- Mailman-users - lists.mailman3.org

list archives bleeding across domains.
by Hugh Esco Oct. 16, 2026

Oct. 16, 2026

I launched a mailman installation a couple of days ago, `pip list and `cat /etc/os-release` output reproduced below. It hosts six domains and a handful of lists for most of them. My issue is that lists archives are being linked across domain names for annonymous user, and I fear probably for users who are logged in as well. I get it that one domain's news list is supposed to be public, but does it have to be listed on the page for each domain? Can't it be listed for anonymous users ONLY IF they browse to its domain? My settings_local.py includes: FILTER_VHOST = True SITE_ID = 0 I have another reason (MAILMAN_ARCHIVER_KEY is working) to believe that my settings_local.py file is being read into the configuration. Any advice? All help is appreciated. Thanks, -- Hugh Esco ((mm3) ) list@lists02:~$ cat /etc/os-release PRETTY_NAME="Ubuntu 24.04.5 LTS" NAME="Ubuntu" VERSION_ID="24.04" VERSION="24.04.5 LTS (Noble Numbat)" VERSION_CODENAME=noble ID=ubuntu ID_LIKE=debian HOME_URL="https://www.ubuntu.com/" SUPPORT_URL="https://help.ubuntu.com/" BUG_REPORT_URL="https://bugs.launchpad.net/ubuntu/" PRIVACY_POLICY_URL="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy" UBUNTU_CODENAME=noble LOGO=ubuntu-logo list@lists02:~$ . /opt/local/mm3/bin/activate ((mm3) ) list@lists02:~$ mailman --version GNU Mailman 3.3.9 (Tom Sawyer) ((mm3) ) list@lists02:~$ mailman-web --version 4.2.30 ((mm3) ) list@lists02:~$ pip list Package Version ------------------- ----------- aiosmtpd 1.4.6 alembic 1.20.0 asgiref 3.12.1 atpublic 9.0.0 attrs 26.1.0 authheaders 0.16.3 authres 1.2.0 certifi 2026.7.22 cffi 2.1.1 charset-normalizer 3.5.2 click 8.5.0 comrak 0.0.16 cryptography 50.0.2 defusedxml 0.7.1 Django 4.2.30 django-allauth 65.19.7 django-appconf 1.2.0 django_compressor 4.6.0 django-extensions 4.1 django-gravatar2 1.4.5 django-haystack 3.4.0 django-mailman3 1.3.15 django-picklefield 3.4.0 django-q2 1.10.0 djangorestframework 3.17.2 dkimpy 1.1.8 dnspython 2.9.0 docutils 0.23 falcon 4.4.0 flufl.bounce 6.0.0 flufl.i18n 8.0.0 flufl.lock 10.0.0 greenlet 3.5.6 gunicorn 26.2.0 HyperKitty 1.3.12 idna 3.20 lazr.config 4.0.0 lazr.delegates 4.0.0 mailman 3.3.9 mailman-hyperkitty 1.2.1 mailman-web 0.0.9 mailmanclient 3.3.5 Mako 1.4.3 MarkupSafe 3.0.4 mistune 3.3.4 networkx 3.7 nh3 0.3.7 oauthlib 4.0.0 packaging 26.3 passlib 1.7.4 pip 26.2.1 postorius 1.3.13 psutil 7.2.2 psycopg2-binary 2.9.13 publicsuffix2 2.20191221 pycparser 3.11 Pygments 2.21.0 PyJWT 2.15.1 python-dateutil 2.9.0.post0 python-gettext 5.0 python3-openid 3.2.0 rcssmin 1.3.0 readme_renderer 46.0 requests 2.34.2 rjsmin 1.3.0 robot-detection 0.4 six 1.17.0 SQLAlchemy 2.0.54 sqlparse 0.6.0 typing_extensions 4.16.0 urllib3 2.8.0 uWSGI 2.0.31 wheel 0.48.0 Whoosh 2.7.4 zope.component 7.1 zope.configuration 7.1 zope.event 6.2 zope.hookable 8.3 zope.i18nmessageid 8.3 zope.interface 8.7 zope.schema 8.1 zstd 1.5.7.2 -- hesco(a)yourmessagedelivered.com 912-571-1833 (cell, sms)

4 4

final stages of development, ymd_mailman3 puppet module
by Hugh Esco Oct. 15, 2026

Oct. 15, 2026

Of interest to this community, I posed the following prompt: ``` mo betta'. Thank you. now it is also a more useful modules for use by others. the puppet forge once required a module author to certify rights over the IP to an uploaded module by each participating author. Has their policy changed to accommodate AI use in development? 85% of this module, which is getting close to usability as a publicly accessible forge module, pre-existed my use of BraveAI for the final mile. What is the forge's take on the involvement of AI and your having digested the mm3-developers list and the application documentation in this process. Is it necessary, for the forge, that I consult the team whose work you have referenced for their permission? ``` Understanding that BraveAI is not an attorney, it nonetheless responded in part, . . . "On the Mailman 3 team's permission: you do not need it." it went on to suggest inclusion in my README.md, this copy, which I have modified to acknowledge use of AI in its development, and expand the scope of what this module does. ``` ## Acknowledgements This module automates deployment of [Mailman 3] (https://gitlab.com/mailman/mailman) and its supporting components, the importation of archives from legacy lists, the hiera controlled configuration of the installation and its integration with runit, postfix, sqlite3 or postgresql, apache2. Configuration guidance was derived from the Mailman 3 documentation and mailman-users mailing list discussions, and in the final mile with assistance by BraveAI which has a better grasp on what those primary sources offer than do I. ``` I put this question here to hear what the actual humans of the development team have to say on this matter. My project has been developed as the ymd_mailman3 puppet module. In my role definition, after some boilerplate setup, I include the module like so: require ymd_mailman3 Along with 39 ymd_mailman3:: specific entries in hiera (mostly strings, paths, config options, but also a couple of arrays and a hash describing the (django) sites, domains and lists to be hosted), and another 10 in the python:: namespace (which should likely be refactorsed under the primary naming convention), it builds a specified version of python from source, installs necessary PyPi packages, wires it to a database and applies all the initial configuration for the installation, and the import of any archives which have not yet been processed. The initial installation runs for about 30 minutes (on 4gb of ram and a couple of processors assigned to the docker containers where I have done my development). I've watched a puppet run take another 20 minutes importing a few lists (2 four years old, one 25 years old). For those who do not use puppet, and might want to adapt this framework to ansible or chef, perhaps in the future I might write: "What I learned installing mm3, that I missed in the documentation" Looks like ansible offers several options I should perhaps study for ideas on hardening and exposure of features. I might also be tempted, with some nudging to offer revisions to the official docs, if folks are interested. I still have some cruft removal left, further refactoring, etc. But the code might be summarized like so. ``` # cloc . 62 text files. 62 unique files. 5 files ignored. github.com/AlDanial/cloc v 1.82 T=0.04 s (1332.8 files/s, 47292.0 lines/s) -------------------------------------------------------------------------------- Language files blank comment code -------------------------------------------------------------------------------- Puppet 34 289 121 1056 ERB 17 71 0 315 Bourne Again Shell 2 18 7 57 Ruby 3 16 3 48 Bourne Shell 2 12 12 33 -------------------------------------------------------------------------------- SUM: 58 406 143 1509 -------------------------------------------------------------------------------- ``` TODO: The ::params class offers sane defaults for anything missing from the hiera data structure, at least for an administrator comfortable working in a file system organized the debian way. I'd be happy to work with developers comfortable in other file system layouts, familiar with the package names for other linux flavors to write conditionals to drive the base assignments required to accommodate other distributions. Let me know please if that would be of interest to you. I also welcome help from nginx administrators for adding a path to accommodate a different local reverse proxy. One day perhaps I can refactor the python deployment code to rely on puppet-python instead of its own internal implementation. It had not served my purpose when I first tested it two years ago. Looking forward to hearing from anyone interested by phone or email, here on the list, or privately. Cheers. -- hesco(a)yourmessagedelivered.com 912-571-1833 (cell, sms)

1 0

REST API - memberships of an address not linked to a user
by Bradford Bulger Oct. 13, 2026

