- Mailman-users - lists.mailman3.org

Any known cases of "non-members" who aren't explicitly allowed to send to the list with a default rule of "discard" on a list getting through?
by Thomas Ward Jan. 10, 2026

Jan. 10, 2026

We just noticed an oddness in a client's system. Someone sent to a members-only list and it 'got past' moderation controls. The list is set to not allow non-members to send to the list, but somehow it got through the default rule of "discard (no notification)" for a non-member and got to the list. The only oddness I can tell is that there was an emoji (unicode) in the subject line but as I understand how Mailman works, this should NOT have impacted anything, as the sender filter bits happen earlier in message processing. Has *anyone* seen any cases like this before? If this is repeatable or a known issue, it deserves a CVE security bug because this is a **severe** problem.

3 2

Unadvertised lists accessible even if not signed in
by Peter Chubb Jan. 5, 2026

Jan. 5, 2026

Hi folks, I'm running Mailman3 3.3.10, with postorius and hyperkitty. I want unadvertised lists to be visible only to the people who are subscribed to them and to site administrators. Right now, anyone who has the name of a list can construct a URL to the signup page, even for unadvertised lists. So, I can go to: https://site.name/postorius/lists/test.site.name/ and get to the test list, even if it is unadvertised. I see people scanning URLs like this in the NGINX logs, looking for lists. How can I prevent anyone not logged in, and not a member of an unadvertised list, from seeing it? Peter C

2 1

Getting original message headers
by Peter Chubb Jan. 5, 2026

Jan. 5, 2026

We've been seeing some particularly pernicious spammers recently. They're using gmail accounts; I'd like to report them to Google. To do that I need to find the original message headers. By the time the message gets to the archive, or to the mailing list recipients, all the Received: headers seem to have been deleted, leaving only the ones from my list server outwards. Is there a way to access the original incoming emai, before DMARC mitigation etc., has changed the headers? Peter C

3 5

Confirmation Email Not Sent
by dap1＠bellsouth.net Dec. 31, 2025

Dec. 31, 2025

While waiting for the Django problem to be resolved, I am able to make it accept a specific host login to get around the CSRF error. So I am now trying to add a member to my list using the ...join address. I get back a message saying the request is pending. I can also see it on the pending user confirmation page. However, there is nothing showing up on the pending approval page nor is there anything in the mail.log showing an outgoing confirmation email or email to the list admin about a pending approval. There is nothing in the mailq either, Looking through the logs I see nothing helpful. Where is the confirmation email?

2 3

Cannot Run Web Frontend
by dap1＠bellsouth.net Dec. 27, 2025

Dec. 27, 2025

I'm having trouble getting my web frontend working. When I try to access http://localhost/mailman3 I get a 503 error and the following in the apache2 error.log: [Tue Dec 23 13:08:41.584412 2025] [proxy:error] [pid 132768] (111)Connection refused: AH00957: http: attempt to connect to 127.0.0.1:8000 (127.0.0.1:8000) failed [Tue Dec 23 13:08:41.584578 2025] [proxy_http:error] [pid 132768] [client 2600:1700:5cac:4600:fc36:9a27:6e66:44b:49658] AH01114: HTTP: failed to make connection to backend: 127.0.0.1 This is the relevant part of apache2's 000-default.conf: <IfModule mod_proxy.c> ProxyPreserveHost On ProxyPass "/mailman3" "http://127.0.0.1:8000/mailman3" ProxyPass "/archives" "http://127.0.0.1:8000/archives" ProxyPass "/accounts" "http://127.0.0.1:8000/accounts" ProxyPass "/admin" "http://127.0.0.1:8000/admin" ProxyPass "/user-profile" "http://127.0.0.1:8000/user-profile" </IfModule> What is a bit confusing but probably unrelated is this is in the virtual section for port 80 rather than port 443. I don't see any errors anywhere else.

4 16

Upgrading dockerized Mailman3 from 0.4 to 0.5.1
by jesper.holck＠ibsgaarden.dk Dec. 27, 2025

Dec. 27, 2025

I am a happy user running Mailman 3, dockerized, in combination with Mailcow. After a few initial problems, everything is running smoothly. Now I'm considering upgrading from 0.4 to 0.5.1, but I'm not sure about the right procedure. Is it something like this? * Stop Containers: # docker compose down * Change the two occurrences of "0.4" to "0.5.1" in my docker-compose.yaml file * Pull New Images: # docker compose pull * Restart: # docker compose up -d Will there be any need for database migrations? Thanks for all the work many of you has put into this.

