Mailman 3 January 2018 - Mailman-Users

Deleting pending.pck.tmp files
by João Sá Marta 18 Jan '18

18 Jan '18

Greetings, I’ve noticed that I have in my mailman installation (version 2.1.9.) a lot of pending.pck.tmp.XXXXXXX files in several mailing lists directories /home/mailman/lists/LISTNAME: -rw-rw---- 1 apache mailman 6353027 Jan 17 11:02 pending.pck -rw-rw---- 1 apache mailman 711556 Oct 26 17:23 pending.pck.tmp.1000.1509035033 -rw-rw---- 1 apache mailman 14136390 Oct 26 17:24 pending.pck.tmp.1017.1509035052 -rw-rw---- 1 apache mailman 1260000 Jan 6 2017 pending.pck.tmp.10183.1483700222 -rw-rw-— 1 apache mailman 16083210 Aug 24 17:26 pending.pck.tmp.10631.1503592014 The contents of those files are subscriptions notifications. Here is part of the output using /mailman/bin/dumpdb -p <UserDesc SWIFTUSMC(a)yahoo.com () [123456789] [digest? no] [en]>), 'fe640c0796148819f87918e9ab5dbc909b2dd846': ( 'S', <UserDesc NICOLEGOZA(a)gmail.com () [123456789] [digest? no] [en]>), 'fe66252d7408b34d2a6910e2b89e3e907e008dbe': ( 'S', <UserDesc NICOLEGOZA(a)gmail.com () [123456789] [digest? no] [en]>), Is it safe to delete those files ? Thanks in advance, João

3 3

Retention policy for archives
by Dang Tran 16 Jan '18

16 Jan '18

Hi – I’d like to setup a retention policy to delete all archives older than 1yr. please help me to setup this. thanks ------- Best Regards, Dang

4 3

options for dealing with DMARC
by Jordan Brown 16 Jan '18

16 Jan '18

I've been running my mailing list for a few years with "Munge From" to defend against DMARC rejection. This means that my messages get From: Joe User <mymailinglist(a)mydomain.com> Reply-To: Joe User <joe(a)example.com> That mostly works, but sometimes confuses people a bit, and just now I've had somebody send what I think was intended as a private address to that From line, not to the Reply-To line. (I think their e-mail client, Pegasus, has an excessively flexible policy on which headers to use for a reply and may be subtly misconfigured, but maybe they just naively copied the From line.) That's leading me to wonder whether there's another way, whether I can leave From alone and still get past the DMARC checks. Wikipedia tells me that DMARC passes if either SPF *or* DKIM passes. There's no hope for SPF with the original sender in From, because the mailing list server isn't the user's mail server. However, DKIM seems like it *might* pass, if I'm careful in how I configure the mailing list. In particular, it looks like I'd have to get rid of the message footer. That would be OK. Looks like I might also have to kill off the [ListName] addition to the Subject, which is less OK but might be better than the alternative. Before I go recruit a couple of users from several DMARC-using providers and run some tests, can anybody tell me if there is any hope there, and maybe share some configuration tips?

5 9

Problem Delivering Mail
by David Andrews 15 Jan '18

15 Jan '18

Some of my lists, and some of my users are unable to send mail. The users get a message like this: Subject: Mail delivery failed: returning message to sender This message was created automatically by mail delivery software. A message that you sent could not be delivered to one or more of its recipients. This is a permanent error. The following address(es) failed: jobs(a)nfbnet.org local delivery failed Reporting-MTA: dns; host.nfbnet.org Action: failed Final-Recipient: rfc822;jobs(a)nfbnet.org Status: 5.0.0 Received: from smtp33.relay.iad3a.emailsrvr.com (localhost [127.0.0.1]) by smtp33.relay.iad3a.emailsrvr.com (SMTP Server) with ESMTP id D8CA42B83 for <jobs(a)nfbnet.org>; Mon, 15 Jan 2018 13:26:18 -0500 (EST) Received: by smtp33.relay.iad3a.emailsrvr.com (Authenticated sender: xxx(a)yyy.zzzus) with ESMTPSA id A014A5807 for <jobs(a)nfbnet.org>; Mon, 15 Jan 2018 13:26:18 -0500 (EST) Received: from mmlenovo ([UNAVAILABLE]. [173.217.232.59]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384) by 0.0.0.0:465 (trex/5.7.12); Mon, 15 Jan 2018 13:26:18 -0500 Received: from smtp64.iad3a.emailsrvr.com ([173.203.187.64]:33780) by host.nfbnet.org with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256) (Exim 4.89_1) It is on more than one list -- and more than one user. This is a cPanel installation, but I don't know that this is related, and I have access to everything. Thanks for any ideas. Dave

3 3

Mailman CSRF Vulnerability
by Lindsay Haisley 12 Jan '18

12 Jan '18

I just installed a new list on MM 2.1.18-1 and one of the sharper folks on a related FB group noted that there is, or had been a CSRF vulnerability on some versions of MM2. A little research turned up <https://bugs.launchpad.net/mailman/+bug/775294> in which Mark states that this has been fixed since 2.1.15. For the record, could someone confirm this? -- Lindsay Haisley | "I felt a great disturbance in the Force, FMP Computer Services | as if millions of voices suddenly cried out 512-259-1190 | in terror and were suddenly silenced." http://www.fmp.com | - Obi-Wan Kenobi

3 7

Changing the List URL and email domain
by Andrew Hodgson 11 Jan '18

11 Jan '18

Hi, I want to change the list URL and email domain, is there any way of keeping the old domain and URL active? Using Mailman 2.1.24 here. Thanks. Andrew.

2 1

"[Errno 30] Read-only file system" error when accessing Mailman admin pages from outside of cPanel
by Jim Ratliff 09 Jan '18

09 Jan '18

When someone attempts to subscribe to the Mailman list at the public-information page, e.g., myserver.org/mailman/subscribe/listname <http://myserver.org/mailman/subscribe/listname> 1) the request for subscription DOES go through (shows up on pending subscription requests), BUT 2) the user is shown a page that says "Bug in Mailman version 2.1.23, We're sorry, we hit a bug! Please inform the webmaster for this site of this problem. Printing of traceback and other system information has been explicitly inhibited, but the webmaster can find this information in the Mailman error logs.” When I look in the error log, the most-relevant entry seems to be: OSError: [Errno 30] Read-only file system: '/usr/local/cpanel/3rdparty/mailman/archives/public/REDACTED_LISTNAME’ In case it’s helpful, here’s the traceback: > Traceback (most recent call last): > File "/usr/local/cpanel/3rdparty/mailman/scripts/driver", line 117, in run_main > main() > File "/usr/local/cpanel/3rdparty/mailman/Mailman/Cgi/subscribe.py", line 110, in main > mlist.Save() > File "/usr/local/cpanel/3rdparty/mailman/Mailman/MailList.py", line 607, in Save > self.CheckHTMLArchiveDir() > File "/usr/local/cpanel/3rdparty/mailman/Mailman/Archiver/Archiver.py", line 236, in CheckHTMLArchiveDir > breaklink(pubdir) > File "/usr/local/cpanel/3rdparty/mailman/Mailman/Archiver/Archiver.py", line 56, in breaklink > os.unlink(link) I ran “check_perms” and the only response was: > Warning: Private archive directory is other-executable (o+x). > This could allow other users on your system to read private archives. > If you're on a shared multiuser system, you should consult the > installation manual on how to fix this. which doesn’t seem like an explanation for my problem. In the subject line, I say I have this problem "when accessing Mailman admin pages from outside of cPanel.” What I mean is that I don’t get this error if I go through cPanel » Mailing Lists and access the admin pages through those links. Any ideas on what to do or check? Thanks! Jim

