Mailman 3 November 2021 - Mailman-Users

Charter occasionally bouncing mail
by Jayson Smith 30 Nov '21

30 Nov '21

Hi, One of my Mailman lists has a single member at Charter which has occasionally bounced mail over the last few days. When this happens, the reason given, when I look it up on their help page, indicates the message I sent goes against the security policies of my domain, and I should contact my domain administrator (that would be me). I have SPF and DKIM set up, and a quick check at dkimvalidator.com verifies they're both working. I assume this is one of these annoying situations where Charter is seeing what's clearly a transient DNS problem and treating it like a permanent failure? Also I assume there's nothing I can do about this? Is the problem likely to be at Charter's end or at my domain's nameservers' end? Thanks, Jayson

5 7

Sorting list names
by Scott High 16 Nov '21

16 Nov '21

Hi, new user, forgive me if old issue, but I've searched FAQ and wiki and can't find answer. Running Mailman 2.1.12, on the Virtualmin Mailman Mailing Lists UI, I'm simply trying to sort the list names alphabetically. Is this possible? I can't for the life of me find it if it is a UI option. Does it need to be sorted at the file system level or database level for the UI to reflect it, maybe? Thanks for any help!

3 2

web interface error after 2.1.36 update
by ddewey＠cyberthugs.com 16 Nov '21

16 Nov '21

Hello... just ran into an issue after what I thought was a successful routine update to mailman 2.1.36 (from .29? iirc) on Friday. Everything seemed fine after the update (following the config/make/make install) and I hadn't had occasion to log into the admin interface until today when I hit this (apparent) bug. Mail is being received and delivered just fine. The subscriber interface appears working. Simply trying to log into the Admindb user interface... entered my password and receive "Bug in Mailman version 2.1.36 We're sorry, we hit a bug!" Don't see any obvious permissions errors, nor does check_perms return anything. Below is the log output from Mailman error log. Nothing interesting in the httpd log. Thanks for any pointers! Nov 15 15:30:58 2021 admin(30830): @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ admin(30830): [----- Mailman Version: 2.1.36 -----] admin(30830): [----- Traceback ------] admin(30830): Traceback (most recent call last): admin(30830): File "/usr/local/mailman/scripts/driver", line 117, in run_main admin(30830): main() admin(30830): File "/usr/local/mailman/Mailman/Cgi/admindb.py", line 342, in main admin(30830): print doc.Format() admin(30830): File "/usr/local/mailman/Mailman/htmlformat.py", line 352, in Format admin(30830): output.append(Container.Format(self, indent)) admin(30830): File "/usr/local/mailman/Mailman/htmlformat.py", line 267, in Format admin(30830): output.append(HTMLFormatObject(item, indent)) admin(30830): File "/usr/local/mailman/Mailman/htmlformat.py", line 53, in HTMLFormatObject admin(30830): return item.Format(indent) admin(30830): File "/usr/local/mailman/Mailman/htmlformat.py", line 445, in Format admin(30830): % csrf_token(self.mlist, self.contexts, self.user) admin(30830): File "/usr/local/mailman/Mailman/CSRFcheck.py", line 53, in csrf_token admin(30830): mac = sha_new(secret + issued).hexdigest() admin(30830): TypeError: unsupported operand type(s) for +: 'NoneType' and 'str' admin(30830): [----- Python Information -----] admin(30830): sys.version = 2.7.5 (default, Aug 13 2020, 02:51:10) [GCC 4.8.5 20150623 (Red Hat 4.8.5-39)] admin(30830): sys.executable = /usr/bin/python admin(30830): sys.prefix = /usr admin(30830): sys.exec_prefix = /usr admin(30830): sys.path = ['/usr/local/mailman/pythonlib', '/usr/local/mailman', '/usr/local/mailman/scripts', '/usr/lib64/python27.zip', '/usr/lib64/python2.7', '/usr/lib64/python2.7/plat-linux2', '/usr/lib64/python2.7/lib-tk', '/usr/lib64/python2.7/lib-old', '/usr/lib64/python2.7/lib-dynload', '/usr/lib/python2.7/site-packages', '/usr/lib/python2.7/dist-packages', '/usr/lib64/python2.7/site-packages', '/usr/lib64/python2.7/site-packages/gtk-2.0', '/usr/lib64/python2.7/site-packages', '/usr/lib/python2.7/site-packages', '/usr/lib/site-python'] admin(30830): sys.platform = linux2 admin(30830): [----- Environment Variables -----] admin(30830): CONTENT_LENGTH: 41 admin(30830): CONTENT_TYPE: application/x-www-form-urlencoded admin(30830): SERVER_NAME: list.listdomain.com admin(30830): REMOTE_ADDR: 67.253.227.163 admin(30830): PYTHONPATH: /usr/local/mailman admin(30830): REMOTE_PORT: 3777 admin(30830): REQUEST_SCHEME: http admin(30830): SCRIPT_NAME: /mailman/admindb admin(30830): REQUEST_METHOD: POST admin(30830): HTTP_HOST: list.list_domain.com admin(30830): PATH_INFO: /list_name admin(30830): SERVER_PORT: 80 admin(30830): SERVER_PROTOCOL: HTTP/1.1 admin(30830): QUERY_STRING: admin(30830): REQUEST_URI: /mailman/admindb/list_name admin(30830): HTTP_COOKIE: admin(30830): DOCUMENT_ROOT: /var/www/html/list.list_domain.com