Oct. 13, 2026

I have an address that is no longer linked to any user. It was linked in the past, and it was added to a mailing list while linked. The link between the user and the address has since been deleted. addresses/bbulger(a)ozone.arc.nasa.gov returns: {#8911 +"email": "bbulger(a)ozone.arc.nasa.gov", +"original_email": "bbulger(a)ozone.arc.nasa.gov", +"registered_on": "2026-10-13T17:18:35", +"self_link": "http://localhost:8001/3.1/addresses/bbulger@ozone.arc.nasa.gov", +"verified_on": "2026-10-13T17:18:35", +"http_etag": ""99abfe09ad3d856eeda533f0b375c0b656d7d346"", } When I look at the roster of members for my list - lists/eureka.espo.test.nasa.gov/roster/member - there is an entry for this address {#8903 +"address": "http://localhost:8001/3.1/addresses/bbulger@ozone.arc.nasa.gov", +"bounce_score": 1, +"last_bounce_received": "2026-10-13T17:18:36", +"last_warning_sent": "0001-01-01T00:00:00", +"total_warnings_sent": 0, +"delivery_mode": "regular", +"email": "bbulger(a)ozone.arc.nasa.gov", +"list_id": "eureka.espo.test.nasa.gov", +"subscription_mode": "as_address", +"role": "member", +"display_name": "", +"self_link": "http://localhost:8001/3.1/members/a77bbc4067fa40fdb74cde507f323d89", +"member_id": "a77bbc4067fa40fdb74cde507f323d89", +"http_etag": ""f6eaf8c4a7742973f66002122fdd2f08a64259d9"", }, But if I query for the memberships of that address - addresses/bbulger(a)ozone.arc.nasa.gov/memberships - there are no results. Is that a bug? Am I misunderstanding something? I can find subscriptions for the address with members/find querying on subscriber {#8854 +"address": "http://localhost:8001/3.1/addresses/bbulger@ozone.arc.nasa.gov", +"bounce_score": 1, +"last_bounce_received": "2026-10-13T17:18:36", +"last_warning_sent": "0001-01-01T00:00:00", +"total_warnings_sent": 0, +"delivery_mode": "regular", +"email": "bbulger(a)ozone.arc.nasa.gov", +"list_id": "eureka.espo.test.nasa.gov", +"subscription_mode": "as_address", +"role": "member", +"display_name": "", +"self_link": "http://localhost:8001/3.1/members/a77bbc4067fa40fdb74cde507f323d89", +"member_id": "a77bbc4067fa40fdb74cde507f323d89", +"http_etag": ""f6eaf8c4a7742973f66002122fdd2f08a64259d9"", }, So the immediate issue looks to be handled OK. I am just curious. Thanks.

2 1

How to delete empty archives by script?
by Andreas Vetter Oct. 13, 2026

Oct. 13, 2026

Hi, We usually configure our lists to have no archives, but sometimes this is done after hyperkitty already creates the empty archive. Is there a way (script) to delete empty archives using a script? Regards, Andreas

3 11

Stopped getting my own messages to a list
by Lars Bjørndal Oct. 12, 2026

Oct. 12, 2026

I recently stopped getting my own messages when posting to one of the lists. I get my own mail when posting to other lists. Receive own postings is set to Yes. I'm a non-member on the list I'm posting to, but that list has another list as a member, and I'm a member of that list, with Receive my own post set to yes. I've not configured these lists for a long time, and it has worked until recently. Any idea on where to search for the cause? I've changed dmarc policy on the domain from none to quarantine. Should that matter? Lars

3 10

which mailman3 containers to use?
by Thing Oct. 8, 2026

Oct. 8, 2026

Hi, Is maxking/docker-mailman still the recommended container deployment for a new Mailman 3 installation in 2026? I am building a PoC on RHEL 10 using rootless Podman, with MariaDB running externally on the host (for now to ease backup issues). The repository appears somewhat inactive and its example compose file uses maxking/mailman-core:0.4 and maxking/mailman-web:0.4. Are these images still maintained and suitable for a new deployment, or is another container image or installation method now recommended? regards Steven

3 3

finding all memberships for a user using a string match in REST API
by bulger＠baeri.org Oct. 4, 2026

Oct. 4, 2026

I'm trying to return all the memberships for members with email addresses that match a given string. The equivalent of 'mailman findmember jo', which returns 'john(a)example.com' and lists, 'joe(a)example.com' and lists, etc. What I'm doing now is finding users with a string match, then for each user getting their addresses, and then for each address getting memberships. Is there anything more direct? I tried to query memberships using 'user' but I guess that's not supported?

