Mailman 3 September 2023 - Mailman-Users

DOS vulnerability, gmail and yahoo
by Karl Semich 19 Sep '23

19 Sep '23

Hi mailman-users, So you know, it looks like there is a vulnerability with mailman 2 where a third party can very aggressively spoof password reminder, unsubscription, or other requests using the web interface, queueing tens of thousands of unsolicited messages to any given subscriber. Worse, if this is done to a user of gmail or yahoo, the receiving hosts may block the mailserver’s ip address generally, preventing the delivery of legitimate list content to other subscribers using the same provider. There should probably be a rate limit on the web interface, although I understand mailman 2 is no longer developed.

1 0

Question regarding message-ids
by Ralf Hildebrandt 14 Sep '23

14 Sep '23

We have a mm2 installation. A user is regular memeber on two lists: * A mail goes to both lists. * That mail is distributed via both lists. * The mail is delivered twice (to an exchange server), in two SMTP sessions, to the same user adress. I get two positive delivery confirmations. * since the message-id is identical, exchange is performing duplicate message elimination Since the mails are in fact NOT identical (different Subject -- each lists adds their own [foo] and [bar] prefix), I'd very much prefer a new message-id for the distributed mails. I'm sure I can hack something up in Postfix, but is there an easy way (tm)? -- Ralf Hildebrandt Charité - Universitätsmedizin Berlin Geschäftsbereich IT | Abteilung Netz | Netzwerk-Administration Invalidenstraße 120/121 | D-10115 Berlin Tel. +49 30 450 570 155 ralf.hildebrandt(a)charite.de https://www.charite.de

4 4

Problem with outlook.com
by pau.baiges＠csuc.cat 12 Sep '23

12 Sep '23

We have a problem with some Outlook users who on the list return this error: Error: ‎550 5.6.0 CAT.InvalidContent.Exception: ExchangeDataException, Decoding of header Subject failed+ADs- raw value: +AFs-Ens+AF0- +AD0-?eucgb2312+AF8-cn?q?An+AD0-A8+AD0-A4lisis+AF8-i+AF8-adequaci+AD0-A8+AD0-AE?+AD0-; cannot handle content of message with InternalId 3332894626847, InternetMessageId There are Outlook users who, with the same subject, send the email correctly and everyone receives it, but there are others who get this error.

2 1

Identifying a subscriber from a masked FBL report
by Russell Clemings 11 Sep '23

11 Sep '23

I'm trying to track down (and unsubscribe) a list member who keeps reporting list posts as spam. I have %(user_address)s and %(user_name)s in msg_footer, but the feedback loop reports are masking the local part of the user's address. The user_name appears to be empty. I tried both %(user_optionsurl)s and %(user_delivered_to)s but they're masked too. The FBL seems to be masking anything that looks like an email address and even some things that don't. Suggestions? I do have shell access but can't see where I could make any appropriate changes (aside from which my Python skills are minimal or less). -- =============================================== Russell Clemings <russell(a)clemings.com> ===============================================

2 2

Mailman 3 moderator login page as mailman 2.1 one
by aferreiro＠ffyb.uba.ar 10 Sep '23

10 Sep '23

Hi, we have recently migrated from mailman 2.1 to mailman 3. In mailman 2.1 moderators received an email with a web link asking for list´s moderator password. I don´t find and i don´t know if this feature is available on mailman 3. If this option isn´t available, How can moderators access a login page to moderate their lists ? Thanks.

4 3

Footers as Attachments
by David Andrews 07 Sep '23

07 Sep '23

Some of my users have complained about getting an attachment with each message. The attachment seems to be the footer fort the list. It also looks like this may be an Outlook thing. Is this true? Is there anything to be done to change it. I would guess that changing to text-only messages would do it, but that isn't necessarily a popular option either. Dave

2 1

List emergency moderation
by Johnson, Bruce E - (bjohnson) 04 Sep '23

04 Sep '23

We have a number of mainly announcement-only lists that I’ve set the ’set everyones moderation bit including members not visible’ to on. I need to un-moderate a few members, and I do that via the command line in a script withlist -r set_mod <listname> -u <email address> But they are not being un-moderated. Is it because of the emergency moderation flag? -- Bruce Johnson University of Arizona College of Pharmacy Information Technology Group Institutions do not have opinions, merely customs

2 1