Search results for "sapiro" - lists.mailman3.org

[MM3-users] Re: PSA: Avoiding spam-scanning outgoing mailman3 mail

by Mark Sapiro

On 5/8/20 2:11 PM, Mark Dadgar wrote: > > The easy fix was to edit the [mta] setting in mailman.cfg to deliver email via the submit port instead, which has no filtering applied to it: > > smtp_host: localhost > # using the submit port bypasses spamassassin filtering on outgoing list email > smtp_port: 587 > smtp_user: mm3send <— I created this user for this purpose > smtp_pass: <password-for-mm3send-user> > > This works great and can be applied to any email filtering. We tend to do this differently. For example, on mail.python.org which currently has 261 Mailman 2.1 lists and 134 Mailman 3 lists and sends about 135,000 individual messages per day from the two Mailman instances, we define in /etc/postfix/master.cf 127.0.0.1:8026 inet n - - - - smtpd -o smtpd_authorized_xforward_hosts=127.0.0.0/8 -o mynetworks=127.0.0.0/8 -o smtpd_recipient_restrictions=permit_mynetworks,reject -o smtpd_client_restrictions= -o smtpd_helo_restrictions= -o smtpd_sender_restrictions= -o smtpd_data_restrictions= -o receive_override_options=no_unknown_recipient_checks -o smtpd_milters=inet:127.0.0.1:8891 Then port 8026 only accepts locally generated mail and only does dkim signing (milter on port 8891) and essentially no other checks. Then in the [mta] section in mailman.cfg we only need smtp_port: 8026 -- Mark Sapiro <mark(a)msapiro.net> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan

5 years, 4 months

[MM3-users] Re: Database Schema - v3.2.1 to v3.3.3

by Mark Sapiro

On 4/4/23 21:28, Dave Hall via Mailman-users wrote: > Hello. > > Have 4 Debian servers running Mailman3 v3.2.1 and sharing the same external > MySql databases for Mailman3 and Mailman3-web. I am in the process of > migrating to v3.3.3. It would be easiest to perform this upgrade one > server at a time, but this would mean that for a short time I would have > v3.2.1 and v3.3.3 using the same databases. > > I am wondering if there are any MySql schema differences between the two > versions. If there are, having the two different versions 'cohabitating' > won't work.. As far as the Mailman3 database is concerned there are at least 3 migrations between 3.2.1 and 3.3.3 in mailman/database/alembic/versions. Namely: 2d2d0ef0828f_add_tag_column.py, 83339e4039da_add_usenet_watermark.py and d151c0b8d6f7_bounce_parameters.py. As far as Mailman3-web is concerned, this is presumably a Debian/Ubuntu Mailman3-web package upgrade. There may be migrations in django_mailman3/migrations/, hyperkitty/migrations/ and postorius/migrations/ that affect this depending on what the specific version updates are in that upgrade. In any case, there are schema differences for Mailman core between 3.2.1 and 3.3.3. -- Mark Sapiro <mark(a)msapiro.net> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan

2 years, 5 months

[MM3-users] Re: Hyperkitty on Debian 12

by Mark Sapiro

On 3/26/24 00:06, Markus Grandpré wrote: > > Due to the following warnings, I still have to customize Hyperkitty: > > django_mailman3.MailDomain: (models.W042) Auto-created primary key used > when not defining a primary key type, by default > 'django.db.models.AutoField'. > HINT: Configure the DEFAULT_AUTO_FIELD setting or the > DjangoMailman3Config.default_auto_field attribute to point to a subclass > of AutoField, e.g. 'django.db.models.BigAutoField'. > ... This warning is harmless, but to eliminate it set ``` DEFAULT_AUTO_FIELD = 'django.db.models.AutoField' ``` in your django settings. > Can you give me another hint? As Linux admin I installed the packages > mailman and mailman-web that were offered to me under Debian 12. > Although during the installation of the packages user "list" was > created, I cannot use it: > > # su - list > This account is currently not available Probably Debian creates the `list` user without a login shell. ``` sudo -i -u list ``` may work. If not, you can always prefix commands with `sudo -u list ` as in ``` sudo -u list mailman-web hyperkitty_import \ -l mailman21-migration-test-04(a)mailman.uni-konstanz.de \ /var/mailman21/testlist.mbox ``` -- Mark Sapiro <mark(a)msapiro.net> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan

1 year, 5 months

[MM3-users] Re: Disabled by bounce

by Mark Sapiro

On 9/11/24 15:21, Dan Caballero wrote: > Mark, > > Do you have any tips for scripting the setting changes via mailman shell -l somelist(a)caltech.edu or a python script to run. eg. mailman shell -r dmarcsettings.py? > > We have a number of lists that email Gmail addresses either directly or via aliases and virtual email domains using Google Workspace. If your Mailman version is >=3.3.9 you can add `^.*(a)gmail\.com` to each list's `dmarc_addresses` to apply `dmarc_mitigate_action` to any mail From: a `(a)gmail.com` address. A `mailman shell` interaction to do that and set `dmarc_mitigate_action` to munge_from for all lists is like ``` $ /opt/mailman/mm/bin/mailman shell Welcome to the GNU Mailman shell Use commit() to commit changes. Use abort() to discard changes since the last commit. Exit with ctrl+D does an implicit commit() but exit() does not. >>> for mlist in getUtility(IListManager): ... mlist.dmarc_addresses.append(r'^.*(a)gmail\.com') ... mlist.dmarc_mitigate_action = DMARCMitigateAction.munge_from ... >>> commit() ``` If your Mailman is older than 3.3.9 or you don't want to use dmarc_addresses, replace the line ``` ... m mlist.dmarc_addresses.append(r'^.*(a)gmail\.com') with ... mlist.dmarc_mitigate_unconditionally = True ``` -- Mark Sapiro <mark(a)msapiro.net> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan

1 year

[MM3-users] Re: Mailmansuite.log Entries

by Mark Sapiro

On 12/1/20 5:16 PM, Brian Carpenter wrote: > I see the following log entries in mailmansuite.log: > > INFO 2020-11-28 00:00:52,242 29142 hyperkitty.lib.mailman 2117 emails > left to refresh, checked 1000 > INFO 2020-11-28 00:01:00,600 29142 hyperkitty.lib.mailman 2117 emails > left to refresh, checked 2000 > INFO 2020-11-29 00:00:52,135 15513 hyperkitty.lib.mailman 2117 emails > left to refresh, checked 1000 > INFO 2020-11-29 00:01:00,192 15513 hyperkitty.lib.mailman 2117 emails > left to refresh, checked 2000 > INFO 2020-11-30 00:00:52,484 22622 hyperkitty.lib.mailman 2117 emails > left to refresh, checked 1000 > INFO 2020-11-30 00:01:00,758 22622 hyperkitty.lib.mailman 2117 emails > left to refresh, checked 2000 > INFO 2020-12-01 00:00:50,246 11946 hyperkitty.lib.mailman 2117 emails > left to refresh, checked 1000 > INFO 2020-12-01 00:00:59,688 11946 hyperkitty.lib.mailman 2117 emails > left to refresh, checked 2000 > > I assume this is a result of importing archives from a MM2 mbox file. > This happen months ago however. Why are these entries still showing up? Those come from the HyperKitty sync_mailman job which is run by hyperkitty_import if you don't specify --no-sync-mailman, but is also one of the Django daily jobs. -- Mark Sapiro <mark(a)msapiro.net> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan

4 years, 9 months

[MM3-users] Re: postfix malformed address with confirm replies

by Mark Sapiro

On 2/28/21 1:07 PM, Stephen Mats Mats wrote: > > > To be clear the 'obstructive server’ is mailman-core. :) > > [ec2-user@ip-172-31-18-xxx ~]$ telnet 172.19.199.2 8024 > Trying 172.19.199.2... > Connected to 172.19.199.2. > Escape character is '^]'. > 220 mailman-core GNU Mailman LMTP runner 2.0 > LHLO ip-172-31-18-xxx.us-west-2.compute.internal > 250-mailman-core > 250-SIZE 33554432 > 250-8BITMIME > 250 HELP > MAIL FROM:<stephen.s.w.matsmats(a)gmail.com> > 250 OK > RCPT TO:<matsmats-mm3-test1-confirm+d6f77a2572ef55a8b2c4ca0d77de8493fbb55856(a)mm3.aca-aws.s.uw.edu> > 553 5.1.3 Error: malformed address > RCPT TO:<matsmats-mm3-test1-confirm+d6f77a2572ef55a8b2c4ca0d77de8493fbb55(a)mm3.aca-aws.s.uw.edu> > 250 OK > quit > 221 Bye Thanks for the info. I'll investigate further. It looks as though the LMTP runner (server actually) is responding with the 553 and then the sending MTA is retrying with a truncated local part, but of course that doesn't work because the token won't be found. I will look at trying to convince Mailman's LMTP to accept the longer local part or barring that to get the confirm command to accept the truncated token. -- Mark Sapiro <mark(a)msapiro.net> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan

4 years, 6 months

[MM3-users] Re: where do I find the text of a bounce email ?

