[Mailman-Users] Archive access with only password?
I was hacking around my new Mailman setup, and found out to my great surprise: The private archives are accessible without a username. Well, that's only half the story, but it really caught me by surprise. I eventually figured out that the list is accessible by entering just the admin password. Is there a way to change this so that admin also needs to enter username? thanks cheers, gary gary c wang ICQ: 4343405 -- Mailman-Users mailing list [EMAIL PROTECTED] http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Re: [Mailman-Users] Archive access with only password?
At 10:41 PM 3/29/02 +0900, Gary Wang wrote: I was hacking around my new Mailman setup, and found out to my great surprise: The private archives are accessible without a username. Well, that's only half the story, but it really caught me by surprise. I eventually figured out that the list is accessible by entering just the admin password. Is there a way to change this so that admin also needs to enter username? 2.1b1 does that, which I find annoying as hell, because now if I need to fix something I have to first go lookup a valid user on the list to use the admin password on... But it sounds like you'll be happy :-). -- Mailman-Users mailing list [EMAIL PROTECTED] http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Re: [Mailman-Users] Archive access with only password?
Well, it IS rather convinient, but I am more concerned of the potential (sort-of) security risk. Because access is allowed without username, some d00d with evil intent would have an easier time brute-forcing the password.. You know what 'they' say... to catch the bad guys, you have to think like them.. On Friday, March 29, 2002, at 10:48 PM, Ron Jarrell wrote: At 10:41 PM 3/29/02 +0900, Gary Wang wrote: I was hacking around my new Mailman setup, and found out to my great surprise: The private archives are accessible without a username. Well, that's only half the story, but it really caught me by surprise. I eventually figured out that the list is accessible by entering just the admin password. Is there a way to change this so that admin also needs to enter username? 2.1b1 does that, which I find annoying as hell, because now if I need to fix something I have to first go lookup a valid user on the list to use the admin password on... But it sounds like you'll be happy :-). -- Mailman-Users mailing list [EMAIL PROTECTED] http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py gary c wang ICQ: 4343405 -- Mailman-Users mailing list [EMAIL PROTECTED] http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
[Mailman-Users] admin's private_roster default vs. subscriber's conceal default
Greetings, My list is set up so that only the administrator can view the list of subscribers. I did this by setting private_roster=2 (List admin only) on the admin's Privacy Options page. However, when subscribers login, they see that conceal=0 is the default. I.e. they see under Conceal yourself from subscriber list? that no is checked. My understanding is that this conceal setting doesn't matter with private_roster=2, but IF private_roster were set to 0 (anyone) or 1 (list members) then the individual subscribers could still override the admin default (with conceal=yes) and prevent their e-mail from being seen. Is there any way to make conceal=yes the default? And is my understanding of the relationship between private_roster and conceal correct? Just want to make sure that my subscribers feel secure about their privacy (by default). Thanks! Regards, Erik -- Law Offices of Erik J. Heels Try Our IP Law Newsletter 2 Clock Tower Place, Suite 255 * Patent Law Maynard, MA 01754-2545 * Trademark Law Phone: 978-823-0008 * Copyright Law http://www.heels.com http://www.lawlawlaw.com NOTE: This e-mail message is not legal advice, and no attorney-client relationship has been formed as a result of this e-mail exchange. See http://www.heels.com/copyright.html for web site terms and conditions. -- Mailman-Users mailing list [EMAIL PROTECTED] http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
[Mailman-Users] publicly advertised lists in v.2.1b1
I just installed v2.1b1, and I have to say that its support for multi-language lists is excellent! One thing I can't seem to get working is the main /mailman/admin page. It is supposed to list the publicly available mailing lists, but I don't know what that means. I haven't found the setting to make a list public in the configurations... help...? gary gary c wang ICQ: 4343405 -- Mailman-Users mailing list [EMAIL PROTECTED] http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
[Mailman-Users] Virtual Host How-To ???
Hiya, Just wondering if there is a FAQ out there somewhere that describes basic Virtual Host set-up ??? Im thinking you have to install the software for each domain in its own directory ?? Just some ideas on how this is done would be appreciated .. (Not stuff like.configure settings .. That I can handle ) Just the basic steps .. Francesca C Smith Lady Linux Internet Services
[Mailman-Users] Virtual Hosting Faq ??