3 4

Internal Server Errors in mailmanweb.log
by Washington Odhiambo Dec. 25, 2025

Dec. 25, 2025

I keep seeing several errors like the below in my mailmanweb.log and not sure what the causa is. ``` [ERROR] [2025-12-17 18:24:22,053] [log] 1969696 140553251733568 Internal Server Error: /archives/list/ kictanet(a)lists.kictanet.or.ke/thread/C6QQOYBSQIWHJ7ALGSR23U44U2FHTFG2/ Traceback (most recent call last): File "/opt/mailman/venv/lib/python3.11/site-packages/django/core/handlers/exception.py", line 55, in inner response = get_response(request) ^^^^^^^^^^^^^^^^^^^^^ File "/opt/mailman/venv/lib/python3.11/site-packages/django/core/handlers/base.py", line 197, in _get_response response = wrapped_callback(request, *callback_args, **callback_kwargs) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/opt/mailman/venv/lib/python3.11/site-packages/hyperkitty/lib/view_helpers.py", line 137, in inner return func(request, *args, **kwargs) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/opt/mailman/venv/lib/python3.11/site-packages/hyperkitty/views/thread.py", line 238, in thread_index return render(request, "hyperkitty/thread.html", context=context) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/opt/mailman/venv/lib/python3.11/site-packages/django/shortcuts.py", line 24, in render content = loader.render_to_string(template_name, context, request, using=using) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/opt/mailman/venv/lib/python3.11/site-packages/django/template/loader.py", line 62, in render_to_string return template.render(context, request) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/opt/mailman/venv/lib/python3.11/site-packages/django/template/backends/django.py", line 61, in render return self.template.render(context) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/opt/mailman/venv/lib/python3.11/site-packages/django/template/base.py", line 175, in render return self._render(context) ^^^^^^^^^^^^^^^^^^^^^ File "/opt/mailman/venv/lib/python3.11/site-packages/django/template/base.py", line 167, in _render return self.nodelist.render(context) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/opt/mailman/venv/lib/python3.11/site-packages/django/template/base.py", line 1005, in render return SafeString("".join([node.render_annotated(context) for node in self])) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/opt/mailman/venv/lib/python3.11/site-packages/django/template/base.py", line 1005, in <listcomp> return SafeString("".join([node.render_annotated(context) for node in self])) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/opt/mailman/venv/lib/python3.11/site-packages/django/template/base.py", line 966, in render_annotated return self.render(context) ^^^^^^^^^^^^^^^^^^^^ File "/opt/mailman/venv/lib/python3.11/site-packages/django/template/loader_tags.py", line 157, in render return compiled_parent._render(context) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/opt/mailman/venv/lib/python3.11/site-packages/django/template/base.py", line 167, in _render return self.nodelist.render(context) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/opt/mailman/venv/lib/python3.11/site-packages/django/template/base.py", line 1005, in render return SafeString("".join([node.render_annotated(context) for node in self])) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/opt/mailman/venv/lib/python3.11/site-packages/django/template/base.py", line 1005, in <listcomp> return SafeString("".join([node.render_annotated(context) for node in self])) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/opt/mailman/venv/lib/python3.11/site-packages/django/template/base.py", line 966, in render_annotated return self.render(context) ^^^^^^^^^^^^^^^^^^^^ File "/opt/mailman/venv/lib/python3.11/site-packages/django/template/loader_tags.py", line 63, in render result = block.nodelist.render(context) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/opt/mailman/venv/lib/python3.11/site-packages/django/template/base.py", line 1005, in render return SafeString("".join([node.render_annotated(context) for node in self])) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/opt/mailman/venv/lib/python3.11/site-packages/django/template/base.py", line 1005, in <listcomp> return SafeString("".join([node.render_annotated(context) for node in self])) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/opt/mailman/venv/lib/python3.11/site-packages/django/template/base.py", line 966, in render_annotated return self.render(context) ^^^^^^^^^^^^^^^^^^^^ File "/opt/mailman/venv/lib/python3.11/site-packages/django/template/defaulttags.py", line 321, in render return nodelist.render(context) ^^^^^^^^^^^^^^^^^^^^^^^^ File "/opt/mailman/venv/lib/python3.11/site-packages/django/template/base.py", line 1005, in render return SafeString("".join([node.render_annotated(context) for node in self])) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/opt/mailman/venv/lib/python3.11/site-packages/django/template/base.py", line 1005, in <listcomp> return SafeString("".join([node.render_annotated(context) for node in self])) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/opt/mailman/venv/lib/python3.11/site-packages/django/template/base.py", line 966, in render_annotated return self.render(context) ^^^^^^^^^^^^^^^^^^^^ File "/opt/mailman/venv/lib/python3.11/site-packages/django/template/loader_tags.py", line 208, in render return template.render(context) ^^^^^^^^^^^^^^^^^^^^^^^^ File "/opt/mailman/venv/lib/python3.11/site-packages/django/template/base.py", line 177, in render return self._render(context) ^^^^^^^^^^^^^^^^^^^^^ File "/opt/mailman/venv/lib/python3.11/site-packages/django/template/base.py", line 167, in _render return self.nodelist.render(context) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/opt/mailman/venv/lib/python3.11/site-packages/django/template/base.py", line 1005, in render return SafeString("".join([node.render_annotated(context) for node in self])) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/opt/mailman/venv/lib/python3.11/site-packages/django/template/base.py", line 1005, in <listcomp> return SafeString("".join([node.render_annotated(context) for node in self])) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/opt/mailman/venv/lib/python3.11/site-packages/django/template/base.py", line 966, in render_annotated return self.render(context) ^^^^^^^^^^^^^^^^^^^^ File "/opt/mailman/venv/lib/python3.11/site-packages/django/template/defaulttags.py", line 238, in render nodelist.append(node.render_annotated(context)) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/opt/mailman/venv/lib/python3.11/site-packages/django/template/base.py", line 966, in render_annotated return self.render(context) ^^^^^^^^^^^^^^^^^^^^ File "/opt/mailman/venv/lib/python3.11/site-packages/django/template/loader_tags.py", line 208, in render return template.render(context) ^^^^^^^^^^^^^^^^^^^^^^^^ File "/opt/mailman/venv/lib/python3.11/site-packages/django/template/base.py", line 177, in render return self._render(context) ^^^^^^^^^^^^^^^^^^^^^ File "/opt/mailman/venv/lib/python3.11/site-packages/django/template/base.py", line 167, in _render return self.nodelist.render(context) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/opt/mailman/venv/lib/python3.11/site-packages/django/template/base.py", line 1005, in render return SafeString("".join([node.render_annotated(context) for node in self])) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/opt/mailman/venv/lib/python3.11/site-packages/django/template/base.py", line 1005, in <listcomp> return SafeString("".join([node.render_annotated(context) for node in self])) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/opt/mailman/venv/lib/python3.11/site-packages/django/template/base.py", line 966, in render_annotated return self.render(context) ^^^^^^^^^^^^^^^^^^^^ File "/opt/mailman/venv/lib/python3.11/site-packages/django/template/base.py", line 1064, in render output = self.filter_expression.resolve(context) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/opt/mailman/venv/lib/python3.11/site-packages/django/template/base.py", line 742, in resolve new_obj = func(obj, *arg_vals) ^^^^^^^^^^^^^^^^^^^^ File "/opt/mailman/venv/lib/python3.11/site-packages/hyperkitty/templatetags/decorate.py", line 42, in render return mark_safe(text_renderer(content)) ^^^^^^^^^^^^^^^^^^^^^^ File "/opt/mailman/venv/lib/python3.11/site-packages/mistune/markdown.py", line 120, in __call__ return self.parse(s)[0] ^^^^^^^^^^^^^ File "/opt/mailman/venv/lib/python3.11/site-packages/mistune/markdown.py", line 93, in parse self.block.parse(state) File "/opt/mailman/venv/lib/python3.11/site-packages/mistune/block_parser.py", line 457, in parse end_pos2 = self.parse_method(m, state) ^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/opt/mailman/venv/lib/python3.11/site-packages/mistune/core.py", line 216, in parse_method return func(m, state) ^^^^^^^^^^^^^^ File "/opt/mailman/venv/lib/python3.11/site-packages/mistune/block_parser.py", line 368, in parse_block_quote text, end_pos = self.extract_block_quote(m, state) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/opt/mailman/venv/lib/python3.11/site-packages/mistune/block_parser.py", line 345, in extract_block_quote end_pos = self.parse_method(m4, state) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/opt/mailman/venv/lib/python3.11/site-packages/mistune/core.py", line 216, in parse_method return func(m, state) ^^^^^^^^^^^^^^ File "/opt/mailman/venv/lib/python3.11/site-packages/mistune/block_parser.py", line 387, in parse_list return parse_list(self, m, state) ^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/opt/mailman/venv/lib/python3.11/site-packages/mistune/list_parser.py", line 64, in parse_list groups = _parse_list_item(block, bullet, groups, token, state, rules) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/opt/mailman/venv/lib/python3.11/site-packages/mistune/list_parser.py", line 174, in _parse_list_item block.parse(child, rules) File "/opt/mailman/venv/lib/python3.11/site-packages/mistune/block_parser.py", line 457, in parse end_pos2 = self.parse_method(m, state) ^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/opt/mailman/venv/lib/python3.11/site-packages/mistune/core.py", line 214, in parse_method assert lastgroup AssertionError ``` Since they are many, perhaps the causa is the same thing that can be fixed? -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 In an Internet failure case, the #1 suspect is a constant: DNS. "Oh, the cruft.", egrep -v '^$|^.*#' ¯\_(ツ)_/¯ :-) [How to ask smart questions: http://www.catb.org/~esr/faqs/smart-questions.html]

