Mailman 3 December 2023 - Mailman-Users

spamming
by Jim Dory 09 Aug '24

09 Aug '24

I've got a new problem with my mailing list. I run a local announcements/trade list that should be of no interest to non-locals. I started seeing warnings from Yahoo about users marking messages as spam.. (I'm subscribed to Yahoo's Antispam Feedback. I never got other feedback loops from others - like Microsoft - to work). The messages that were being marked as spam by users were the confirmation emails sent by mailman to confirm a signup. To avoid having Yahoo shut down the list as spam (for its subscribers), I set the subscription to be approved by admin, so I could review who was trying to sign up. More and more now I'm seeing what appears to be spammers trying to subscribe, but I can't be sure. I'm seeing emails like: hirofeet0916(a)yahoo.co.jp (doesn't seem local) blvckpvlm(a)gmail.com (not many use user names such as that) fsafwcasgsadf2(a)gwqc.com (obviously not real - couldn't find domain with minimal searching) Plus some that could be local but how would I know. I could take off the "approval by admin" for subscription and just deal with anyone that is a problem afterward, but I do worry that they may be harvesting emails from subscribers, which are available in the reply-to headers. Don't know if there's anything I can do. Anyone else dealing with this? thanks. Jim

8 31

Editing Mailman's text files
by Pete Bell 07 May '24

07 May '24

Hi. I'm a new member of this group but have been running an email list with Mailman for a long time. I am now setting a list up again and want to give a "look and feel" to the list which has more branding of my user group as a whole, and less of a Mailman-feel. I seem to remember that besides editing the public HTML pages, it is possible to edit the text files which Mailman automatically sends out for certain needs (such as 'approve.txt', 'adminsubscribeack.txt', 'invite.txt', and so on). A. Is this still the case? B. If so, where can I find them? (in case they've changed from the ones I have from long ago). C. Where do they need putting, so that Mailman can use them again? It's important that I should tell you that Mailman on my webhosts servers is a "server-wide" installation, and I don't get to edit anything which other clients to their servers need. This would be only for my own use, and as such I need to know where these files go in my own webspace, and how to get Mailman to use them instead of the default ones. I should also say that I have done this before, so unless the facility to do this has been ditched in recent years, I *should* still be able to do it ! Does Mailman perhaps look for these files somewhere in my webspace (which I have to give a specific name), and if it doesn't find them it goes on to find its default versions of these files? Thanks in advance for your help. Pete Bell, UK

3 3

Running two list with same email prefix
by Andrea Cappelli 26 Feb '24

26 Feb '24

Hi all, I'm running a mail server with Debian Lenny, MTA is Postfix and i will use postfix-to-mailma.py script to run list I would set up Mailman for running mailing list with same email prefix on different domains, obvious with different list names For example we have ml.domain1.com and ml.domain2.net, i would like to have LISTADDRESS LISTNAME tech(a)ml.domain1.com tech-ml.domain1.com tech(a)ml.domain.2.net tech-ml.domain2.net In this way i can have the same address on differente domains and Mailman (my version is 2.1.11) can distinguish between lists because the list name is different. The list name will be also used to access web interface, so we have http://ml.domain1.com/mailman/admin/tech-ml.domain1.com http://ml.domain2.net/mailman/admin/tech-ml.domain2.net Is possible to accomplish this task? Any idea?

4 5

Issues with a DMARC record leading to message being shunted
by Ralf Hildebrandt 23 Dec '23

