Google Message Security (or similar) with Mailman

Hi,
I saw some messages at the beginning of the year on this topic, but not sure if they ever got addressed. I am looking at going with an email filtering service to protect Mailman traffic, as I am getting a lot of spam addressed to the request addresses which cause backscatter and NDRs bouncing. My initial concern is regarding quarrentining of list traffic and how this is handled at the Postini end.
Any help greatfully received as always. Thanks, Andrew.

How big are your list.
We have 3 list about 100-150 members each and use Canit by penguin software.
We just whitelist each members email address so it is never trapped as spam.
Larry
3075 Charlevoix Dr. S.E. Grand Rapids, MI 49546 616 458 9333 Voice 616 588 6064 Fax
-----Original Message----- From: Mailman-Users [mailto:mailman-users-bounces+larryh=havard.com@python.org] On Behalf Of Andrew Hodgson Sent: Friday, December 07, 2012 2:04 PM To: mailman-users@python.org Subject: [Mailman-Users] Google Message Security (or similar) with Mailman
Hi,
I saw some messages at the beginning of the year on this topic, but not sure if they ever got addressed. I am looking at going with an email filtering service to protect Mailman traffic, as I am getting a lot of spam addressed to the request addresses which cause backscatter and NDRs bouncing. My initial concern is regarding quarrentining of list traffic and how this is handled at the Postini end.
Any help greatfully received as always. Thanks, Andrew.
Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://wiki.list.org/x/AgA3 Security Policy: http://wiki.list.org/x/QIA9 Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/larryh%40havard.com
-- BEGIN-ANTISPAM-VOTING-LINKS
Teach CanIt if this mail (ID 03IwHy68r) is spam: Spam: http://www.espam.us/canit/b.php?i=03IwHy68r&m=c5b9b9860e57&c=s Not spam: http://www.espam.us/canit/b.php?i=03IwHy68r&m=c5b9b9860e57&c=n Forget vote: http://www.espam.us/canit/b.php?i=03IwHy68r&m=c5b9b9860e57&c=f
END-ANTISPAM-VOTING-LINKS

We have been using GMS since we migrated user accounts to Gmail. Our relationship between Postini and Mailman is kind of ugly due to that migration.
Basically, we set up a Postini org for the Mailman lists which receives all external mail headed for the lists subdomain. Virus infected messages and messages for other than the list proper are refused. Internal mail to lists does not go through Postini, so all the list aliases can be addressed internally. Clean messages are delivered to Mailman. Messages that are quarantined appear in a nightly quarantine notification message sent to the list owner(s) from our internal postmaster address, which is an entry in discard_these_nonmembers in all lists.
Our list owners have been instructed to leave that entry alone. Auto discards are forwarded to the list owner instead of the list, with the cryptic subject "Auto-discard notification", which we did not discover a means of modifying.
List owners have been instructed not to release quarantined messages to the list unless they are false positives. List owners can release messages to the list using either links in the daily notification or by logging in to the Postini Message Center as the list user (which requires them to maintain yet another set of account credentials).
Luckily the number of list messages that get quarantined is relatively low, as this process is difficult to explain and confusing to recognize when a notification is received. We do not like it, but could not come up with a better solution given our infrastructure and the time available during account migration.
I have been instructed to migrate all mailman lists to Google Groups, and all new lists are being set up as Groups. This will obviously relieve us of the ugly work-around. We do not yet have enough experience with Groups to learn what "gotchas" lie in wait for us there. I would be very interested to hear from anyone who has been through that migration.
Kirke Johnson Internet: kjohnson@pcc.edu Email Administrator, TSS , Sylvania Campus Portland Community College, Portland, OR, USA (971) 722-4368
On Fri, Dec 7, 2012 at 11:03 AM, Andrew Hodgson <andrew@hodgsonfamily.org> wrote:

On 2012-12-07 5:52 PM, Kirke Johnson <kjohnson@pcc.edu> wrote:
Fyi... we have been using postini (hate it, lots of false positives, and lots of obvious spam slipping through), and we were told months ago by our reseller that Google is discontinuing postini service.
Charles

How big are your list.
We have 3 list about 100-150 members each and use Canit by penguin software.
We just whitelist each members email address so it is never trapped as spam.
Larry
3075 Charlevoix Dr. S.E. Grand Rapids, MI 49546 616 458 9333 Voice 616 588 6064 Fax
-----Original Message----- From: Mailman-Users [mailto:mailman-users-bounces+larryh=havard.com@python.org] On Behalf Of Andrew Hodgson Sent: Friday, December 07, 2012 2:04 PM To: mailman-users@python.org Subject: [Mailman-Users] Google Message Security (or similar) with Mailman
Hi,
I saw some messages at the beginning of the year on this topic, but not sure if they ever got addressed. I am looking at going with an email filtering service to protect Mailman traffic, as I am getting a lot of spam addressed to the request addresses which cause backscatter and NDRs bouncing. My initial concern is regarding quarrentining of list traffic and how this is handled at the Postini end.
Any help greatfully received as always. Thanks, Andrew.
Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://wiki.list.org/x/AgA3 Security Policy: http://wiki.list.org/x/QIA9 Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/larryh%40havard.com
-- BEGIN-ANTISPAM-VOTING-LINKS
Teach CanIt if this mail (ID 03IwHy68r) is spam: Spam: http://www.espam.us/canit/b.php?i=03IwHy68r&m=c5b9b9860e57&c=s Not spam: http://www.espam.us/canit/b.php?i=03IwHy68r&m=c5b9b9860e57&c=n Forget vote: http://www.espam.us/canit/b.php?i=03IwHy68r&m=c5b9b9860e57&c=f
END-ANTISPAM-VOTING-LINKS

We have been using GMS since we migrated user accounts to Gmail. Our relationship between Postini and Mailman is kind of ugly due to that migration.
Basically, we set up a Postini org for the Mailman lists which receives all external mail headed for the lists subdomain. Virus infected messages and messages for other than the list proper are refused. Internal mail to lists does not go through Postini, so all the list aliases can be addressed internally. Clean messages are delivered to Mailman. Messages that are quarantined appear in a nightly quarantine notification message sent to the list owner(s) from our internal postmaster address, which is an entry in discard_these_nonmembers in all lists.
Our list owners have been instructed to leave that entry alone. Auto discards are forwarded to the list owner instead of the list, with the cryptic subject "Auto-discard notification", which we did not discover a means of modifying.
List owners have been instructed not to release quarantined messages to the list unless they are false positives. List owners can release messages to the list using either links in the daily notification or by logging in to the Postini Message Center as the list user (which requires them to maintain yet another set of account credentials).
Luckily the number of list messages that get quarantined is relatively low, as this process is difficult to explain and confusing to recognize when a notification is received. We do not like it, but could not come up with a better solution given our infrastructure and the time available during account migration.
I have been instructed to migrate all mailman lists to Google Groups, and all new lists are being set up as Groups. This will obviously relieve us of the ugly work-around. We do not yet have enough experience with Groups to learn what "gotchas" lie in wait for us there. I would be very interested to hear from anyone who has been through that migration.
Kirke Johnson Internet: kjohnson@pcc.edu Email Administrator, TSS , Sylvania Campus Portland Community College, Portland, OR, USA (971) 722-4368
On Fri, Dec 7, 2012 at 11:03 AM, Andrew Hodgson <andrew@hodgsonfamily.org> wrote:

On 2012-12-07 5:52 PM, Kirke Johnson <kjohnson@pcc.edu> wrote:
Fyi... we have been using postini (hate it, lots of false positives, and lots of obvious spam slipping through), and we were told months ago by our reseller that Google is discontinuing postini service.
Charles
participants (4)
-
Andrew Hodgson
-
Kirke Johnson
-
Larry E. Havard
-
Tanstaafl