User receiving mail, but not subscribed

I suspect this stems from something inside this local corporation, but I'll ask the question:
I have a person contacting me to remove her work email from our subscription of our local email list, but her email is not subscribed. Usually when this happens, I have them forward a list message to me and I can discover which email it is being sent to.
Usually the messages sent are from "name of subscriber via"listname@domain.com. (She gets the digest which I don't so not sure that is different). But when she forwards me one of these digest messages, it is from: "Listname listname-bounces@domain.com on behalf of Listname-request@domain.com listname-request@domain.com"
And instead of the usual listname@domain.com unsubscribe,archives,info link at the bottom of the message, it has what is probably an internal security link by the IT system of https://linkprotect.cudasvc.com/url? https://linkprotect.cudasvc.com/url?a=http%3a%2f%2fnomekennelclub.com%2fmailman%2flistinfo%2fnome-announce_nomekennelclub.com&c=E,1,FW9RqlL4xDWSEBzC3uy3bkFn3LCkc1Ye0nH7WCcyKABtHwGpQ76BNMjDvFoM6OKrKsvMU7gqPgEpJ01St79i1zH7v79j9xtJnlHTZXHjITCX1a9JvEw,&typo=1... (with the actual link following - and redirects to our info page). This may not help, but include it to show they have some kind of system within the corporation.
I've asked her to run it by the IT department of her corporation, but thought I would ask here in case there is something I need to do instead. I thought that the "on behalf of listname-request@domain.com" was pretty unusual, or something I don't usually see anyway.
thanks, Jim

On 8/16/2021 10:30 AM, Jim Dory wrote:
I've asked her to run it by the IT department of her corporation, but thought I would ask here in case there is something I need to do instead. I thought that the "on behalf of listname-request@domain.com" was pretty unusual, or something I don't usually see anyway.
Sounds like a microsoft exchange/outlook thing- the "on behalf of" part. Could be they have an internal list that's subscribed to the MM list, or that the MM list member is a secretary/assistant of the final recipient.
If you can, the the full SMTP headers and look at the top/most-recent Received: lines; that'll show the handoff-
(the message I'm replying to) Received: from mail.python.org (mail.python.org [188.166.95.178]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by host.hosting.service (Postfix) with ESMTPS id A1FA6487B1 for cpz@tuunq.com; Mon, 16 Aug 2021 15:01:50 -0400 (EDT)
See who it's for in there.
Later,
z!

On 8/16/21 11:10 AM, Carl Zwanzig wrote:
On 8/16/2021 10:30 AM, Jim Dory wrote:
I've asked her to run it by the IT department of her corporation, but thought I would ask here in case there is something I need to do instead. I thought that the "on behalf of listname-request@domain.com" was pretty unusual, or something I don't usually see anyway.
Sounds like a microsoft exchange/outlook thing- the "on behalf of" part. Could be they have an internal list that's subscribed to the MM list, or that the MM list member is a secretary/assistant of the final recipient.
If you can, the the full SMTP headers and look at the top/most-recent Received: lines; that'll show the handoff-
(the message I'm replying to) Received: from mail.python.org (mail.python.org [188.166.95.178]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by host.hosting.service (Postfix) with ESMTPS id A1FA6487B1 for cpz@tuunq.com; Mon, 16 Aug 2021 15:01:50 -0400 (EDT)
See who it's for in there.
Thanks for the reply. I had her forward the digest message to me, and it appears she did because the subject line says: FWD: listname Digest vol. <etc> . She did add a bit of text to the forward explaining it was from her work email. So headers in the source view prior to her text just show received from her to me. After her little bit of text, it just has the From, Subject, To lines as one sees when receiving any message and then the digest text. So no headers to inspect. Perhaps if I could have her view the digest source and copy/paste it to me, that might be revealing. I'll see if she can do that. I'll have to google how to view source in MS Exchange.

On Aug 16, 2021, at 10:30 AM, Jim Dory <james@dorydesign.commailto:james@dorydesign.com> wrote:
I suspect this stems from something inside this local corporation, but I'll ask the question:
I have a person contacting me to remove her work email from our subscription of our local email list, but her email is not subscribed. Usually when this happens, I have them forward a list message to me and I can discover which email it is being sent to.
Usually the messages sent are from "name of subscriber via"listname@domain.commailto:listname@domain.com. (She gets the digest which I don't so not sure that is different). But when she forwards me one of these digest messages, it is from: "Listname <listname-bounces@domain.commailto:listname-bounces@domain.com> on behalf of Listname-request@domain.commailto:Listname-request@domain.com <listname-request@domain.commailto:listname-request@domain.com>"
And instead of the usual listname@domain.commailto:listname@domain.com unsubscribe,archives,info link at the bottom of the message, it has what is probably an internal security link by the IT system of https://linkprotect.cudasvc.com/url? https://linkprotect.cudasvc.com/url?a=http%3a%2f%2fnomekennelclub.com%2fmailman%2flistinfo%2fnome-announce_nomekennelclub.com&c=E,1,FW9RqlL4xDWSEBzC3uy3bkFn3LCkc1Ye0nH7WCcyKABtHwGpQ76BNMjDvFoM6OKrKsvMU7gqPgEpJ01St79i1zH7v79j9xtJnlHTZXHjITCX1a9JvEw,&typo=1... (with the actual link following - and redirects to our info page). This may not help, but include it to show they have some kind of system within the corporation.
When I’ve gotten these in the past it’s almost always because someone else’s email, or an old email address is getting forwarded to the recipient. I don’t think the 'on behalf of’ stuff is actually from an O365/Exchange system, but whatever that linkprotect link is.
(which link, btw, my campus network won’t let me load because it’s flagged as a malware source…so be careful)
-- Bruce Johnson University of Arizona College of Pharmacy Information Technology Group
Institutions do not have opinions, merely customs

On 8/16/21 11:34 AM, Bruce Johnson via Mailman-Users wrote:
When I’ve gotten these in the past it’s almost always because someone else’s email, or an old email address is getting forwarded to the recipient. I don’t think the 'on behalf of’ stuff is actually from an O365/Exchange system, but whatever that linkprotect link is.
(which link, btw, my campus network won’t let me load because it’s flagged as a malware source…so be careful)
I clicked on the link trusting my linux system would catch malware usually targeting windows, and it redirects to our MM list page. I'll make sure this person contacts her IT dept. to try and figure this out. Thanks for the reply! /jim

On 8/16/21 10:30 AM, Jim Dory wrote:
Usually the messages sent are from "name of subscriber via"listname@domain.com. (She gets the digest which I don't so not sure that is different). But when she forwards me one of these digest messages, it is from: "Listname listname-bounces@domain.com on behalf of Listname-request@domain.com listname-request@domain.com"
This is a Microsoft mail client thing. Digests are sent From: listname-request@domain.com with envelope sender listname-bounces@domain.com, and what you see is what the mail client chooses to show you in this case.
And instead of the usual listname@domain.com unsubscribe,archives,info link at the bottom of the message, it has ...
The digest footer can't contain any personalizations because digest can't be personalized, and is can't contain a link to the archived message because digests aren't archived (they contain messages which were archived, but the digest itself isn't)
One thing you can do is enable VERP. Assuming this in Mailman 2.1 since this list is for Mailman 2.1, you enable VERP by putting
VERP_DELIVERY_INTERVAL = 1
in mm_cfg.py. This will change the envelope sender (the bounces address) from
listname-bounces@domain.com>
to
listname-bounces+user=example.com@domain.com>
where replacing the '=' in user=example.com gives the recipient's address.
The other thing you can do is just look at all the digest members of the list. If there aren't too many, you may be able to figure out which it is. use Mailman's
bin/list_members -d -f listname
to get a list of digest members with their 'real name' if available.
Otherwise, as you note, if you can get her to send you the raw message headers, you may be able to get the address from the Received: headers.

