- Mailman-users - lists.mailman3.org

security app causing django Internal Server Error: /archives/search emails
by sun zi Sept. 5, 2024

Sept. 5, 2024

Greetings, I have set up a few lists and all seems to be working as expected, however I get a large number of emails due to internal server errors received when my security application is testing exploits to list URLs such as the following: https://<mylistdomain>/archives/search?sort=177120&cauft=&page=1&q=../../../../../../../../../../tmb/wditeteet424465304.txt. Is there any django logging filter changes that can be made to avoid receiving these emails? Any assistance would be greatly appreciated. Thank you!

3 3

Assistance Needed for Ubuntu 22.04 Mailman3 Installation and Configuration
by smiithjohn90＠gmail.com Aug. 31, 2024

Aug. 31, 2024

Hello Everyone, I'm trying to install Mailman3 on an Ubuntu 22.04 server right now, and I've run across a few obstacles that I'd like help with. I've followed the installation instructions, but I'm having trouble in a couple places, so I was hoping an experienced someone might help me out. This is what I have completed thus far: - I used the apt-get package manager to install Mailman3. - PostgreSQL was configured as the database backend. - Postfix was installed and set up to function as the Mail Transfer Agent (MTA). - Assemble Postorius, Hyperkitty, and the Mailman3 core. Problems I'm Having: Postorius and Hyperkitty Connectivity: I'm having problems making sure that the Mailman core is correctly connected to Postorius and Hyperkitty. I get a 502 Bad Gateway error when I try to access the web interfaces. Despite checking my specifications, I am unable to identify the problem. Problems with Email Delivery: I'm also having trouble with email delivery. Although Mailman appears to be receiving emails, it is not appearing to be sending any out. I think there might be a Postfix problem, but I'm not sure how to solve it. Generally Suggested Practices: Are there any particular security best practices I should be aware of when it comes to Mailman3 installations? I want to confirm that my configuration is both performance- and security-optimized. https://lists.mailman3.org/archives/list/mailman-users@mailman3.org/thread/… https://www.igmguru.com/salesforce/salesforce-developer-training https://lists.mailman3.org/archives/list/mailman-users@mailman3.org/thread/… I would be grateful for any advice or resources! It would be really beneficial if someone with a similar setup could share their settings or troubleshooting procedures. Thank you in advance.

2 1

Dist. List forwarding and DMARC Reject circumvention. Will this pattern work?
by titan160＠hotmail.com Aug. 26, 2024

Aug. 26, 2024

I would be grateful if someone could vet and verify (or guide otherwise) the following pattern please. With the major mail vendors move to DMARC - Full Reject, I have a small challenge. - We have a number of 365 Distribution List addresses. - These lists accept email from anyone and, currently, then forward those emails onto list members. - List members, however, are NOT necessarily email addresses within the list's mail domain. They might be outlook.com, Gmail, yahoo, Hotmail, username(a)local.ISP. Consequently, DMARC Reject policies are causing these emails to be marked spam as the 365 Dist. List forwarding is not doing any header manipulation. My thinking is: - I could set up a Mailman list (elists.mydomain.com) alongside the 365 Exchange mail domain (mydomain.com) - I leave inbound mail deliver to the 365 Dist. lists. - I reconfigure the (mylist(a)mydomain.com) Dist. Lists to fwd to a similarly-named Mailman address at the email sub-domain (mylist(a)elists.mydomain.com) - The Mailman list, by virtue of having to use the 365 MTA, should be able to accept all inbound from the list (mylist(a)mydomain.com) - Mailman would then need to re-write the mail headers such that the inbound email to-be-forwarded from the Mailman list, both appears to come from the (mylist(a)mydomain.com) address, and also has the 365 'mydomain.com' SPF and DKIM records. And given Mailman has to use the 365 MTA, it would actually be coming from that main mail domain. - Somewhere in there, the original sender's email address would need to be included, such that a Reply-to-All from a receiving List member would not only go back to the List, but also the original sender. My thinking is that with this pattern, I don't need to worry about inbound emails to the list address as that would simply continue to function as normal, and fwdd mails from the List to recipient list members would not be marked spam as the headers would all be good. Is my thinking good? Or am I out of my cotton-pickin' mind?

2 1

Issue with mailman auto subscription
by Francisco Paco López Aug. 26, 2024

Aug. 26, 2024

Hello, I migrated my mailman 2 instance to mailman 3 some months ago. Some users have been reporting lately that auto subscriptions don't work anymore. In the affected list both the Subscription and un subscription policies are open, which means that normally a user that sends a "subscribe" mail automatically subs to the list. This works fine for users that have been subscribed in the past but not for new users. The latter get a mail stating that a confirmation is needed ("Your confirmation is needed to join the XXXX(a)my.lists.com mailing list"). I see nothing out of the ordinary in the mailman.log file and co. Any ideas? Thanks a lot in advance [SIB logo] Francisco López Ayuso System Administrator SIB | Swiss Institute of Bioinformatics Quartier Sorge, bâtiment Amphipôle - CH 1015 Lausanne - Switzerland t +41 21 692 40 36 Francisco.Lopezayuso(a)sib.swiss - www.sib.swiss The information in this e-mail, and those ensuing, is confidential and may be legally privileged. It is intended solely for the addressee. If you are not the intended recipient, please destroy this message and notify the sender immediately.