Hiya, Just wondering if there is a FAQ out there somewhere that describes basic Virtual Host set-up ??? Im thinking you have to install the software for each domain in its own directory ?? Just some ideas on how this is done would be appreciated .. (Not stuff like .configure settings .. That I can handle ) Just the basic steps .. Francesca C Smith Lady Linux Internet Services -- Mailman-Users mailing list [EMAIL PROTECTED] http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Re: [Mailman-Users] Mailman problem - gid not find
On Thu, 28 Mar 2002, RUSSELL P JONES wrote: from the directory with the install files for mailman... %make clean %./configure --with-mail-gid=65534 %make install see if that helps. this is a really common problem (getting the wrong group-id) and is addressed in the mailman faq Thx for reply, and I have reat the FAQ first. However, the situation is quit difference than the FAQ mention. The gid of mail is not 65535, but the request one. Besides, I don't encounter the error before I upgrade msec to latest version. -- Mailman-Users mailing list [EMAIL PROTECTED] http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
[Mailman-Users] Re: Virtual Hosting Faq ??
Francesca C Smith wrote: Just wondering if there is a FAQ out there somewhere that describes basic Virtual Host set-up ??? well there was a thread on this just yesterday, so you might check the archives. Im thinking you have to install the software for each domain in its own directory ?? that's the solution that one person suggested (we currently use the ugly hack of naming the list [EMAIL PROTECTED], although [EMAIL PROTECTED] is made an alias. it would be nice if you could change the email address that the list sends out and so on, but currently we're leaning towards the second solution. i'm imagining (as mentioned in my other mail), that instead of full multiple installations, simply creating symolic links for all of the program directories, and then creating new directories for all the data. Just some ideas on how this is done would be appreciated .. (Not stuff like .configure settings .. That I can handle ) Just the basic steps .. HTH. -- Will Yardley input: william @ hq . newdream . net . -- Mailman-Users mailing list [EMAIL PROTECTED] http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
[Mailman-Users] re Mailman
in re your url at http://www.gnu.org/software/mailman/MM21/features.html I have about a dozen elists on Yahoogroups and would love to get them off there and onto a webhost (which I am also looking for) but I really and truly like ALL the features of YHG's email software. I would like to see - in Mailman attachment stripping html stripping firewall, etc protection. a good program like Norton Internet Security to protect the list notice to moderators of new members, new messages of moderated members member moderation member banning list of banned members stored with a reason given for each list of bounced and the bounces ability to toll the bounced to see if the address is live or not etc is any of this in the future?? or is there another unix based s/w that is closer to what I want? thanks chas -- New email address [EMAIL PROTECTED] change @insync.net to @texas.net visit www.schuetzen.net -- Mailman-Users mailing list [EMAIL PROTECTED] http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
[Mailman-Users] Posts held for approval
Hi, I'm moving a live list over to a different server, before the move could be completed there were some pending posts held for administor approval, I copied over the request.db file but when I access the pending task section, the it shows that posts are being held but it can't find the message: Posting Held for Approval (1 of 5) Message with id #119 was lost. Where would the message be on the old server? Thanks, Sean -- Mailman-Users mailing list [EMAIL PROTECTED] http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
[Mailman-Users] possible type on the System Setup page?
