 0 # Still used? #------------------------------------------------------------- # Unset send_reminders on newly created lists DEFAULT_SEND_REMINDERS = 0 #------------------------------------------------------------- # Uncomment this if you configured your MTA such that it # automatically recognizes newly created lists. # (see /usr/share/doc/mailman/README.Exim4.Debian or # /usr/share/mailman/postfix-to-mailman.py) # MTA=None # Misnomer, suppresses alias output on newlist #------------------------------------------------------------- # Uncomment if you use Postfix virtual domains (but not # postfix-to-mailman.py), but be sure to see # /usr/share/doc/mailman/README.Debian first. MTA='Postfix' SMTPHOST = 'localhost' SMTPPORT = 25 #------------------------------------------------------------- # Uncomment if you want to filter mail with SpamAssassin. For # more information please visit this website: # http://www.jamesh.id.au/articles/mailman-spamassassin/ # GLOBAL_PIPELINE.insert(1, 'SpamAssassin') # Note - if you're looking for something that is imported from mm_cfg, but you # didn't find it above, it's probably in /usr/lib/mailman/Mailman/Defaults.py. POSTFIX_STYLE_VIRTUAL_DOMAINS = ['yugi.us'] VIRTUAL_MAILMAN_LOCAL_DOMAIN = 'localhost' virtual-mailman ============ # This file is generated by Mailman, and is kept in sync with the binary hash # file virtual-mailman.db. YOU SHOULD NOT MANUALLY EDIT THIS FILE unless you # know what you're doing, and can keep the two files properly in sync. If you # screw it up, you're on your own. # # Note that you should already have this virtual domain set up properly in # your Postfix installation. See README.POSTFIX for details. # LOOP ADDRESSES START mailman-loop(a)yugi.us mailman-loop@localhost # LOOP ADDRESSES END # STANZA START: test # CREATED: Fri Jul 15 16:09:03 2016 test(a)yugi.us test@localhost test-admin(a)yugi.us test-admin@localhost test-bounces(a)yugi.us test-bounces@localhost test-confirm(a)yugi.us test-confirm@localhost test-join(a)yugi.us test-join@localhost test-leave(a)yugi.us test-leave@localhost test-owner(a)yugi.us test-owner@localhost test-request(a)yugi.us test-request@localhost test-subscribe(a)yugi.us test-subscribe@localhost test-unsubscribe(a)yugi.us test-unsubscribe@localhost # STANZA END: test

2 2

Mailman 2.1.2 unsubscribe without confirmation action
by Montanez, Victor 15 Jul '16

15 Jul '16

Can the list owners send a command via email to unsubscribe users of a list that will NOT cause a confirmation email to be generated to the subscribers? We want to send an email to mailman to remove subscribers without requiring confirmation from the subscribed users. All settings I have tried still generate a confirmation email and subscriber interaction is required. Thanks in advance

