Filter who can send on mailman3 list?
Hi!
I have a mailman3 mailing list which I admin, and I would like setup the following rule.
Me and 3 of my team mates (who are part of the mailman3 list) should be able to send on the list as well as an "no-reply" user, others on the mailman3 list should only be able to receive the e-mails (and of course be able to unsubscribe themself).
Both the: "Default action to take when a non-member posts to thelist" and the "Default action to take when a member posts to the list" is set to "Default processing", and I tried to setup actions in the "Header Filters" - but no really success.. :-(
So what I basically try do achieve is to have only the following addresses to be allowed to send announcements (e-mails) on the mailman3 list, and all others that are member of the mailman3 list will just receive the e-mails. The usual "announcements" are sent out as the "no-reply" address (that actually are not really part of the mailman3 list) ;-)
no-reply@abc.com ("fake address" that actually are not really part of the mailing-list) peter@abc.com david@abc.com marcus@abc.com
How to achieve this kind of filter with mailman3?
On 4/5/21 6:43 AM, marcus.granath@gmail.com wrote:
So what I basically try do achieve is to have only the following addresses to be allowed to send announcements (e-mails) on the mailman3 list, and all others that are member of the mailman3 list will just receive the e-mails. The usual "announcements" are sent out as the "no-reply" address (that actually are not really part of the mailman3 list) ;-)
no-reply@abc.com ("fake address" that actually are not really part of the mailing-list) peter@abc.com david@abc.com marcus@abc.com
How to achieve this kind of filter with mailman3?
Header filters is not the way to do this.
First set both "Default action to take when a non-member posts to thelist" and "Default action to take when a member posts to the list" to either Hold for moderation or Discard (no notification). Reject is not recommended because of backscatter from spam posts with spoofed From: addresses.
Then ensure all members Moderation Action is set to None or List Default (two names for the same thing).
Now, no one can post. To allow your set of users to post, you have choices. The easy way but not secure against spoofing is to set the Maderation Action for the three allowed members to List Default and toi create a non-member for no-reply@abc.com and set it's moderation action to List Default.
The more secure way is to leave everyone moderated, set a moderator password for the list and post with an Approved: header or pseudo header. See <https://docs.mailman3.org/projects/mailman/en/latest/src/mailman/rules/docs/approved.html>.
-- Mark Sapiro <mark@msapiro.net> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan
Thank you @Mark Sapiro for you quick reply.
So by doing the following settings, then ALL the messages sent to the list will be hold for moderation:
Settings -> Message Acceptance
"Default action to take when a member posts to the list": "Hold for moderation" "Default action to take when a non-member posts to thelist": "Hold for moderation"
Members -> Administration options -> Moderation: "List default"
BUT I don't really follow you when you say that those 3 allowed users to send on the list should also have set to "Moderation: List default"? How will they then be able to send messages, or what do I misunderstand here?
Also, how do I create a "non-member" user "no-reply@abc.com"? Do you mean that I do that under the "Mass operations -> Mass subscriptions" ? Can I add a "fake address" there?
Marcus,
I'm with you in not understanding Mark's instructions -- I think there is a typo somewhere :-)
To create a non-member user in Mailman, Go to the List Settings page in Postorius, select Non-members from the User menu, and add a user there. Of course, that does nothing for your email system, which must also be configured.
I would very strongly encourage you to have the no-reply address be 'real' in the sense that the email system will agree it is valid and deliverable, or some recipient email servers will refuse to accept email from that address, either.
The right thing is for email to that address accepted as normal and then immediately discarded. You could send back a message "this address is not monitored" but there is an issue with spam backscattering which makes that less good than it first seems.
Regards,
Ruth
On 06/04/2021 10:00, marcus.granath@gmail.com wrote:
Thank you @Mark Sapiro for you quick reply.
So by doing the following settings, then ALL the messages sent to the list will be hold for moderation:
Settings -> Message Acceptance
"Default action to take when a member posts to the list": "Hold for moderation" "Default action to take when a non-member posts to thelist": "Hold for moderation"Members -> Administration options -> Moderation: "List default"
BUT I don't really follow you when you say that those 3 allowed users to send on the list should also have set to "Moderation: List default"? How will they then be able to send messages, or what do I misunderstand here?