2 2

New Problems with AOL & DMARC
by Richard Damon 06 Jan '18

06 Jan '18

I use Mailman versioon 2.1.25 on a shared host, and in the past couple of days, something seems to have changed, as posts from AOL users are no longer getting their from address munged like they were a week ago, and I am getting massive bounces for DMARC rejection when a poster from AOL posts. Has something changed with their settings, and is their anything I can do about it? -- Richard Damon

2 4

Privacy Filter Unusual Behavior
by Chris PUCHALSKI 05 Jan '18

05 Jan '18

The privacy settings with concern to the moderation of nonmembers we have been seeing something odd happening. We have nonmembers set to reject on a list but it appears messages still get through to the list recipients. But the sender also get the rejection notification. That is both confirmed in the vette logs as well as in actual practice with test emails. Where does one begin to look for a reason why this is happening? No major changes have been made to the system and I have seen it happen once before but I thought it was a freak occurrence then because I have heard zero complaints since then. Chris P.

2 9

local recipient table
by Ruben Safir 05 Jan '18

05 Jan '18

I have a custom archive system that I have used for decades and I lost the ability to send mail through the mailing list to its user account. Jan 05 01:13:13 2018 (3042) delivery to archive(a)xxx.com failed the code 550: 5.1.1 <archive(a)xxx.com>: Recipient address rejected: User unknown in local recipient table I am using postfix I have delivery when I use mutt to just send email to the account. I tried to add this to postfix main.cf but no change in behavior # local_recipient_maps settings are OK. unknown_local_recipient_reject_code = 550 local_recipient_maps = unix:passwd.byname $alias_maps <<== the user is sitting in /etc/passwd www2:/var/lib/mailman/logs # grep archive /etc/passwd archive:x:1001:100::/home/archive:/bin/bash dns record looks good www2:/var/lib/mailman/logs # dig mx xxx.com ; <<>> DiG 9.9.2 <<>> mx xxx.com ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 26171 ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 3, ADDITIONAL: 3 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ;; QUESTION SECTION: ;xxx.com. IN MX ;; ANSWER SECTION: xxx.com. 86400 IN MX 10 www2.xxx.com. ;; AUTHORITY SECTION: xxx.com. 86400 IN NS www2.xxx.com. xxx.com. 86400 IN NS ns1.linuxmafia.com. xxx.com. 86400 IN NS www3.xxx.com. ;; ADDITIONAL SECTION: www2.xxx.com. 86400 IN A 96.57.23.82 www3.xxx.com. 86400 IN A 96.57.23.83 ;; Query time: 12 msec ;; SERVER: 127.0.0.1#53(127.0.0.1) ;; WHEN: Fri Jan 5 09:13:42 2018 ;; MSG SIZE rcvd: 156 -- So many immigrant groups have swept through our town that Brooklyn, like Atlantis, reaches mythological proportions in the mind of the world - RI Safir 1998 http://www.mrbrklyn.com DRM is THEFT - We are the STAKEHOLDERS - RI Safir 2002 http://www.nylxs.com - Leadership Development in Free Software http://www2.mrbrklyn.com/resources - Unpublished Archive http://www.coinhangout.com - coins! http://www.brooklyn-living.com Being so tracked is for FARM ANIMALS and and extermination camps, but incompatible with living as a free human being. -RI Safir 2013 -- So many immigrant groups have swept through our town that Brooklyn, like Atlantis, reaches mythological proportions in the mind of the world - RI Safir 1998 http://www.mrbrklyn.com DRM is THEFT - We are the STAKEHOLDERS - RI Safir 2002 http://www.nylxs.com - Leadership Development in Free Software http://www2.mrbrklyn.com/resources - Unpublished Archive http://www.coinhangout.com - coins! http://www.brooklyn-living.com Being so tracked is for FARM ANIMALS and and extermination camps, but incompatible with living as a free human being. -RI Safir 2013

2 9