2 4

Re: [Mailman-Users] MailMan won't send list emails
by Caesar Samsi 14 Jul '16

14 Jul '16

[including list] The log for an inbound email to test(a)yugi.us <mailto:test@yugi.us> list Jul 13 20:48:09 mail postfix/smtpd[10666]: connect from macpro[192.168.1.253] Jul 13 20:48:09 mail postfix/smtpd[10666]: Anonymous TLS connection established from macpro[192.168.1.253]: TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits) Jul 13 20:48:09 mail postfix/smtpd[10666]: E31B13FFF3: client=macpro[192.168.1.253], sasl_method=PLAIN, sasl_username=caesar(a)samsi.us <mailto:sasl_username=caesar@samsi.us> Jul 13 20:48:09 mail postfix/cleanup[10656]: E31B13FFF3: message-id=<A44E390A-43A6-4EAC-9727-311C56DA6BFF(a)samsi.us <mailto:A44E390A-43A6-4EAC-9727-311C56DA6BFF@samsi.us>> Jul 13 20:48:09 mail postfix/qmgr[10476]: E31B13FFF3: from=<caesar(a)samsi.us <mailto:caesar@samsi.us>>, size=316, nrcpt=1 (queue active) Jul 13 20:48:10 mail postfix/smtpd[10684]: connect from localhost[127.0.0.1] Jul 13 20:48:11 mail postfix/smtpd[10684]: disconnect from localhost[127.0.0.1] Jul 13 20:48:11 mail postfix/smtpd[10684]: connect from localhost[127.0.0.1] Jul 13 20:48:11 mail postfix/smtpd[10684]: disconnect from localhost[127.0.0.1] Jul 13 20:48:12 mail postfix/smtpd[10687]: connect from localhost[127.0.0.1] Jul 13 20:48:12 mail postfix/smtpd[10687]: A44093FFF4: client=localhost[127.0.0.1] Jul 13 20:48:12 mail postfix/cleanup[10656]: A44093FFF4: message-id=<A44E390A-43A6-4EAC-9727-311C56DA6BFF(a)samsi.us <mailto:A44E390A-43A6-4EAC-9727-311C56DA6BFF@samsi.us>> Jul 13 20:48:12 mail postfix/qmgr[10476]: A44093FFF4: from=<caesar(a)samsi.us <mailto:caesar@samsi.us>>, size=933, nrcpt=1 (queue active) Jul 13 20:48:12 mail amavis[9530]: (09530-14) Passed CLEAN {RelayedInternal}, LOCAL [192.168.1.253]:65462 <caesar(a)samsi.us <mailto:caesar@samsi.us>> -> <test(a)yugi.us <mailto:test@yugi.us>>, Queue-ID: E31B13FFF3, Message-ID: <A44E390A-43A6-4EAC-9727-311C56DA6BFF(a)samsi.us <mailto:A44E390A-43A6-4EAC-9727-311C56DA6BFF@samsi.us>>, mail_id: lnzQpKxIXYKy, Hits: -0.002, size: 316, queued_as: A44093FFF4, 2809 ms Jul 13 20:48:12 mail postfix/smtp[10658]: E31B13FFF3: to=<test(a)yugi.us <mailto:test@yugi.us>>, relay=127.0.0.1[127.0.0.1]:10024, delay=2.9, delays=0.03/0.01/0.02/2.8, dsn=2.0.0, status=sent (250 2.0.0 from MTA(smtp:[127.0.0.1]:10025): 250 2.0.0 Ok: queued as A44093FFF4) Jul 13 20:48:12 mail postfix/qmgr[10476]: E31B13FFF3: removed Jul 13 20:48:12 mail dovecot: lda(test(a)yugi.us <mailto:test@yugi.us>): msgid=<A44E390A-43A6-4EAC-9727-311C56DA6BFF(a)samsi.us <mailto:A44E390A-43A6-4EAC-9727-311C56DA6BFF@samsi.us>>: saved mail to INBOX Jul 13 20:48:12 mail postfix/pipe[10664]: A44093FFF4: to=<test(a)yugi.us <mailto:test@yugi.us>>, relay=dovecot, delay=0.18, delays=0.03/0.01/0/0.14, dsn=2.0.0, status=sent (delivered via dovecot service) Jul 13 20:48:12 mail postfix/qmgr[10476]: A44093FFF4: removed Postfix config: alias_maps = hash:/etc/aliases,hash:/var/lib/mailman/data/aliases append_dot_mydomain = no biff = no broken_sasl_auth_clients = yes config_directory = /etc/postfix content_filter = amavis:[127.0.0.1]:10024 disable_vrfy_command = yes dovecot_destination_recipient_limit = 1 enable_original_recipient = no header_checks = regexp:/etc/postfix/header_checks inet_interfaces = all mailbox_size_limit = 0 mailman_destination_recipient_limit = 1 maximal_backoff_time = 8000s maximal_queue_lifetime = 7d minimal_backoff_time = 1000s mydestination = myhostname = mail.samsi.us <http://mail.samsi.us/> mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128 