Also, how do I create a "non-member" user "no-reply@abc.com"? Do you mean that I do that under the "Mass operations -> Mass subscriptions" ? Can I add a "fake address" there?
Mailman-users mailing list -- mailman-users@mailman3.org To unsubscribe send an email to mailman-users-leave@mailman3.org https://lists.mailman3.org/mailman3/lists/mailman-users.mailman3.org/
-- Software Manager & Engineer Tel: 01223 414180 Blog: http://www.ivimey.org/blog LinkedIn: http://uk.linkedin.com/in/ruthivimeycook/
On 4/6/21 2:00 AM, marcus.granath@gmail.com wrote:
BUT I don't really follow you when you say that those 3 allowed users to send on the list should also have set to "Moderation: List default"? How will they then be able to send messages, or what do I misunderstand here?
My fault. Sorry for the confusion. I wrote:
Now, no one can post. To allow your set of users to post, you have choices. The easy way but not secure against spoofing is to set the Maderation Action for the three allowed members to List Default and toi create a non-member for no-reply@abc.com and set it's moderation action to List Default.
That should have said "set the Moderation Action for the three allowed members to Defer or Default Processing (again two names for the same thing) and to create a non-member for no-reply@abc.com and set it's moderation action also to Defer or Default Processing."
-- Mark Sapiro <mark@msapiro.net> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan
Mark Sapiro wrote:
and to create a non-member for no-reply@abc.com and set it's moderation action also to Defer or Default Processing."
Thanks Mark Sapiro, now I got the "Moderation Action" set correct for the real users. BUT, I'm sorry to say that I'm still confused regarding how to add the "non-member" user ("no-reply@abc.com") - can you please guide some more here also? ;-)
The whole idea (the Use Case) here is that we want our list to be an "announcement" list that will send announcement and the subscribers should not be able to send announcements themself - and usually the "announcements" are sent out with an e-mail address (i.e "no-reply@abc.com") that I just "dress" with a "special" name and "no-reply" address.. ;-)
On 4/6/21 11:25 AM, Marcus Granath wrote:
Thanks Mark Sapiro, now I got the "Moderation Action" set correct for the real users. BUT, I'm sorry to say that I'm still confused regarding how to add the "non-member" user ("no-reply@abc.com") - can you please guide some more here also? ;-)
As Ruth said in her reply at <https://lists.mailman3.org/archives/list/mailman-users@mailman3.org/message/3TBKBC4UXZCTM2FTKGL5SUJXYGHVCIJK/> in Postorius, go to the Users dropdown and select Non-Members. On that page there is a form to enter Email Address and Display Name with an Add nonmember button.
-- Mark Sapiro <mark@msapiro.net> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan
Mark Sapiro wrote:
As Ruth said in her reply at https://lists.mailman3.org/archives/list/mailman-users@mailman3.org/message/... in Postorius, go to the Users dropdown and select Non-Members. On that page there is a form to enter Email Address and Display Name with an Add nonmember button.
Sorry, but actually I can not find any "Users dropdown" to select "Non-Members" at any Postorius in my web interface. :-( Maybe, could it be that I am actually not the admin of the mailman3 server, I'm "just" the admin of my mailman-list - so just admin for my mailman-list and not for the mailman server? Maybe then I need to try contact our mailman server admin, or? Or any other way for me as just an mailman-list admin to add this "Non-Member"?.... ;-)
Marcus Granath writes:
Sorry, but actually I can not find any "Users dropdown" to select "Non-Members" at any Postorius in my web interface. :-( Maybe, could it be that I am actually not the admin of the mailman3 server, I'm "just" the admin of my mailman-list - so just admin for my mailman-list and not for the mailman server?
I think if you are *moderator* you should be able to see the Subscribers list, but maybe you need to be *list owner*. You definitely do not need to be *server admin* to see the Subscribers list.
I'm not sure if the *server admin* has a way to see a sitewide Users list (other than using the mailman command line tool or directly from the database).
Is it possible that you have multiple logons on the server, one of which you have subscribed to lists and the other is a user with administrative privileges? I know that burns me regularly.