http://www.gnu.org/software/mailman/install-system.html This text: % cd $prefix % chgrp mailman . % chmod a+rx,g+ws . Shoudl he chgrp and chmod commands include the switch capital R (-R) ? On a fresh installation, if I run these exact commands without the switch -R then the program check_perms is not happy FYI dk -- Mailman-Users mailing list [EMAIL PROTECTED] http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
[Mailman-Users] Another mailman bug
Hi, I've just been through my mailman lists handling the held postings, and I notice that mailman is playing silly buggers with the web interface. Please see: http://www.arm.linux.org.uk/images/mailmangroupings.jpg I'm rapidly loosing confidence in Mailman as a decent piece of secure software, especially as my attempts to report previous bugs/add them to the sourceforge bug manager go totally unacknowledged for MONTHS. In fact, I've NEVER had any acknowledgement from the mailman developers for ANYTHING. I'm expecting this one to be handled the same way, so I don't suppose it matters whatever I put in this email. Since I can't wait around for months while no one even responds to something like this, I've handled those pending messages the best I can, so consider any data mailman had lost. Thanks. -- Russell King ([EMAIL PROTECTED])The developer of ARM Linux http://www.arm.linux.org.uk/personal/aboutme.html -- Mailman-Users mailing list [EMAIL PROTECTED] http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
[Mailman-Users] bad links on http://www.list.org/MM21/faq.html
Sorry for the widespread distribution this is getting, but this *is* the address given on the referenced page under Email Us, so I hope this will get to the right person so this can be corrected. On page http://www.list.org/MM21/faq.html the links: (Stripmime) http://www.phred.org/~alex/stripmime.html. (Demime) http://scifi.squawk.com/demime.html. don't work because they both have a period at the end of the URL. -- Mailman-Users mailing list [EMAIL PROTECTED] http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
[Mailman-Users] weird locking problems
i've been having some problems with our mailman installation at the office. it's mailman 2.0.8 from the debian package (so the installation is a bit weird, to conform with debian policy etc. etc.), but seems to work pretty well most of the time. the archives are from an older mailman installation, and are mounted over NFS on a filer (which tends to crap out occasionally). i'm moving the files to a slightly less crappy filer, which might help somewhat... anyway the problem is that there are lock files, which don't have a date or time on them. if i create files in that directory, they have a date / time as they should, but the lock files look like: -rw-rw-r--2 list list 41 Mar 29 2002 adm.lock -rw-rw-r--2 list list 41 Mar 29 2002 adm.lock.ladd.9136 -rw-rw-r--1 list list 41 Mar 29 2002 adm.lock.ladd.9249 if i do: % touch booger i get: -rw-r--r--1 root list0 Mar 29 17:26 booger my guess is this is because of NFS. the time on the two machines is synchronized via NTP, so the time on both machines is the same. the locks directory itself (and all of the other mailman directories) are on a local drive - just the archive and mbox files are mounted via NFS. generally, removing the locks fixes the problem (which happens once or twice a day). -- Will Yardley input: william @ hq . newdream . net . -- Mailman-Users mailing list [EMAIL PROTECTED] http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Re: [Mailman-Users] weird locking problems
anyway the problem is that there are lock files, which don't have a date or time on them. if i create files in that directory, they have a date / time as they should, but the lock files look like: -rw-rw-r--2 list list 41 Mar 29 2002 adm.lock -rw-rw-r--2 list list 41 Mar 29 2002 adm.lock.ladd.9136 -rw-rw-r--1 list list 41 Mar 29 2002 adm.lock.ladd.9249 if i do: % touch booger i get: -rw-r--r--1 root list0 Mar 29 17:26 booger my guess is this is because of NFS. the time on the two machines is synchronized via NTP, so the time on both machines is the same. the locks directory itself (and all of the other mailman directories) are on a local drive - just the archive and mbox files are mounted via NFS. generally, removing the locks fixes the problem (which happens once or twice a day). What you're seeing is that the lock file timestamp is in the future, and that's by design; the file timestamp is used as the 'expiration time' to break stale locks. It's normal behavior. Do you think it's causing problems? (This 'feature' of ls is not well known, but that's what it does for times in the future.) -- Mailman-Users mailing list [EMAIL PROTECTED] http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
[Mailman-Users] Re: weird locking problems
Dan Mick wrote: What you're seeing is that the lock file timestamp is in the future, and that's by design; the file timestamp is used as the 'expiration time' to break stale locks. It's normal behavior. Do you think it's causing problems? (This 'feature' of ls is not well known, but that's what it does for times in the future.) that was what i thought (the future timestamp). however on other installations of mailman i hadn't noticed this (although now that i look, all of the locks on the other machines are pretty old, so perhaps time caught up with them...). in any event, i wasn't sure if this was the problem; however removing the locks generally fixes the problems (ie messages on the list won't appear and after removing the locks, they do). in any event, i suspect either nfs problems or something weird with debian's installation. also, some of the config files and all of the archive / mbox files are from an older installation of mailman, so it's possible that something's screwed up that way. -- Will Yardley input: william @ hq . newdream . net . -- Mailman-Users mailing list [EMAIL PROTECTED] http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Re: [Mailman-Users] Re: weird locking problems
in any event, i wasn't sure if this was the problem; however removing the locks generally fixes the problems (ie messages on the list won't appear and after removing the locks, they do). There may well be locking issues, but the future timestamp is not evidence. Try checking for the PIDs; early process death is the usual problem. Check logs/error for that PID. -- Mailman-Users mailing list [EMAIL PROTECTED] http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
[Mailman-Users] Files and Mailman... a question.