3 7

Internal server error instead of web interface
by Christian H. Kuhn Dec. 18, 2025

Dec. 18, 2025

Hi all, https://lists.qno.de/mailman3 shows an internal server error. I followed https://docs.mailman3.org/en/latest/install/virtualenv.html with MariaDB instead of PostgreSQL. Python 3.13.0 pip 25.3 mailman 3.3.11b mailman-web 0.0.10.dev14?g0997bd postorius 1.3.13 Services mailman3, mailmanweb, apache2, uwsgi up and running. uwsgi listens on [::1]:8000, apache2 is configured accordingly. Ports show up in netstat. No errors show in logs. If /mailman3 was a directory, i would have thought of user permission problems. But not with TCP ports. As :8000 is available, i would have thought that there is a problem with uwsgi. Requests arrive there and are processed: [pid: 3185672|app: 0|req: 10/17] ::1 () {28 vars in 409 bytes} [Mon Nov 3 13:24:05 2025] GET /mailman3/ => generated 5038 bytes in 28 msecs (HTTP/1.0 200) 8 headers in 261 bytes (1 switches on core 0) So uwsgi gets the request and delivers data. The problem seems that apache2 does not get the result, and i cannot find any reason. Any help? TIA QNo

4 4

Mass operations on large list - Internal Server Error
by Liam Reilly Dec. 18, 2025

Dec. 18, 2025

Hi, A list owner has reported that their list page for list of 3460 members crashes with "internal server error" when attempting to do mass operations such as unsubscribe all or large mass subscribe of many members. Has anyone else experienced this? Thanks, Liam

5 7

Stand 18.12.2025
by Markus Grandpré Dec. 18, 2025

Dec. 18, 2025

Hallo zusammen, Blockierte Annahme von E-Mails: * t-online, Austragung beantragt. Verzögerte Annahme von E-Mails: * google.com, bis zu 22 Stunden, * yahoo, bis zu 20 Stunden. Bewertungen der Mailausgangsserver: * Senderscore: 43 (poor) / 46 (poor) * Talos (Ciso): neutral / neutral Gruß Markus -- Markus Grandpré (he/him) Universität Konstanz Kommunikations-, Informations- und Medienzentrum (KIM) Abteilung IT-Dienste Forschung, Lehre und Infrastruktur Sachgebiet Diensteadministration 78457 Konstanz Tel: +49 7531 88-4342D

1 0