2 1

Implement a simple non javascript captcha to mailman
by Lars Bjørndal Oct. 4, 2026

Oct. 4, 2026

I need to implement some sort of captcha for Mailman accounts. As all my lists are for Norwegians, I think it's enough to have a simple question in Norwegian that has to be answered. I'm not a Python programmer, and I asked Gemini. He suggested that I should add a settings_local.py file in /etc/mailman3, which settings.py from the same folder should import, as it have, at the end: ``` try: from .settings_local import * except ImportError: pass ``` But the code from settings_local.py doesn't semm to be run. The settings_local.py have: ``` import sys import os CURRENT_DIR = os.path.dirname(os.path.abspath(__file__)) if CURRENT_DIR not in sys.path: sys.path.insert(0, CURRENT_DIR) ACCOUNT_ADAPTER = 'mailman_local.adapter.CustomMailmanAccountAdapter' ACCOUNT_FORMS = {'signup': 'mailman_local.forms_no.DynamicMathCaptchaSignupForm'} INSTALLED_APPS += ('mailman_local',) ``` I have the directory /etc/mailman3/mailman_local with the following files: - adapter.py - forms_no.py - __init__.py If this at all is possible, I'd like to have the extra code/files in a place where an upgrade doesn't affect them, so /etc/mailman3 seems to be a good location. Do you have suggestions in how to get this or a similar approach to work? Thanks, Lars

4 6

REST API list of endpoints?
by bulger＠baeri.org Oct. 2, 2026

Oct. 2, 2026

Is there a list of the commands available through the REST API? Or maybe it's something I could generate from some part of the code in the repository?

2 2

problem with sqlalchemmy
by simo＠oziosi.org Sept. 28, 2026

Sept. 28, 2026

Hi after a pip reinstall, my mailman (3.3.10, on mariadb) fails with: ------------------------------- 2026-09-26 22:08:25 [FALCON] [ERROR] GET /3.1/lists?advertised=true&count=0&page=1 => Traceback (most recent call last): File "/opt/mailman/venv/lib/python3.11/site-packages/falcon/app.py", line 481, in __call__ responder(req, resp, **params) File "/opt/mailman/venv/lib/python3.11/site-packages/mailman/rest/lists.py", line 342, in on_get resource = self._make_collection(request) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/opt/mailman/venv/lib/python3.11/site-packages/mailman/rest/helpers.py", line 171, in _make_collection start, total_size, collection = self._paginate( ^^^^^^^^^^^^^^^ File "/opt/mailman/venv/lib/python3.11/site-packages/mailman/rest/helpers.py", line 153, in _paginate total_size = len(collection) ^^^^^^^^^^^^^^^ File "/opt/mailman/venv/lib/python3.11/site-packages/mailman/utilities/queries.py", line 48, in __len__ .scalars(select(func.count()).select_from(self._query)) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "<sqlalchemy generated _generative() wrapper for sqlalchemy.sql.selectable.Select.select_from>", line 2, in select_from return target(fn, self, *froms) ^^^^^^^^^^^^^^^^^^^^^^^^ File "/opt/mailman/venv/lib/python3.11/site-packages/sqlalchemy/sql/base.py", line 296, in _generative x = fn(self, *args, **kw) ^^^^^^^^^^^^^^^^^^^^^ File "/opt/mailman/venv/lib/python3.11/site-packages/sqlalchemy/sql/selectable.py", line 6631, in select_from self._from_obj += tuple( ^^^^^^ File "/opt/mailman/venv/lib/python3.11/site-packages/sqlalchemy/sql/selectable.py", line 6632, in <genexpr> coercions.expect( File "/opt/mailman/venv/lib/python3.11/site-packages/sqlalchemy/sql/coercions.py", line 434, in expect return impl._implicit_coercions( ^^^^^^^^^^^^^^^^^^^^^^^^^ File "/opt/mailman/venv/lib/python3.11/site-packages/sqlalchemy/sql/coercions.py", line 1287, in _implicit_coercions self._raise_for_expected(element, argname, resolved) File "/opt/mailman/venv/lib/python3.11/site-packages/sqlalchemy/sql/coercions.py", line 705, in _raise_for_expected super()._raise_for_expected( File "/opt/mailman/venv/lib/python3.11/site-packages/sqlalchemy/sql/coercions.py", line 528, in _raise_for_expected raise exc.ArgumentError(msg, code=code) from err sqlalchemy.exc.ArgumentError: FROM expression, such as a Table or alias() object expected, got <sqlalchemy.sql.selectable.Select object at 0x7f1a27269050>. To create a FROM clause from a <class 'sqlalchemy.sql.selectable.Select'> object, use the .subquery() method. (Background on this error at: https://sqlalche.me/e/21/89ve) [26/Sep/2026:22:08:25 +0200] "GET /3.1/lists?advertised=true&count=0&page=1 HTTP/1.1" 500 38 "-" "GNU Mailman REST client v3.3.5" ------------------------------- I tried to add: debug: yes to [database] and [logging.database] level: debug path: mailman.database.log But i cannot get more details when the error happens. Any hints to help me debug the problem? many thanks, simon

5 5