On 8/16/21 8:11 PM, Mark Sapiro wrote:
One thing you can do is enable VERP. Assuming this in Mailman 2.1 since this list is for Mailman 2.1, you enable VERP by putting
VERP_DELIVERY_INTERVAL = 1
in mm_cfg.py. This will change the envelope sender (the bounces address) from
listname-bounces@domain.com>
to
listname-bounces+user=example.com@domain.com>
where replacing the '=' in user=example.com gives the recipient's address.
The other thing you can do is just look at all the digest members of the list. If there aren't too many, you may be able to figure out which it is. use Mailman's
bin/list_members -d -f listname
to get a list of digest members with their 'real name' if available.
Otherwise, as you note, if you can get her to send you the raw message headers, you may be able to get the address from the Received: headers.
Great Mark, will try that VERP trick. She is out of the office for the rest of the week so will have to wait and see.
There's over 1500 subscribers so probably best to search on her corporation's domain - that may return maybe around a couple dozen or so - rather than digest subscribers which are probably a ton.
thanks, Jim

Hello Jim Dory. On Mon, 16 Aug 2021 21:57:29 -0800, you wrote:
Great Mark, will try that VERP trick. She is out of the office for the rest of the week so will have to wait and see.
There's over 1500 subscribers so probably best to search on her corporation's domain - that may return maybe around a couple dozen or so - rather than digest subscribers which are probably a ton.
I am not too sure about this. Here we have some internet providers who use more than one domain for their email addresses. You can "freely change" the part after the @ sign, and the mails are still delivered.
The same may apply to corporations who do business under several names, or for companies that have been taken over by others.
Christian
Hilfe fuer Strassenkinder in Ghana: https://www.chance-for-children.org

I'd say export the digest subscriber list and then search within it for the domain, or even the username portion of her email address. My office has email addresses on several domains of which all direct to my inbox, but every email domain has the same username. The digest subscribers list is usually only a small percentage of all subscribers.
On Mon, Aug 16, 2021 at 10:59 PM Jim Dory james@dorydesign.com wrote:
On 8/16/21 8:11 PM, Mark Sapiro wrote:
One thing you can do is enable VERP. Assuming this in Mailman 2.1 since
this list is for Mailman 2.1, you enable VERP
by putting
VERP_DELIVERY_INTERVAL = 1
in mm_cfg.py. This will change the envelope sender (the bounces address)
from
listname-bounces@domain.com>
to
listname-bounces+user=example.com@domain.com>
where replacing the '=' in user=example.com gives the recipient's
address.
The other thing you can do is just look at all the digest members of the
list. If there aren't too many, you may be
able to figure out which it is. use Mailman's
bin/list_members -d -f listname
to get a list of digest members with their 'real name' if available.
Otherwise, as you note, if you can get her to send you the raw message
headers, you may be able to get the address
from the Received: headers.
Great Mark, will try that VERP trick. She is out of the office for the rest of the week so will have to wait and see.
There's over 1500 subscribers so probably best to search on her corporation's domain - that may return maybe around a couple dozen or so - rather than digest subscribers which are probably a ton.
thanks, Jim
Mailman-Users mailing list -- mailman-users@python.org To unsubscribe send an email to mailman-users-leave@python.org https://mail.python.org/mailman3/lists/mailman-users.python.org/ Mailman FAQ: http://wiki.list.org/x/AgA3 Security Policy: http://wiki.list.org/x/QIA9 Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/ https://mail.python.org/archives/list/mailman-users@python.org/
participants (6)
-
Bruce Johnson
-
Carl Zwanzig
-
Christian Buser
-
Chromatest J. Pantsmaker
-
Jim Dory
-
Mark Sapiro