Hyperkitty failure "Forbidden" - Please check IP-Address assigned to MAILMAN_ARCHIVER_FROM in the settings file
Hi together,
i noticed an error during upgrade, which i did not noticed before, but i see no relation to the upgrade itself.
Nevertheless the message is very clear, i am not able to solve this issue. My problem ist, that hyperkitty is not working. In mailman.log, you can see this message: Jun 29 13:38:25 2022 (28) ACCEPT: <006501d88bac$b21201f0$163605d0$@mydomain> Jun 29 13:38:28 2022 (32) HyperKitty failure on https://mydomain/hyperkitty/api/mailman/urls: <html><title>Forbidden</title><body> <h1>Access is forbidden</h1><p>Please check the IP addresses assigned to MAILMAN_ARCHIVER_FROM in the settings file. </p></body></html> (403)
I´m using setting_local.py in web-part with following code: # Try to get the address of Mailman Core automatically. MAILMAN_HOST_IP = gethostbyname('mailman-core') MAILMAN_ARCHIVER_FROM = (os.environ.get('MAILMAN_HOST_IP', gethostbyname(os.environ.get('MAILMAN_HOSTNAME', 'mailman-core'))),)
Debugging inside my docker-container, this python-code works fine (hostname etc. are correct): bash-5.0# python3 test.py MAILMAN_HOST_IP 172.18.0.4 MAILMAN_ARCHIVER_FROM ('172.18.0.4',) bash-5.0#
I also tried to set MAILMAN_ARCHIVER_FROM directly to the IP not using the list, but there was no change.
I think, the problem is located at another place and the error-message took me to the wrong place.
Does anybody has an idea where to look at?
Best regards, chrclaus
I got it by myself, but i´m not sure if i have understood my fix completely. I found an error in mailmanweb.log: ERROR 2022-06-29 17:46:58,911 403 hyperkitty.views.mailman Access to the archiving API endpoint was forbidden from IP 172.18.0.2, your MAILMAN_ARCHIVER_FROM setting may be misconfigured
This ip is neither from mailman-core nor mailman-web - this is my reverse-proxy. A try to add this ip to ALLOWED_HOSTS solves the problem. I have no glue why hyperkitty is adressed by the reverse-proxy.
Best regards, chrclaus
participants (1)
-
christopher.claus＠tgcamberg1848.de