Block members from sending cc's and bcc's

Hi everyone,
Using Mailman 3 with Affinity web interface and we want to stop our members from sending to cc: or bcc:
We've found the Header Filter and cc and bcc appear in it. Tried to configure it to "hold for moderation," but it hasn't worked. Partly because we don't understand what to put in the Pattern input box. I put in cc: because it requires something.
Can anyone advise?
Cheers, Cathryn

On 6/23/25 10:04, Cathryn McGuire wrote:
Using Mailman 3 with Affinity web interface and we want to stop our members from sending to cc: or bcc:
We've found the Header Filter and cc and bcc appear in it. Tried to configure it to "hold for moderation," but it hasn't worked. Partly because we don't understand what to put in the Pattern input box. I put in cc: because it requires something.
The pattern box contains a regular expression that matches the value in
the header that you want to apply the action to. What you want is a
pattern that matches anything, e.g., .*
to match zero or more
occurrences of any character.
-- Mark Sapiro <mark@msapiro.net> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan

What you want is a pattern that matches anything, e.g., .* to match zero or more
occurrences of any character.
Please confirm that setting up a rule for cc's in Header Filter to "hold for moderation," it should block the member from sending a cc?
And, for the pattern, are you suggesting I use ".*" with cc: as the regexprs? Or, what exactly do I use under as a regular expression? Cathryn

Please confirm that setting up a rule for cc's in Header Filter to "hold for moderation," it should block the member from sending a cc?
It will hold for moderation any message containing a Cc: header. It won't prevent the moderator from accepting the message.
And, for the pattern, are you suggesting I use ".*" with cc: as the regexprs? Or, what exactly do I use under as a regular expression?
Use cc as the header and the two characters .* as the pattern (or whatever affinity calls it). See https://docs.python.org/3/library/re.html for information about Python regular expressions.
-- Mark Sapiro <mark@msapiro.net> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan

Sorry about the delay in getting back. Truth be known, I was a little burnt out from the merging of MM2 to MM3 and thought I might deal with it all later. Well, now is later.
The .* pattern did not do the job of blocking cc's and bcc's in the Header Filters of Affinity. It lets them go through, even as hold for moderation has been chosen.
I've asked EMWD to advise me because I think Affinity is very new, even though Brian Carpenter was developing it in 2020, is that correct?
If you have any more thoughts about this issue, I'd appreciate it.
Cheers, Cathryn

On 7/18/25 5:37 PM, Cathryn McGuire wrote:
The .* pattern did not do the job of blocking cc's and bcc's in the Header Filters of Affinity. It lets them go through, even as hold for moderation has been chosen.
First, you can't filter on Bcc because Bcc is removed from the message before being sent. That's the whole point of Bcc. In otherwords, if I mail To: the list with Bcc: to others, the list never sees that Bcc: header and can't filter on it.
As far as Cc is concerned, if in Header filters you have a rule with 'cc' in the header box and '.*' in the pattern box, the action box action should be applied to any message with a Cc: header.
I've asked EMWD to advise me because I think Affinity is very new, even though Brian Carpenter was developing it in 2020, is that correct?
Affinity is not new, but it is a proprietary product of EMWD. If you have set the header filter as above and it is not working, only EMWD can help with that.
-- Mark Sapiro <mark@msapiro.net> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan

On 6/23/25 10:04, Cathryn McGuire wrote:
Hi everyone,
Using Mailman 3 with Affinity web interface and we want to stop our members from sending to cc: or bcc:
You won't ever see a Bcc: header in mail to a list. The whole point of Bcc: is to not expose the additional recipients or the fact that there were additional recipients so the sending MUA includes the Bcc recipients in the SMTP RCPT TO commands, but drops the Bcc: header from the message.
I.e., There is no way to know whether the original sender included Bcc: recipients or not.
-- Mark Sapiro <mark@msapiro.net> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan
participants (2)
-
Cathryn McGuire
-
Mark Sapiro