[Mailman-Users] Re: Non-members allowed to post!

[Mark Sapiro]

David Gibbs wrote:
>
>At this point I'm 99% sure that Mailman is misinterpreting the
>'X-MailScanner-From' header, because that's the only place that the
>'rpg400 at m.gmane.org' address is showing up.

In
http://mail.python.org/pipermail/mailman-users/2005-March/043346.html
I said:

<quote>
If you remove any "USE_ENVELOPE_SENDER = Yes" from mm_cfg.py and put

SENDER_HEADERS = ('from', 'reply-to', 'sender')

into mm_cfg.py, then envelope sender won't be used at all. That might
help.
</quote>

and in
http://mail.python.org/pipermail/mailman-users/2005-March/043354.html
you replied

<quote>
I actually changed that in my mm_cfg.py file after this problem started 
in hopes that it would help.  The original value was No, I changed it
to 
Yes.

Now the messages are held because 'news at sea.gmane.org' is not a
member 
of the list.
</quote>

I thought that meant that when you followed my suggestion (which
removes envelope sender from consideration), that posts weren't
accepted. Doesn't that prove that it is envelope sender and not
misinterpretation of X-MailScanner-From: that allows the post through?

When the message is piped to Mailman, There should be a Return-Path:
header as the very first header which contains the envelope sender.

If you give me permission, I'll post a very simple message to your list
with envelope sender rpg400 at m.gmane.org and no header containing that
address (except maybe an X-Authentication-Warning), and we'll see what
happens.

BTW, does your list have local archives? If so, the archive .mbox file
has "unix from" lines at the beginning of each message (lines of the
form "From user at example.com date/time". It also has in my case at
least, a Return-Path: header in each message. These contain the
envelope sender.

>Here's a copy of the full headers (personal email address obfuscated)
>for a message that came from gmane.  "buck.calabro at dom.ain" is indeed a
>subscriber to the list in question.
>
>----------
>
>Received: from ciao.gmane.org (main.gmane.org [80.91.229.2])
>	by mail.midrange.com (8.13.1/8.13.1) with ESMTP id j29H988r031251
>	(version=TLSv1/SSLv3 cipher=DES-CBC3-SHA bits=168 verify=NO)
>	for <rpg400-l at midrange.com>; Wed, 9 Mar 2005 11:09:15 -0600
>Received: from list by ciao.gmane.org with local (Exim 4.43)
>	id 1D94du-0006l2-Pj
>	for rpg400-l at midrange.com; Wed, 09 Mar 2005 18:06:42 +0100
>Received: from 209-23-60-152.tvc-ip.com ([209.23.60.152])
>	by main.gmane.org with esmtp (Gmexim 0.1 (Debian))
>	id 1AlnuQ-0007hv-00
>	for <rpg400-l at midrange.com>; Wed, 09 Mar 2005 18:06:42 +0100
>Received: from buck.calabro by 209-23-60-152.tvc-ip.com with local
>(Gmexim 0.1
>	(Debian)) id 1AlnuQ-0007hv-00
>	for <rpg400-l at midrange.com>; Wed, 09 Mar 2005 18:06:42 +0100
>X-Injected-Via-Gmane: http://gmane.org/
>To: rpg400-l at midrange.com
>From: "Buck Calabro" <buck.calabro at dom.ain>
>Subject: Re: Making sense of 4-byte binary fields
>Date: Wed, 9 Mar 2005 12:04:06 -0500
>Lines: 17
>Message-ID: <d0na9m$m7s$1 at sea.gmane.org>
>References:
><OF69C872C6.80D4A2B2-ON80256FBF.005A5236-80256FBF.005BB28B at ricoh-uk.com>
>Reply-To: "Buck Calabro" <kc2hiz.you.know.what.goes at dom.ain>
>X-Complaints-To: usenet at sea.gmane.org
>X-Gmane-NNTP-Posting-Host: 209-23-60-152.tvc-ip.com
>X-MSMail-Priority: Normal
>X-Newsreader: Microsoft Outlook Express 5.50.4922.1500
>X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4925.2800
>Sender: news <news at sea.gmane.org>
>X-Gmane-MailScanner: Found to be clean
>X-Gmane-MailScanner: Found to be clean
>X-MailScanner-From: rpg400 at m.gmane.org
>X-MailScanner-To: rpg400-l at midrange.com
>X-Virus-Scanned: ClamAV 0.83/758/Wed Mar 9 06:03:56 2005 on
>linux.midrange.com
>X-Virus-Status: Clean
>X-Greylist: Default is to whitelist mail, not delayed by
>milter-greylist-1.7.2
>	(mail.midrange.com [69.3.23.26]);
>	Wed, 09 Mar 2005 11:09:15 -0600 (CST)
>----------

And where did the above copy of the message come from?

--
Mark Sapiro <msapiro at value.net>       The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan