November 2020 - Mailman-users - lists.mailman3.org

Moderation not working?
by peter＠chubb.wattle.id.au 24 Nov '20

24 Nov '20

Hi Folks, Running a shiny new instance of mailman3, as per the Debian package (version 3.2.2) but the moderation doesn't seem to work. WE got hit by a heap of spammers overnight, even though the 'hold for moderation' bit is set for non-members (and now for members too). Emails seem just to get straight through. Any advice on how to debug this? Would upgrading to a later version using pip help? Peter C

2 3

How to strip DKIM headers on a domain level or a list level
by Stephen J. Turnbull 24 Nov '20

24 Nov '20

Rob Jenson writes: > I need to strip DKIM headers on the inbound messages to my list or > to my domain. Why do you need to strip DKIM headers? The standard specifies that an invalid DKIM signature must be treated the same as if there were no signature at all. So an invalid DKIM signature may be treated as spammier than a message with a valid signature, but that should not be treated differently from an unsigned message (as would appear after removing those header fields). I know this feature is in demand from list admins, but I've never seen convincing evidence that it's actually effective for any of the usual suspects (Yahoo!, AOL, Gmail), only for small domains with pigheaded admins who are proud of their non-conforming configurations, and announce that they are discarding messages which have invalid DKIM signatures. > What I do not understand from the documentation for Mailman 3 Core > is whether it is possible for my hosting service to set > remove_dkim_headers just for our domain. It currently is not possible. It probably could be made possible on a per-domain or per-list basis, but it's not clear to me why it would be useful to do so. If there really are non-conforming receivers out there, it's probably a good idea to strip host-wide. > If that is not possible, then the question becomes "is there a way, > in the list configuration, to strip the DKIM headers? It is possible, but that requires changing the list's processing pipeline to add that capability. I believe this is not difficult (I haven't done similar changes with Mailman 3 yet) but it does require the assistance of the host, and possibly imposes a future maintenance burden on the host. > We are munging the text of the message in Mailman, so the DKIM > headers from the original poster are invalid. As I explained above, both DKIM and DMARC are specified so that "no signature" == "invalid signature" for the purposes of spam processing. Are you sure that Yahoo! (or any other provider used by your subscribers) is treating invalid signatures differently from absence of signatures? The person responsible for Yahoo! MTA configuration is a well-known mail security expert who participated actively in the specification of all these protocols (and she also gave me a kitten, so I may be biased). > As far as I can see, our service provider is using ARC in our > Mailman configuration, but not signing the outbound messages with > DKIM. That surprises me. ARC isn't really a substitute for the MTA's own DKIM signature, at least not yet. > Therefore the DKIM signature from the poster's mail service > provider is sent out with their DKIM header, which seems to be > problematic. It shouldn't be. > If I understand ARC correctly, it is validating the DKIM signature > from the poster, creating a new signature and metadata indicating > that what it received was properly signed. That is correct. As far as I know, Yahoo! does participate in the ARC protocol and used to have conforming implementations of DKIM and DMARC. That doesn't mean you get a free ride: they may still have your IP on a blacklist from former owners of the IP, for example. Or your posts may "look like" spam for some other reason, or your lists may need more time to build up a clean reputation. But I need evidence more convincing than "list posts are recognized as spam" to believe that removing DKIM headers will help. (For example, my employer's filters regularly recognize messages from department heads as spam, even with DKIM signatures intact. ;-)

6 9

Re: mailman 3.3.2 config file location
by Eric Broens 24 Nov '20

24 Nov '20

Apparently I lost the "layout:" config setting which defaults to [paths.here]. Best Regards,Eric

1 0

installation
by Christian Stalberg 24 Nov '20

24 Nov '20

I am working through installing mailman3 on Ubuntu 20.04.1 LTS / apache 2.4.41 / postfix 3.4.13 and have a couple of questions. I've installed Django, cloned the mailman-suite repo, installed and tested apache with Mod_wsgi [ according to https://tecadmin.net/install-apache-with-python-mod-wsgi-on-ubuntu-20-04/ ] and it worked fine. Now I am at 'Setting up a WSGI' server in the MM3 instructions where it says I am to configure uwsgi.ini file. Does that .ini file go in /opt/mailman/mailman where other .ini files reside? In setting up the apache virtual server [ according to https://docs.mailman3.org/projects/postorius/en/latest/deployment.html?highl ight=apache#apache-with-mod-wsgi ] I do not find a postorius.wsgi which WSGIScriptAlias points to. Thank you! ~Christian

5 9

mailman services under systemd
by Morris Jones 22 Nov '20

22 Nov '20

First post, I'm building a new mail server as my tired old server can no longer meet security requirements. (It's long overdue.) I see where Torge Riedel is running the mailman service under systemd, but I'm having trouble doing that. I don't see a mailman option that doesn't detach as a daemon. Did I miss something? Anyone have a systemd service example I might pilfer? Mojo -- Morris Jones, Monrovia, CA [1]BridgeMojo [2]Old Town Sidewalk Astronomers [3]Mojo's Blog References 1. http://bridgemojo.com/ 2. http://otastro.org/ 3. http://mojo.whiteoaks.com/

2 1

Reply w/Email Clients - From: vs. Reply-To:
by j＠manygoodideas.com 20 Nov '20

20 Nov '20

I'm setting up a new list, and a number of new list members are reporting a problem with replying to the thread. Their email clients seem to ignore the Reply-To: field and instead use from From: field. When they use Reply All, the email is addressed to both the From: and Reply-To:. Reading through previous threads here, I've tried a number of things: 1) DMARC mitigation action is "Replace From: with list address" 2) For Alter Messages - Set "Reply goes to list" The goal is that we want a reply to go to the list, not the person posting. Since Reply-To seems to be ignored by some clients, I'm hoping there's a way to force the "From" field to become the list address. Thanks in advance for your suggestions!

3 2

mailman-suite: Error 500 on Lists /setting/ pages
by ljsbw-it＠riseup.net 20 Nov '20

20 Nov '20

I just installed Mailman3 (mailman-suite) on my Server following these instructions: https://lab.uberspace.de/guide_mailman-3.html and everything works fine so far. I can create lists, subscribe people and send mails through lists but when I click the settings button and get redirected to /postorius/lists/listname/settings/ i get an Error 500 message. I couldn't find anything in the logs except the uwsgi log: [pid: 20568|app: 0|req: 62/62] 100.64.115.1 () {48 vars in 1052 bytes} [Wed Nov 18 16:27:59 2020] GET /postorius/lists/listname/settings/ => generated 1102 bytes in 1438 msecs (HTTP/1.1 500) 6 headers in 209 bytes (1 switches on core 0)

3 2

Moderation for nested mailing lists
by peterbw＠gmail.com 20 Nov '20

20 Nov '20

Hi Everyone, I have a list that has other mailing lists as members. When a non-member posts to this list I receive a moderation message. After approving the moderation message I then receive a lot of other moderation messages for the sub-lists that are members of the "top-most" list (since the non-member is not a member of any of the sub-lists). Is there any way to approve a message for moderation once and have all sub-lists automatically approve the message? Thanks for your help with this and have a nice day! Peter

2 1

How can I allow members of list A to post to List B and vice versa
by mario.mailman3＠frese.online 19 Nov '20

19 Nov '20

Hi, I am trying to setup Mailman3 for our school. There I have several groups (teachers, parents) that have their own mailling lists. But it also should be possible that the parents can sent mails to the teachers list and vice versa. The manual management via the non-members list will be very inconvenient and the command-line options that I saw so far do not include the import of non-members (mailman syncmembers and mailman addmembers). The best option I would like to have is to enter the name of List A in the non-members of List B an vice versa. All those nonmembers should not need to be moderated. How can I manage this? I would be very glad for your ideas. Best Mario

2 1

Customising hyperkitty and postorius
by peter＠chubb.wattle.id.au 19 Nov '20

19 Nov '20

Hi, I've put up a mailman3 instance, with hyperkitty enabled, and imported all my mailman2.1 archives -- it all seems to be working. How do I now customise the look and feel of my site? In particular, I'd like to render archived emails with a monospace font, and I'd like to change the colour scheme and styles of all the pages to match other pages on the same website. Peter C

2 1