- Mailman-users - lists.mailman3.org

Postorius not HTML-decoding < to "<" characters
by Ron / BCLUG Nov. 10, 2024

Nov. 10, 2024

Andy Smith wrote on 2024-10-30 20:59: > # Block access to the signup form from Tor exit nodes. > <Location /mailman/accounts/signup> > <RequireAll> > Require all granted > Include /etc/apache2/tor-exit-list.conf > </RequireAll> > </Location> If we look at the above message, there are less-than and greater-than symbols around the Apache keywords in the email as expected. If we look at the archived version of the message, we see a slightly mangled representation: # Block access to the signup form from Tor exit nodes. <Location /mailman/accounts/signup> <RequireAll> Require all granted Include /etc/apache2/tor-exit-list.conf </RequireAll> </Location> https://lists.mailman3.org/archives/list/mailman-users@mailman3.org/message… Hopefully I've assigned the blame to Postorius accurately and no formatting nor archiving issues make the issue difficult to understand. Thanks.

3 5

Create an eml command in a plugin
by antoine.depoisier＠ikmail.com Nov. 9, 2024

Nov. 9, 2024

I try to create an EML command to allow moderators to accept a subscription request made by an address. I created this command in CLI first, to test if it works, and it works well except to send the welcome message. After that, I tried to create the EML command in my plugin, and when I'm testing this command, nothing happens. Also, when using the command EML help, my command is not shown on the email sent. Maybe I missed something to add in the configurations files. Should I add some configuration files for this command ? Here are the working tree command_eml_addmember_mailman_plugin __init__.py commands __init__.py eml_accept.py cli_test_accept.py

2 1

Postorius admin/user guide
by Florin Pasăre Nov. 8, 2024

Nov. 8, 2024

Hello, We're trying to update mailman to version 3 from version 2, and I can't seem to find some non-technical guide for Postorius, something like an owners manual for all the configurations available in Postorius. Is there such a thing? Thank you, Florin

3 2

Members (and moderators) can't view the list of members.
by mrl＠psfc.mit.edu Nov. 7, 2024

Nov. 7, 2024

I installed Mailman 3 almost 2 years ago. I only now noticed that members of a mailing list can't view the list of members. Even moderators can't see the list. Only Owners. The error message is "You do not have permissions to visit this page." Mailman Core Version GNU Mailman 3.3.8 (Tom Sawyer) Mailman Core API Version 3.1 Mailman Core Python Version 3.10.12 (main, Jun 11 2023, 05:26:28) [GCC 11.4.0] Postorius Version 1.3.8 Any ideas? I did make a few "minor" changes to the code, but hopefully it didn't cause this problem. What file(s) contains the code that checks for permissions? Or maybe there is a config file? I also notice by default, for all users, in their "Global Mailman Preferences", the default setting for "Hide Address" is "Yes". How can I change that to be "No". And can I reset that setting for all my present users? Thanks. - Mark

2 1

How to keep virtualenv install secure?
by Lichtinger, Bernhard Nov. 7, 2024

Nov. 7, 2024

Hi, I am looking for some advice: If we use the virtualenv install method, how does one keep track of security updates for all the installed dependencies? I can think of: - Upgrade regularly all installed packages inside the virtualenv. This might break mailman3 if there are incompatible updates. - Try to track all dependencies and check if there are security updates published. This might be impossible to achieve. - Security updates are so rare, we do not need to bother. ;) Thanks, Bernhard

3 2

Abusive user creation - ideas for mitigating
by Andy Smith Nov. 7, 2024

Nov. 7, 2024

Hi, My mailman3.auth_users table contains 131 rows, of which 113 of them were created in the last week. All of these users have a 10 character long random string of lowercase letters as their chosen username. Their email addresses are all over the place. I only noticed this was happening because an unusual number of the subscription confirmation messages were bouncing back to me as postmaster, and I saw the unlikely user names. I matched up some of the date_joined timings with logs of HTTP POST to /mailman/accounts/signup and every single one so far was a unique IP address. So I am not going to get very far with firewalling. Does anyone have any suggestions what I can do to avoid this? Specifically what I would like to avoid is sending a confirmation email to these potentially innocent addresses. … Hmm, actually I've just noticed that all of them are Tor exit nodes. Looks like I could probably autogenerate an Apache ACL that lists all Tor exit nodes and bans them from posting to /mailman/accounts/signup. Thanks, Andy