mynetworks_style = host myorigin = /etc/hostname readme_directory = no recipient_delimiter = + relay_domains = mail.samsi.us <http://mail.samsi.us/> smtp_helo_timeout = 60s smtpd_banner = $myhostname ESMTP $mail_name smtpd_delay_reject = yes smtpd_hard_error_limit = 12 smtpd_helo_required = yes smtpd_helo_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_invalid_helo_hostname, reject_non_fqdn_helo_hostname, reject_unknown_helo_hostname, reject_non_fqdn_hostname, reject_invalid_hostname smtpd_recipient_limit = 16 smtpd_recipient_restrictions = permit_sasl_authenticated, permit_mynetworks, reject_unauth_destination, reject_invalid_hostname, reject_non_fqdn_hostname, reject_non_fqdn_sender, reject_non_fqdn_recipient, reject_unknown_sender_domain, reject_unknown_recipient_domain, reject_rbl_client sbl.spamhaus.org <http://sbl.spamhaus.org/>, reject_rbl_client cbl.abuseat.org <http://cbl.abuseat.org/>, reject_rbl_client dul.dnsbl.sorbs.net <http://dul.dnsbl.sorbs.net/> smtpd_sasl_auth_enable = yes smtpd_sasl_authenticated_header = yes smtpd_sasl_local_domain = smtpd_sasl_path = private/auth smtpd_sasl_security_options = noanonymous smtpd_sasl_type = dovecot smtpd_soft_error_limit = 3 smtpd_tls_auth_only = yes smtpd_tls_cert_file = /etc/ssl/certs/ssl-cert-snakeoil.pem smtpd_tls_exclude_ciphers = aNULL, eNULL, EXPORT, DES, RC4, MD5, PSK, aECDH, EDH-DSS-DES-CBC3-SHA, EDH-RSA-DES-CDC3-SHA, KRB5-DE5, CBC3-SHA smtpd_tls_key_file = /etc/ssl/private/ssl-cert-snakeoil.key smtpd_tls_loglevel = 1 smtpd_tls_mandatory_protocols = !SSLv2,!SSLv3 smtpd_tls_received_header = yes smtpd_tls_security_level = may smtpd_tls_session_cache_timeout = 3600s tls_random_source = dev:/dev/urandom unknown_local_recipient_reject_code = 450 virtual_alias_maps = mysql:/etc/postfix/mysql_virtual_alias_maps.cf, mysql:/etc/postfix/mysql_virtual_alias_domainaliases_maps.cf, hash:/var/lib/mailman/data/virtual-mailman virtual_gid_maps = static:8 virtual_mailbox_base = /var/vmail virtual_mailbox_domains = mysql:/etc/postfix/mysql_virtual_domains_maps.cf virtual_mailbox_maps = mysql:/etc/postfix/mysql_virtual_mailbox_maps.cf, mysql:/etc/postfix/mysql_virtual_mailbox_domainaliases_maps.cf virtual_transport = dovecot virtual_uid_maps = static:150 > On Jul 13, 2016, at 7:53 PM, Mark Sapiro <mark(a)msapiro.net <mailto:mark@msapiro.net>> wrote: > > On 07/13/2016 07:29 PM, Caesar Samsi wrote: > > > > You are going backwards. Please see my reply to your list mail at > <https://mail.python.org/pipermail/mailman-users/2016-July/081058.html <https://mail.python.org/pipermail/mailman-users/2016-July/081058.html>> > > You need /var/lib/mailman/data/aliases and /etc/aliases in alias_maps > > You don't want transport_maps. > > Please don't post excerpts of your Postfix config. As I've asked before, > post the output from 'postconf -n', and post to the list. > > -- > Mark Sapiro <mark(a)msapiro.net <mailto:mark@msapiro.net>> The highway is for gamblers, > San Francisco Bay Area, California better use your sense - B. Dylan >> /etc/postfix/main.cf looks like (i.e. alias_map has been deleted, >> /etc/aliases and /var/lib/mailman/data/aliases is also deleted). >> >> virtual_alias_maps = >> mysql:/etc/postfix/mysql_virtual_alias_maps.cf, >> mysql:/etc/postfix/mysql_virtual_alias_domainaliases_maps.cf, >> hash:/var/lib/mailman/data/virtual-mailman >> >> relay_domains = mail.samsi.us <http://mail.samsi.us/> <http://mail.samsi.us <http://mail.samsi.us/>> >> mailman_destination_recipient_limit = 1 >> transport_maps = hash:/etc/postfix/transport

2 5