2 1

Messages from non-members
by Christian Buser 16 Nov '21

16 Nov '21

Mailman 2.1.35 on cPanel version 98.0.12 The list is set to only accept messages from subscribers Action to take for postings from non-members for which no explicit action is defined (Details for generic_nonmember_action) is set to "Hold" I receive a notification when someone tries to post using a non-subscriber address. The non-member receives this message (message #1): Your mail to 'Infoline' with the subject Test non-member Is being held until the list moderator can review it for approval. The reason it is being held: Post by non-member to a members-only list Either the message will get posted to the list, or you will receive notification of the moderator's decision. If you would like to cancel this posting, please visit the following URL: http://xxxxx.ch/mailman/confirm/infoline_mus.ch/d1c110e1babc8c9b34cd40a17c0… I (as the owner of the mailing list receive the notification (message #2) stating: As list administrator, your authorization is requested for the following mailing list posting: List: Infoline(a)xxxxx.ch From: macchristian(a)xxxxx.ch Subject: Test non-member Reason: Post by non-member to a members-only list At your convenience, visit: http://mus.ch/mailman/admindb/infoline_mus.ch to approve or deny the request. One attachment to the notification is a message (message #3) with the subject "confirm d1c110e1babc8c9b34cd40a17c0ab8e0770e8617" which tells me: If you reply to this message, keeping the Subject: header intact, Mailman will discard the held message. Do this if the message is spam. If you reply to this message and include an Approved: header with the list password in it, the message will be approved for posting to the list. The Approved: header can also appear in the first line of the body of the reply. Okay, I reply to the message. In earlier times, I got a response that the message was sent into the Nirvana - or that the user had deleted it himself using the link he received in message #1 However something seems to be broken now. - The held message is no longer deleted when I reply to the "confirmation". - I no longer receive a notification that the message was no longer on hold. - The message remains in hold, even after the "confirmation" was replied to. Yes, I can manually "reject" or "discard" the message. My provider says he has no knowledge about how Mailman on cPanel works, and I should ask in Mailman-related forums / lists... Any idea how it can be fixed? Thank you, Christian

2 1

Usubscribe not recognized (was: Messages from non-members)
by Christian Buser 16 Nov '21

