G'Day.

I've now had a look in the config.pck files and i have a whole lot of rubbish namely the fri...@public.com etc... i'm really unsure what the proper contents of this should be.. as someone said they think i was previously hacked. do things look right? The 'message-id: relay.comanche.denmark.eu' makes me suspicious.

Patrick

}q^A(u^psend_welcome_msgq^...@u moderatorq^C]q^DU^Nanonymous_listq^EI00
U
advertisedq^...@u^madministriviaq^gi01
u^runsubscribe_policyq^...@u^oone_last_digestq  }q
U ^ Sdigest_last_sent_atq ^...@u^ndigest_membersq^l}q^mu^oscrub_nondigestq^ni00 U ^ Opass_mime_typesq ^ O ]q ^ PU ^ Kwelcome_msgq ^ QU ^ @U ^ Ogateway_to_newsq ^...@u^ntopics_enabledq^sk^@U^Uadmin_notify_mchangesq^TI00 U ^ Xgeneric_nonmember_actionq ^uk^au^vadmin_member_chunksizeq^vk^^u^waccept_these_nonmembersq^w]q^xu^xtim.ver...@macquarie.comq ^YaU^Wdi$ U^Wbounce_info_stale_afterq^\J^?: ^...@u^zfilter_filename_extensionsq^]]q^^(U^Cexeq^_U^Cbatq U^Ccmdq! U^Ccomq"U^Cpifq#U^Cscrq$U^Cvb$ U ^ Plinked_newsgroupq:U ^...@u^nsend_remindersq;k...@u^uregular_include_listsq<]q=U passwordsq>}q?u^vpatrick.h...@gmail.comq @U^Hseuzfufaq$ You have elected to receive messages from the %(real_name)s list in digest format' Please visit %(web_page_url)slistinfo%(cgiext)s/%(_internal_name)s if you wish to modify your settings ----------------------------------------------- qiu^kdescriptionq...@u^wbounce_matching_headersqku^?
# Lines that *start* with a '#' are comments.
to: fri...@public.com
message-id: relay.comanche.denmark.eu
from: l...@listme.com
from : ....@uplinkpro .comqlu^vbounce_score_threshold...@^t^@^...@^@^...@^@^...@u^mnondigestableqni01
u^qautorespond_adminq...@u^^bounce_notify_owner_on_removalqpi01
U ^ Xpass_filename_extensionsqQ ]qRU ^ Yautoresponse_request_textqSU ^...@u^qobscure_addressesqtk^au^qfilter_mime_typesqu]qv(U^Ltext/x-vcardqW$
msg_footerqhU?_______________________________________________
This is a message from the %(real_name)s mailing list at %(host_name)s
Please visit %(web_page_url)slistinfo%(cgiext)s/%(_internal_name)s if you wish to modify your settingsqiU^Rpreferred_languageqjU^Benq$ msg_headerqmU ^ @U ^ Pmax_message_sizeqnK (U^Xarchive_volume_frequencyqoK^AU^Radmin_immed_notifyqpI01 u^onext_request_idqqk^tu^dinfoq...@u bounce_you_are_disabled_warningsqsK^CU^Nprivate_rosterqtK^BU^ \require_explicit_destinationquK^AU$ U ^ Ydefault_member_moderationqxK ^ AU ^ Eownerqy ]qzu^vpatrick.h...@gmail.comq{au^hban_listq|]q}U^Mumbrella_listq~I00 U^Xmember_moderation_noticeq^? u...@u)bounce_you_are_disabled_warnings_intervalq^?J^?: ^...@u^mdigest_footerq^?u^@U^Pnext_post_numberq^$ u^nsubject_prefixq^?x...@^@^...@[test] q^?U^Fvolumeq^? K^AU^Yconvert_html_to_plaintextq^?I01 U^Vumbrella_member_suffixq^?U^F-ownerq^?U^Savailable_languagesq^?]q^? hkau^rnext_digest_numberq^?k^au^tautorespond_postingsq^...@u^uen$
u^kgoodbye_msgq...@u^vtopics_bodylines_limitq?k^eu^garchiveq?i01
u^nfilter_contentq...@u usernamesq?}q?u^vpatrick.h...@gmail.comq?x^l^@^...@^@Patrick Helmq?sU emergencyq...@u^lmod_passwordq?u(ca6b$ U nntp_hostq...@u^wnews_prefix_subject_tooq? K^AU^Qbounce_processingq?I01 u^oarchive_privateq?k^au^preply_to_addressq...@u^luser_optionsq?}q? hbM^?^AsU^Winclude_rfc2369_headersq?K^AU^Uforward_auto_discardsq?K



Hi again,

I've been unable to fix the issue where attachments to all lists are not getting through, even though the specific content filtering options int he lists are not turned on. Where would I start looking for the answers to a global scrub attachemnets.

They exist in the moderation request sent to the owners/moderators, but do not exist when the list members get the message.

The root password was altered, and no rootkits were found. i appreciate your help.

Kind Regards,
Patrick Helm

On 08/12/2008, at 1:08 PM, Brad Knowles wrote:

on 12/6/08 5:29 PM, St John's Webmaster said:

One day last week, mailman reset the overarching admin password, removed certain people from lists as admins, and suddenly sent out password reminders. And, it wouldn't send out lists attachments. The attachments exits when the moderator sees the message, but are scrubbed after that. No content filtering is active.

Mailman would not just do this on it's own. Something else had to happen, and I'm guessing it was probably someone restoring data from a backup that wiped out your current production environment.

Nothing that you're talking about could possibly happen with the standard version of Mailman with the standard cron jobs.

2.1.11cp2

If you're running cPanel, please take a look at FAQ 6.11 at <http://wiki.list.org/x/sYA9 >.

You need to talk to your provider or cPanel, to see what they must have done to you.

--
Brad Knowles <b...@shub-internet.org>
LinkedIn Profile: <http://tinyurl.com/y8kpxu>

------------------------------------------------------
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: http://wiki.list.org/x/QIA9

Reply via email to