23 Dec '23

Hi! Recently a mail was not being distributed via our MM3 instance; I searched the logs and found: Dec 22 04:54:27 2023 (24) ACCEPT: <1d431542-b386-467b-8bf2-305f19ee7eb4(a)somenet.org> Dec 22 04:54:28 2023 (28) Uncaught runner exception: list index out of range Dec 22 04:54:28 2023 (28) Traceback (most recent call last): File "/usr/lib/python3.10/site-packages/mailman/core/runner.py", line 179, in _one_iteration self._process_one_file(msg, msgdata) File "/usr/lib/python3.10/site-packages/mailman/core/runner.py", line 272, in _process_one_file keepqueued = self._dispose(mlist, msg, msgdata) File "/usr/lib/python3.10/site-packages/mailman/runners/pipeline.py", line 37, in _dispose process(mlist, msg, msgdata, pipeline) File "/usr/lib/python3.10/site-packages/mailman/core/pipelines.py", line 53, in process handler.process(mlist, msg, msgdata) File "/usr/lib/python3.10/site-packages/mailman/handlers/validate_authenticity.py", line 125, in process authenticate(msg, msgdata) File "/usr/lib/python3.10/site-packages/mailman/utilities/retry.py", line 44, in f_retry return f(*args, **kwargs) File "/usr/lib/python3.10/site-packages/mailman/handlers/validate_authenticity.py", line 93, in authenticate auth_result = authenticate_message( File "/usr/lib/python3.10/site-packages/authheaders/__init__.py", line 395, in authenticate_message dmarc_result = check_dmarc(msg, spf_result, dkim_result, dnsfunc=dnsfunc, psddmarc=psddmarc) File "/usr/lib/python3.10/site-packages/authheaders/__init__.py", line 343, in check_dmarc result, result_comment, from_domain, policy = dmarc_per_from(from_domain, spf_result, dkim_result, dnsfunc, psddmarc) File "/usr/lib/python3.10/site-packages/authheaders/__init__.py", line 90, in dmarc_per_from record, orgdomain = receiver_record(from_domain) File "/usr/lib/python3.10/site-packages/authheaders/dmarc_lookup.py", line 117, in receiver_record retval = lookup_receiver_record(hostSansDmarc, dnsfunc) File "/usr/lib/python3.10/site-packages/authheaders/dmarc_lookup.py", line 92, in lookup_receiver_record tags = answer_to_dict(str(result)) File "/usr/lib/python3.10/site-packages/authheaders/dmarc_lookup.py", line 42, in answer_to_dict retval = {t[0].strip().lower(): t[1].strip().lower() for t in rawTags} File "/usr/lib/python3.10/site-packages/authheaders/dmarc_lookup.py", line 42, in <dictcomp> retval = {t[0].strip().lower(): t[1].strip().lower() for t in rawTags} IndexError: list index out of range Dec 22 04:54:28 2023 (28) SHUNTING: 1703220868.1418982+b27f5db154375fcd2c418d467172e4aad0d3d57a So the message has been shunted, due to this error. Soemthing wit DMARC and tags. So I checked the DMARC record: The DMARC record for somenet.org is "v=DMARC1;p=none;pct=100;rua=mailto:postmaster@somenet.org;mailto:postmaster@somenet.org;ri=3600;fo=1;" which is syntactically incorrect. The extra ";mailto:postmaster@somenet.org" is wrong, I guess the tag "ruf=" is missing here! It should probably read "v=DMARC1;p=none;pct=100;rua=mailto:postmaster@somenet.org;ruf=mailto:postmaster@somenet.org;ri=3600;fo=1;" So, should mm3 somehow "catch" this error somehow? I wonder how a syntactically incorrect DMARC record should be handled at all (ignore? best effort?) -- Ralf Hildebrandt Charité - Universitätsmedizin Berlin Geschäftsbereich IT | Abteilung Netz | Netzwerk-Administration Invalidenstraße 120/121 | D-10115 Berlin Tel. +49 30 450 570 155 ralf.hildebrandt(a)charite.de https://www.charite.de

3 3

Assistance Needed with Mailman Subscription Issue (Mailman 2.1)
by Thomas F. Holz 20 Dec '23

20 Dec '23

Hello, First of all: Thanks for the insane amount of things I've learned just by reading along in the list here! We are currently using Mailman 2.1.23 on a FreeBSD server with Sendmail, managing approximately 24 mailing lists. These lists are strictly for internal use, not publicly accessible, with membership ranging from 20 to 300. Quite cute. To prevent self-subscription or any subscription requests via Mailman, we've undertaken the following steps: Set the "advertising flag" of all lists to 'no'. Removed most of the email aliases, retaining only: mlist.sample: "|/usr/local/mailman/mail/mailman post mlist.sample" mlist.sample-admin: "|/usr/local/mailman/mail/mailman admin mlist.sample" mlist.sample-bounces: "|/usr/local/mailman/mail/mailman bounces mlist.sample" (And yes, we have also executed newaliases post these changes. ;-) ) Furthermore, we've removed the subscription section from the "listinfo" page by modifying the listinfo.html templates for all languages. This led to a noticeable decrease in subscription entries. However, we are still receiving some subscription requests, which is perplexing. I can find the addresses in question in the "vette" log file, but nowhere else: ... vette:Dec 20 06:02:14 2023 (96837) mlist.sample: held subscription request from taryxxxx(a)icloud.com vette:Dec 20 06:06:27 2023 (5909) other.mlist: held subscription request from taryxxxx(a)icloud.com ... These requests are puzzling as they seem to bypass our restrictions. I have searched through all server logs (I could imagine) and found no further mention of the addresses in question, nor any clues in the maillog nor corresponding entries in the httpd-access.log (for mailman pages). Could anyone provide insights or suggestions on where to look or what we missed? Thank you for your assistance. Thomas -- ------------------------------------------------------------------------ Be part of the change you want to see in this world.