Yahoo groups has a service that allows users to upload files, and it notifies the users of new uploads. Can this, or has this been done with Mailmna? thanks -- Paul L. Schumacher Winona State University Computer Science Department -- Mailman-Users mailing list [EMAIL PROTECTED] http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Re: [Mailman-Users] Re: how to remove List-* headers
At 12:37 PM 3/29/02 -0500, Tom Neff wrote: On Thu, 28 Mar 2002 23:53:00 +1100 Darryl Harvey [EMAIL PROTECTED] wrote: I was wondering if there was an option to turn on or off the email headers that mailman adds. This is one of their ideological hot buttons - you're not supposed to WANT to turn them off. :) Back in the real world - go to $base/Mailman/Handlers/CookHeaders.py - down in the last few lines - and look for a line saying In 2.1 you can go into mm_cfg.py and break RFC2369 compliance by setting ALLOW_RFC2369_OVERRIDES to 1. That'll enable a policy at your site that list owners can turn it off, which will cause the cgi scripts to display that as an option for them. -- Mailman-Users mailing list [EMAIL PROTECTED] http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Re: [Mailman-Users] possible type on the System Setup page?
I think that is how it's should be, since on a fresh install, these commands are entered *before* you `make install`. On Thursday, March 28, 2002, at 09:06 AM, DK Smith wrote: http://www.gnu.org/software/mailman/install-system.html This text: % cd $prefix % chgrp mailman . % chmod a+rx,g+ws . Shoudl he chgrp and chmod commands include the switch capital R (-R) ? On a fresh installation, if I run these exact commands without the switch -R then the program check_perms is not happy FYI dk -- Mailman-Users mailing list [EMAIL PROTECTED] http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Re: [Mailman-Users] Re: how to remove List-* headers
--On Friday, March 29, 2002 9:30 PM -0500 Ron Jarrell [EMAIL PROTECTED] wrote: In 2.1 you can go into mm_cfg.py and break RFC2369 compliance by setting ALLOW_RFC2369_OVERRIDES to 1. That'll enable a policy at your site that list owners can turn it off, which will cause the cgi scripts to display that as an option for them. Quite the contrary, RFC2369 says Implementing these fields will be optional. Therefore, by adding a manager's option for those headers instead of trying to force them on everyone, Mailman 2.1 has finally been brought into RFC2369 compliance. Thanks for the reminder on this environment variable, I hadn't reviewed that part of the 2.1 config yet. My patch works under 2.0.8 and similar versions. -- Mailman-Users mailing list [EMAIL PROTECTED] http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Re: [Mailman-Users] Another mailman bug
At 03:43 PM 3/28/02 +, Russell King wrote: Hi, I've just been through my mailman lists handling the held postings, and I notice that mailman is playing silly buggers with the web interface. Please see: http://www.arm.linux.org.uk/images/mailmangroupings.jpg What's the issue? The funny characters in subject? That message claims to be in the ks_c_5601_1987 character set, which is probably an oriental set. It's not displaying right in 7bit ascii. 2.1 would probably handle it much better, unless the html the person was sending you claiming one charset and using another. The dev team has been slow about dealing with 2.0 issues because all the energy is going to 2.1 right now, which is in beta. -- Mailman-Users mailing list [EMAIL PROTECTED] http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