2 3

Backup and restore a single list
by sherin＠raidm.com Nov. 6, 2024

Nov. 6, 2024

Hello, I am new to mailman3 . I am looking for the procedure to backup and restore a single mailing list from mailman3. If any one know the procedure or the documentation , please point me

3 7

Where to find disabled members?
by Bill Oliver Nov. 5, 2024

Nov. 5, 2024

Now that I have mailman running smoothly, I'm having to deal with a few other issues. When I changed vendors for my vps, my vendor gave me a static IP address that was apparently run by Satan himself. The ip address is -- or was -- on a number of blacklists. I have spent the past couple of weeks going through various appeals processes to get whitelisted, and I think I'm in good shape. In the meantime, a fair number of subscribers have been disabled. When I look at Postorius -> Settings -> Bounce processing, I see all of the policies I can play with, but I don't see how to a) See who is disabled, and b) un-disable them by hand or... do I just have to wait seven days for them to automatically get un-disabled? Thanks! billo

2 2

member appears twice in list - how?
by Jose Bernal Nov. 5, 2024

Nov. 5, 2024

I've got a list member showing up twice in a list (same email address). Can't use the GUI to remove the member from this list (get a 503 error) Screenshots attached, underlying database query reveals no duplicates. Wondering how this is possible or where else I should be looking to resolve this duplicate before I simply remove their entry from the members table altogether. Thank you, --------------------- José Bernal Web/Application Engineer Cell 541-228-8481 jbernal.web.dev(a)gmail.com ___________________________________________ Mailman's content filtering has removed the following MIME parts from this message. Content-Type: image/png Name: Screen Shot 2024-11-05 at 10.53.55 AM.png Content-Type: image/png Name: Screen Shot 2024-11-05 at 10.59.12 AM.png Replaced multipart/alternative part with first alternative.

2 1

"held for moderation" - alias domain details sought
by Greg Newby Nov. 5, 2024

Nov. 5, 2024

Hi friends. I've viewed this old thread: https://lists.mailman3.org/archives/list/mailman-users@mailman3.org/thread/… and documentation here: https://docs.mailman3.org/projects/mailman/en/latest/src/mailman/docs/mta.h… (and the Postfix docs it links to). Those documents don't seem to guide my situation, or maybe I just need a more specific example. The problem is that when messages are delivered to the alias domain, they are held for moderation. I.e., mail to the alias domain like testlist(a)domain.tld is held for moderation, but mail from the same subscribed, non-moderated user to testlist(a)lists.domain.tld is posted immediately without moderation. I wonder whether my main domain needs to be @domain.tld and my alias domain needs to be @lists.domain.tld - is that what I should try? Or, am I not setting up the alias domain correctly? Details: I'm writing to ask for advice so that mailman messages to address(a)domain.tld can also be sent to address(a)lists.domain.tld. There are various other non-Mailman addresses (local Unix accounts and aliases) handled by @domain.tld as well as @otherdomain.tld on the same server. I have a running 3.3.10 server (venv, using Postfix and PostgreSQL under Ubuntu 24.04LTS). The configured domain is of the form: lists.domain.tld and it's working ok. I put this in /etc/aliases and it seems to work, to forward messages from testlist(a)domain.tld to testlist(a)lists.domain.tld: testlist: testlist(a)lists.domain.tld I know it works because I see it in MM3's smtp.log and mailman.log, including a line like this in mailman.log: Oct 12 21:12:27 2024 (2560960) HOLD: testlist(a)lists.domain.tld post from gbnewby(a)petascale.org held, message-id=< CANLuyJZd8NNn5rOLe3XUhooG9F33U_7VOQXrS-7Z241koAV_Ww(a)mail.otherdomain.com>: Message has implicit destination And, indeed, the message is held for moderation. In the MM3 configuration panel for Domains ( https://lists.domain.tld/mailman3/domains/) I have put "domain.tld" in the "Alias domain" field. Thanks for any guidance. I appreciated seeing the recent threat about "redirecting -bounces replies" which also addresses alias domains. ~ Greg

3 4