2 1

Mailman config is not being applied
by roberto.blandino＠ibw.com.ni Aug. 26, 2024

Aug. 26, 2024

Debian: 11.10 GNU Mailman 3.3.3 (Tom Sawyer) Server version: Apache/2.4.61 (Debian) PHP 7.4.33 (cli) (built: Apr 12 2024 00:02:16) ( NTS ) I have a list and when i add a no member on the web interface and on the Non-Member options i set "Administration options" to "Accept skip other rules" when i send email from that address it keeps being moderated and when i open again the options it keeps saying "Default by list" The options are not being write on changes

2 1

systemd unit file modification: start / stop both services at once
by Ron / BCLUG Aug. 24, 2024

Aug. 24, 2024

Hi, I've made a slight adjustment to my systemd unit files for Mailman3 such that I only ever need to start / restart / stop mailman3.service and mailman3-web.service will have the same action automatically applied to it. It's called `Upholds` and binds the 2 services together. I humbly suggest it become the default. In my case, I added a file here: /etc/systemd/system/mailman3.service.d/override.conf with these lines: [Unit] Upholds = mailman3-web.service Before = mailman3-web.service Now, starting mailman3.service will *also* start mailman3-web.service. Restarting mailman3.service will *also* restart mailman3-web.service. Stopping mailman3.service will *also* stop mailman3-web.service. Those 3 lines could be placed in mailman3.service, or something like `UpheldBy=mailman3.service` could go in the mailman3-web.service. Hopefully this would make things slightly better for Mailman3 admins out there. rb

1 0

502 bad gateway when unsubscribing users
by laura_thomas＠fas.harvard.edu Aug. 22, 2024

Aug. 22, 2024

Hi everyone, I moderate several email lists for a university using Postorius 1.3.4.1. I've been trying to update our lists by removing members who have left the department. However, when I click on a name and then "Unsubscribe Selected," I always get a 502 Bad Gateway message, and I'm unable to remove any users from the list. This has happened on every attempt across multiple users on multiple mailing lists. Does anyone know what might be going on? I appreciate the help!

2 1

Could You Please Guide Me As A Newbie?
by smiithjohn90＠gmail.com Aug. 21, 2024

Aug. 21, 2024

Hello, everyone! This is my first post after just joining this discussion, so please forgive me and provide kind assistance if I have posted in the wrong subsection! I am new here but a real enthusiast and loving this community so far. I have a background in teaching coding and education, and I feel I could help with documentation, at least for starters. As a new member of this forum, I wish to share and gain some knowledge. I am looking forward to creating my own discussions to resolve my queries and gain more insights. I have participated in various discussions, which have definitely helped me a lot. Also, what factors should be considered when choosing the appropriate category for a post? Thank you in advance.

1 0

trying to understand ARC
by Johannes Rohr Aug. 18, 2024

Aug. 18, 2024

Dear all, I'm confused about how to enable ARC signing and how it is related to DKIM. As it stands, the contents of the section [ARC] in mailmain.cfg are [ARC] enabled: yes authserv_id: *******.org # Should this be the address of the mailserver (postfix) instead? privkey: /etc/mailman3/***.org.mailman.key # Shouldn't this point to the same private key used by rspamd for DKIM signing? selector: mailman # shouldn't this point to the same selector as rspam, or should it be separate? If so, should I also set up a separate TXT entry domain: ****.org # mailman serves multiple domains. Should all be there? Should the exact subdomain be there? Finally, how come that at present, mailman does NOT sign the messages? They come with the original DKIM signature, but there is no ARC signature. Unfortunately, the official documentation says very little about ARC, so I have to post my possibly stupid questions here. Johannes

1 1

Legit login attempts yield, "An error occurred while processing your request."
by Greg Newby Aug. 14, 2024

Aug. 14, 2024

Hi friends. Following up on my message over the weekend about getting web (Django) logins for users who were ported from MM2 to MM3, I now have some people trying to create a new username. Something broke following a system update and reboot. MM3 is installed using the venv method, and the services (mailman and mailman-web) seem to be running ok. Mailing list delivery is happening as usual. I've now come upon a few related situations where a 500 error results, "Server error. An error occurred while processing your request." My primary question is: *How can I find out what's causing this*? I've looked in all the MM and web logfiles, by "tail -f" while generating the error, and nothing is logged there. Apache logs shows something like this: x.x.y.y- - [13/Aug/2024:21:46:41 -0700] "POST /accounts/password/reset/ HTTP/1.1" 500 1448 "https://lists.pglaf.org/accounts/password/reset/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36 Edg/127.0.0.0" I've come across this error while trying to do authentication-related activities that worked before the reboot: - "Forgot password" (happens whether or not the entered email existed in MM2 or already exists in MM3) - Sign up (ditto) - Email unsubscribes gave a verification email, but then didn't unsubscribe the address (might not be the same problem) Thanks for any breadcrumbs that might guide me to the solution. ~ Greg

2 1