16 Nov '21

Hi Adi There are several possibilities for this: 1) You use a mail forwarding from address A to address B and try to unsubscribe for address B instead of address A 2) Your mail server has several domains which are in fact the same - like gmail.com / googlemail.com, or me.com/mac.com, etc. 3) Your are subscribed for myname(a)mail.domain.com and want to unsubscribe from myname(a)domain.com and possibly more. And: if you reply to one of the messages in this list, the reply goes to the author of the message (me, in your case) and not to the list - unless you use the special command (e.g. in Thunderbird) "Reply to List...". I think this message also only went to me, not to the list... You may want to analyze the mail headers of a list message to find out what happened. Look for these header lines: X-Apparently-To: Received: (look whether the desination address changed there between one header and the next) - received lines are read from bottom to top for chroniological order. Christian Adi S schrieb am 16.11.21 um 14:37: > And I am not a member but still receiving these messages > I’ve unsubscribed already but still getting message. > When I try to login to the subscription management, it says there is ’no user found with that email' >

1 0

Mailman 2.1 security release
by Mark Sapiro 13 Nov '21

13 Nov '21

I am pleased to announce the release of Mailman 2.1.36. This is a security release. It fixes https://bugs.launchpad.net/mailman/+bug/1949401 CVE-2021-43331 and https://bugs.launchpad.net/mailman/+bug/1949403 CVE-2021-43332. The former of these could allow an XSS attack against the user options page and the latter could allow a list moderator to discover the list admin password via a brute force attack against the admindb page CSRF token. For those who just want a patch for the security issues, patches are atteched. As noted Mailman 2.1.30 was the last feature release of the Mailman 2.1 branch from the GNU Mailman project. There has been some discussion as to what this means. It means there will be no more releases from the GNU Mailman project containing any new features. There may be future patch releases to address the following: i18n updates. security issues. bugs affecting operation for which no satisfactory workaround exists. Mailman 2.1.36 is the sixth such patch release. Mailman is free software for managing email mailing lists and e-newsletters. Mailman is used for all the python.org and SourceForge.net mailing lists, as well as at hundreds of other sites. For more information, please see our web site at one of: http://www.list.org https://www.gnu.org/software/mailman http://mailman.sourceforge.net/ Mailman 2.1.36 can be downloaded from https://launchpad.net/mailman/2.1/ https://ftp.gnu.org/gnu/mailman/ https://sourceforge.net/projects/mailman/ -- Mark Sapiro <mark(a)msapiro.net> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan

1 2

messages being labeled as spam in the subject line?
by Adam Morris 07 Nov '21

07 Nov '21

I have seen on some mailman lists where messages sent to a list when received by others have the word spam in the subject. Is this a mailman setting that can be changed or is it a setting either with the mailman hosting provider? Thanks in advance. -- Adam Morris Mobile: 0414 431105 Email, iMessage & FaceTime adam(a)damorris.com

4 3

customized From handling?
by Rich Morin 07 Nov '21

07 Nov '21

I'm a member of the "Linux for blind general discussion" list (blinux-list(a)redhat.com), which uses Mailman. Some time ago, the list was having problems with folks spamming members, using addresses harvested from the "From" lines of messages. So, the list admins opted to change the "From" line to simply say: > Linux for blind general discussion <blinux-list(a)redhat.com> Although this solved the immediate problem, it also resulted in some confusion, because all postings are now anonymous by default. Is there a configuration option that would (say) result in a From line that only reveals the poster's name, but not their email address? -r

5 12

Mailman 2.1 security release
by Mark Sapiro 07 Nov '21

07 Nov '21

Two new security issues have been reported in Mailman 2.1. These have been given the IDs CVE-2021-43331 and CVE-2021-43332. I plan to release 2.1.36 with full details this Friday, November 12. At that time the vulnerabilities will be made public and patches will also be made available. -- Mark Sapiro <mark(a)msapiro.net> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan

1 0

Mailman in two servers
by Ivan Tejeiro Izquierdo 01 Nov '21

01 Nov '21

Hi, Is it possible to run mailman on 2 servers at the same time? What directories should be shared between both servers and how to configure the mm_cfg.py? Thanks.

2 1