Steve
On 4/7/21 1:32 AM, Marcus Granath wrote:
Sorry, but actually I can not find any "Users dropdown" to select "Non-Members" at any Postorius in my web interface. :-(
It's one of the various tabs across the top of the page. What Postorius
version is this? Seversal versions back, I think it was called members
rather than users. In current Postorius, the tabs are
Info
Subscription requests
Held messages
Users
Templates
Settings
Mass operations
Ban List
Header filters
Delete
As I said, Users used to be Members and Templates was added at
some point, but that's the general idea.
Maybe, could it be that I am actually not the admin of the mailman3 server, I'm "just" the admin of my mailman-list - so just admin for my mailman-list and not for the mailman server?
As Steve said, the list admin should see all those.
-- Mark Sapiro <mark@msapiro.net> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan
Marcus,
One of the MM3 bugs is the inability of list moderators to see the list of members of the list they are moderating. This in spite of MM3 having an option to allow moderators to see the list's members. The bug has been reported.
My own moderators regularly request their lists and I have to log in to the server directly and use the mailman core API to get the list and then used mailx to send it to them.
Yours,
AllanOn 4/7/21, 11:58 , "Mark Sapiro" <mark@msapiro.net> wrote:
On 4/7/21 1:32 AM, Marcus Granath wrote:
>
> Sorry, but actually I can not find any "Users dropdown" to select "Non-Members" at any Postorius in my web interface. :-(
It's one of the various tabs across the top of the page. What Postorius
version is this? Seversal versions back, I think it was called `members`
rather than `users`. In current Postorius, the tabs are
Info
Subscription requests
Held messages
Users
Templates
Settings
Mass operations
Ban List
Header filters
Delete
As I said, `Users` used to be `Members` and `Templates` was added at
some point, but that's the general idea.
> Maybe, could it be that I am actually not the admin of the mailman3 server, I'm "just" the admin of my mailman-list - so just admin for my mailman-list and not for the mailman server?
As Steve said, the list admin should see all those.
--
Mark Sapiro <mark@msapiro.net> The highway is for gamblers,
San Francisco Bay Area, California better use your sense - B. Dylan
_______________________________________________
Mailman-users mailing list -- mailman-users@mailman3.org
To unsubscribe send an email to mailman-users-leave@mailman3.org
https://lists.mailman3.org/mailman3/lists/mailman-users.mailman3.org/It seems like the version used is: Postorius Version 1.1.2
The menus I can see are the following:
Info Subscription requests Held messages Members Settings Mass operations Banned addresses Header filters Delete list
And from the "Members" I can select "Subscribers", "Moderators", "Owners" - so I can manage to delete "subscribers" and add somebody as Moderator or Owner for my list. But I cannot find anywhere to set or add something like "non-member".
What I basically want to achieve is that my "sendmail" script (executed from linux) will send announce-mails to this mailing list - and will set an "pseudo-address" (not my own name and address) as sender of this e-mail, i.e "ABC Announcement <no-reply@abc.com>" - and to get this "pseudo-mail" to be one of the accepted users (together with me and some team mates with real addresses) to send on the list - one option I understood was to use the "non-member" user for this "ABC Announcement <no-reply@abc.com>".
But in my web-interface (as described above), I cannot find where to add and manage such user (non-member). Or can I use some other API (then the web-page) to do that kind of operation? ;-)
On 4/7/21 11:27 PM, Marcus Granath wrote:
It seems like the version used is: Postorius Version 1.1.2
Current Postorius is 1.3.4. If you can't upgrade, someone with shell
access to the server can do this with mailman shell
What I basically want to achieve is that my "sendmail" script (executed from linux) will send announce-mails to this mailing list - and will set an "pseudo-address" (not my own name and address) as sender of this e-mail, i.e "ABC Announcement <no-reply@abc.com>" - and to get this "pseudo-mail" to be one of the accepted users (together with me and some team mates with real addresses) to send on the list - one option I understood was to use the "non-member" user for this "ABC Announcement <no-reply@abc.com>".
But in my web-interface (as described above), I cannot find where to add and manage such user (non-member). Or can I use some other API (then the web-page) to do that kind of operation? ;-)
Just add the no-reply@abc.com address as a member and set its delivery status to disabled.
-- Mark Sapiro <mark@msapiro.net> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan
participants (6)
-
Allan Hansen -
Marcus Granath -
marcus.granath＠gmail.com
-
Mark Sapiro -
Ruth Ivimey-Cook -
Stephen J. Turnbull