[Mailman-Users] Restricting access to the pipermail archives

[Billy Crook]

Awesome!  Thanks Mark!  That worked exactly as you described!

Any reason I should keep pipermail's config in apache around if I don't
want the list archives viewable anonymously?

On Thu, Aug 20, 2015 at 1:42 PM, Mark Sapiro <mark at msapiro.net> wrote:

> On 08/20/2015 11:26 AM, Billy Crook wrote:
> > It is not clear to me that archive_private controls access to the
> archive.
>
>
> It does. Try it.  If archive_private is 'public' there is a symlink from
> archives/public/listname to archives/private/listname and a URL like
> http://example.com/pipermail/listname will work without authentication.
> If you set archive_private to 'private', that symlink is removed, the
> pipermail URL won't work and the only access to the archive is via a URL
> like http://example.com/mailman/private/listname which requires
> authentication and which will be displayed the archive URL on the
> listinfo page and in List-Archive: headers.
>
>
> > My understanding is that archive_private is used to inform mailman that
> the
> > email addresses visible in the archive should be presented differently
> > depending if the archive will be made publicly accessible or not.  i.e.
> > munge the email addresses if there's a chance spambots can find them.
>
>
> That is the Defaults.py/mm_cfg.py setting ARCHIVER_OBSCURES_EMAIL_ADDRESS.
>
>
> > I would like to NOT munge the addresses, so they are useful to click on
> for
> > my users.  But I want all of the text of each archived message to be kept
> > in secret on the server, viewable only by members of the list.
>
>
> Set
>
> ARCHIVER_OBSCURES_EMAIL_ADDRESS = No
>
> in mm_cfg.py and set the list's archive_private to 'private.
>
>
> > I would hope there was a more "supported" way to do this,...
>
>
> Just do the above. That will do it.
>
> --
> Mark Sapiro <mark at msapiro.net>        The highway is for gamblers,
> San Francisco Bay Area, California    better use your sense - B. Dylan
> ------------------------------------------------------
> Mailman-Users mailing list Mailman-Users at python.org
> https://mail.python.org/mailman/listinfo/mailman-users
> Mailman FAQ: http://wiki.list.org/x/AgA3
> Security Policy: http://wiki.list.org/x/QIA9
> Searchable Archives:
> http://www.mail-archive.com/mailman-users%40python.org/
> Unsubscribe:
> https://mail.python.org/mailman/options/mailman-users/billycrook%40gmail.com
>