by Mark Sapiro

On 3/9/21 1:59 AM, Per Jessen wrote: > All, > > I am trying to figure why a particular outbound message was bounced, so > I'm looking for the text of the NDR that was sent - where do I find > that ? Mailman 2.1 would include the NDR in the notice to the admins when delivery was disabled or bounce score's incremented if those notices were requested. Mailman 3 has no such capability. If you have access to the server, this patch ``` > diff --git a/src/mailman/runners/lmtp.py b/src/mailman/runners/lmtp.py > index 6a0bdcf5e..eca474089 100644 > --- a/src/mailman/runners/lmtp.py > +++ b/src/mailman/runners/lmtp.py > @@ -217,6 +217,8 @@ class LMTPHandler: > slog.debug('%s subaddress: %s, queue: %s', > message_id, canonical_subaddress, queue) > status.append('250 Ok') > + if queue == 'bounces': > + config.switchboards['bad'].enqueue(msg, msgdata) > except Exception: > slog.exception('Queue detection: %s', msg['message-id']) > config.db.abort() ``` will add all received bounces as queue files to var/queue/bad/ where they can be examined with `mailman qfile`. -- Mark Sapiro <mark(a)msapiro.net> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan

4 years, 6 months

[MM3-users] Re: Migrating from old V2 server to new V3 server. Questions.

by Mark Sapiro

On 10/10/24 1:55 PM, jkoral(a)luc.edu wrote: > The old server is trying to send, but I end up getting an undeliverable message saying no connection could be made. I know port 25 is open because I can telnet to it. I'm wondering if I'm missing something in my configuration. Can you take a look? Thank you. > > Here are the active settings in /etc/postfix/master.cf: ... > smtp inet n - y - - smtpd This says port 25 is for smtpd and that's good. > And here are the setting I have in /etc/mailman3/mailman.cfg > # /etc/mailman3/mailman.cfg This is irrelevant as the message never gets to Mailman. On 10/10/24 1:58 PM, jkoral(a)luc.edu wrote: > Here are the results from netstat: > > tcp 0 0 0.0.0.0:25 0.0.0.0:* LISTEN 3876896/master And Postfix master process is listening on port 25. You say you can telnet to port 25. Can you do that from the old MM 2.1 server? Can you connect and receive the greeting and send `EHLO hostname` and get a good response? -- Mark Sapiro <mark(a)msapiro.net> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan

11 months

[MM3-users] Re: Default moderation for new members

by Mark Sapiro

On 11/14/19 7:37 AM, Seth Seeger wrote: > > I’m loving Mailman3 so far! Great work on it. Thank you. > I’d like to have new members who join my lists have their posting ability set to moderated. (After their first legitimate post, they would set to be unmoderated.) I haven’t been able to find this, though I’m suspecting the language has changed. In Postorius set Settings -> Message Acceptance -> "Default action to take when a member posts to the list" to Hold for moderation. This is the action which will be taken for a post from a member whose individual Moderation is List Default as it is for all new members. Then when a post from that member is held, if you click the subject in the held messages view, a dialog opens showing the message content with Accept, Reject and Discard buttons and a dropdown list you can use to set that member's Moderation to Default processing. Default processing is generally what you want as it bypasses the moderation hold but still applies other tests such as header filters, administrivia, implicit-dest, max-recipients, max-size, etc. -- Mark Sapiro <mark(a)msapiro.net> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan

5 years, 10 months

[MM3-users] Re: The MAILMAN_ARCHIVER_KEY was not sent as the Authorization HTTP header.

by Mark Sapiro

On 10/22/21 8:51 AM, Marco Marinello wrote: > Hi everybody, > > as per subject, I'm getting this error in the hyperkitty log when mailman daemon tries to archive a mail. > I've setup the hyperkitty.cfg file with api_key = MAILMAN_ARCHIVER_KEY in settings_local.py but still nothing. > I've seen here and in GitLab issues some errors concerning a wrong api key but here it says that it wasn't sent at all. > All packages installed via pip install + latest .zip release, including mailman-hyperkitty. Currently running on apache with mod_wsgi_py3 without https. The following combinations should work: mailman-hyperkitty 1.2.0 with HyperKitty 1.3.5 mailman-hyperkitty <1.2.0 with HyperKitty <1.3.5 The following will not work: mailman-hyperkitty 1.2.0 with HyperKitty <1.3.5 mailman-hyperkitty <1.2.0 with HyperKitty 1.3.5 Do you see a message like 'The MAILMAN_ARCHIVER_KEY is now required to be sent over the Authorization HTTP header, you need to upgrade the mailman-hyperkitty package to 1.2.0 or newer.' In your Django log and/or your mailman.log? These will only be logged with HyperKitty 1.3.5 and mailman-hyperkitty < 1.2.0 -- Mark Sapiro <mark(a)msapiro.net> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan

3 years, 10 months

Search results for query "sapiro"