3 3

Re: spamming
by Richard 16 Dec '23

16 Dec '23

Jim, You're getting solid advice - wish I had such insights (and wish such tools existed) way back when I got started running my own servers a bit over 25 years ago... A SMALL bit more: On Sat, 16 Dec 2023, Dmitri Maziuk wrote: ...snip... > I don't think centos existed back iptables didn't. ;) It didn't exist before iptables. > Firewalld is an attempt to add a "windows defender"-type UI to iptables, > it's a wrong tool for this job. FWIW, when firewalld first came out it was claimed it was going to replace IP Tables. But it was abysmal and it's still clunky with inconsistent command syntax that's absolutely confusing to a native English speaker and you just have to memorize the quirks or look up the syntax. ... However it's telling that I STILL have iptables on my systems AND firewalld - as default installation packages! ...I think the firewalld people gave up trying to replace iptables. But I'd never before heard that it was an attempt to add a "windows defender" UI to Linux... Hmmm... More substantively, I use Fail2Ban and have long done. I also use a set of firewall systemss (that we here call "servers") that are separate from my servers that run mailing lists and our mail server (Postfix). There are quite a few advantages to this. I hope they're fairly obvious. I agree that dropping the packets is the best bet. It's simple and painless. Beyond that, consider the following: Another simple technique is to install and configure Spam Assassin and have it catch your inbound messages before they go to any mailing list. You can have a listing of questionable accounts - because they're new - and it can bump their potential spam score because they're on that list. How to configure this is a little beyond the time I have available right now but it's not that hard, Spam Assassin has a list like this one, the docs are good and the people friendly. And lets not forget list moderation for newbies, too, though that takes human time to deal with it, so maybe you're not liking that option. I have concluded that captcha type systems are no longer viable as they once were, based both on my experience as a user of these where they can be infuriating (for example, I was once tasked with picking out the motorcycles and when it showed me mopeds, I didn't pick those and the experience was infuriating because there were genuine motorcycles in the images, too. So, that was an example of mistaken labeling, and who knows how Captcha got that one wrong (perhaps in India or southeast Asia they call mopeds motorcycles?! IDK. Not anywhere I've lived!). But anyway, I've also had issues as someone who has used Captcha on my systems (I no longer do). And it's only going to get worse. Let us recall that there's a built-in propaganda - "good advertising" - built in to the very name "Artificial intelligence." It gets you thinking there's a genuine intelligence there even if it is artificial. It's pertinent to point out that, well, that's wrong; there's no genuine intelligence present! "Smart" as those bots are, there's no genuine intelligence at work - not yet anyway - and they can be trained but don't learn; unless someone trains an AI engine specificaly for this task, it's unlikely we'll see really good bots for this purpose. So, a simple way to deal with these attacks is to provide a simple problem a human can, first, recognize is something they need to address to be successful, and secondly do instantly. Make it something that a very simple web-served script can automate for you. For example, it could post a simple math problem that's given in words and require a correct answer. Perhaps you state, "five times three is the simple key, just tell it to me!" A human will get it, a bot won't. (I have seen quite a handful of variants of this including a message made up of a few images, each of which has a part of it - whatever works!) If they're going to spend personal time cracking your system, at least it's costing them something one would presume is valuable to them - their personal time. One final thought; put em on a fake list first! Observe posting behavior! Analyze, let pass through the non-spam. Think of it as ... uh... pergatory I guess. Quarantine. You can perhaps automate then moving them to a real list. ...If I had your problem I'd be thinking of things like this. Best of luck, Richard.

2 1

Re: spamming
by Dmitri Maziuk 16 Dec '23

16 Dec '23

On 12/16/23 11:46, Richard wrote: > > On Sat, 16 Dec 2023, Dmitri Maziuk wrote: > >> Firewalld is an attempt to add a "windows defender"-type UI to >> iptables, it's a wrong tool for this job. > > ... But I'd never > before heard that it was an attempt to add a "windows defender" UI to > Linux... Hmmm... > Well... that was sloppy wording on my part. ObThreadDrift: the kernel packet filtering framework is netfilter. The "canonical" UI tools are iptables in 2.4 series kernels and nftables in 3.x series. RedHat's firewalld and ubuntu's ufw both try to provide a "more user-friendlier" front-ends to xxtables. AFAIK ufw only tries to provide the simple-stupid rule syntax. Firewalld, OTOH, hooks into D-Bus, potentially allowing applications manipulate firewall rules automagically. I.e. a deamon could signal that it bind()/listen()'s and firewalld will pick that from D-Bus and respond by adding a corresp. accept rule to netfilter. That is basically how windows firewall does it. Brought to you by No Nits Left Unpicked(tm) Dima

2 1

List migration Mailman 2.1 to a new server - cannot clarify how to import user subscription attributes settings
by daniel.botting＠codethink.co.uk 12 Dec '23

12 Dec '23

Hi all, I am currently in the process of testing the migration of our Mailman2.1 instance to a new server, I've migrated the below for a list: - list configuraiton - archives - user membership, Mass Subscription page via a file upload (member address) I've used the below scripts to export/view this information: - https://www.msapiro.net/scripts/mailman-subscribers.py - https://www.msapiro.net/scripts/user_options However after much reading docs/web searches I've not been able to confirm how to import for each user their subscription attributes settings on the Membership List page: - mod - hide - nomail - ack - not metoo - nodupes - digest - plain Any guidance would be appreciated. Many thanks Daniel

3 4

Unable to post messages to a Mailman 2 List
by Francis Jayakanth 06 Dec '23

06 Dec '23

Hi, I'm administering and moderating a professional list called LIS-Forum with close to 5k members. I'm still on Mailman 2.1.26 on Ubuntu 18.04 with Postfix as an MTA. Till recently, the list was running smoothly. On average, there will be 2/3 postings every day. However, postings have not been received in the last two days. When I explored further, I noticed that postings made to the list are not reaching the list, nor are the members posting messages getting acknowledgements. I'm using SMTP Office 365 as the relay host. Generic emails sent from the Mailman server are getting distributed. So, there aren't any issues with incoming or outgoing emails. Mailman as service is up and running, and its service status is as follows: #service mailman status â mailman.service - Mailman Master Queue Runner Loaded: loaded (/lib/systemd/system/mailman.service; enabled; vendor preset: enabled) Active: active (running) since Thu 2023-11-16 14:11:31 IST; 30min ago Process: 2586 ExecStop=/usr/lib/mailman/bin/mailmanctl stop (code=exited, status=0/SUCCESS) Process: 2616 ExecStart=/usr/lib/mailman/bin/mailmanctl -s start (code=exited, status=0/SUCCESS) Main PID: 2617 (mailmanctl) Tasks: 9 (limit: 4915) CGroup: /system.slice/mailman.service ââ2617 /usr/bin/python /usr/lib/mailman/bin/mailmanctl -s start ââ2619 /usr/bin/python /var/lib/mailman/bin/qrunner --runner=ArchRunner:0:1 -s ââ2620 /usr/bin/python /var/lib/mailman/bin/qrunner --runner=BounceRunner:0:1 -s ââ2621 /usr/bin/python /var/lib/mailman/bin/qrunner --runner=CommandRunner:0:1 -s ââ2622 /usr/bin/python /var/lib/mailman/bin/qrunner --runner=IncomingRunner:0:1 -s ââ2623 /usr/bin/python /var/lib/mailman/bin/qrunner --runner=NewsRunner:0:1 -s ââ2624 /usr/bin/python /var/lib/mailman/bin/qrunner --runner=OutgoingRunner:0:1 -s ââ2625 /usr/bin/python /var/lib/mailman/bin/qrunner --runner=VirginRunner:0:1 -s ââ2626 /usr/bin/python /var/lib/mailman/bin/qrunner --runner=RetryRunner:0:1 -s Nov 16 14:11:31 xxx.xxx.xxx.xx systemd[1]: Starting Mailman Master Queue Runner... Nov 16 14:11:31 xxx.xxx.xxx.xx mailmanctl[2616]: Starting Mailman's master qrunner. Nov 16 14:11:31 xxx.xxx.xxx.xx systemd[1]: mailman.service: Can't open PID file /var/run/mailman/mailman.pid (yet?) after start: No such file or directory Nov 16 14:11:31 ncsi.iisc.ernet.in systemd[1]: Started Mailman Master Queue Runner. I looked into the log files but found nothing useful to resolve the issue. Can someone please help me to resolve the issue? Thanks, and regards, Francis

4 17

archive
by Laack, Andrea P. 05 Dec '23

05 Dec '23

I am attempting to read in majordomo archives into mailman 2 using /bin/arch. We are currently running a nightly archive which nightly moves list-archive to a mmmdd file. Now I need to put these into one file to run /bin/arch in mailman to read them all in. My question is, is it necessary to put the emails in date order in the list-archive file for mailman arch to read in, or will the arch script sort out the dates? Andrea Andrea Laack Research & Tech Innov Svcs Mayo Clinic 507-538-3831 Laack.Andrea(a)mayo.edu

2 1