Re: [Mailman-Users] List Security

2002-10-23 Thread Jon Parise
On Wed, Oct 23, 2002 at 08:45:46AM +0200, Dan Richter wrote:

 I was using Majordomo, but I got scared off when I realized that anyone 
 could bypass the list posting restrictions by posting to the correct alias. 
 (The normal list alias processes, then redirects to a second alias which 
 blindly transmits.) The blind forward alias shows up in the headers, so I 
 can't even hide it from people. Please reassure me that Mailman does not 
 have this vulnerability!
 
It's quite easy to block inbound mail to majordomo's list exploder
address.  If you're using Postfix, just add something like the
following to a recipient access map:

/^(.*)-outgoing@(.*)$/!/^owner-.*/  550 Use recipient address ${1}@${2} instead.

I don't believe Mailman suffers from the same kind insecurity, though.

-- 
Jon Parise ([EMAIL PROTECTED])  ::  http://www.csh.rit.edu/~jon/

--
Mailman-Users mailing list
[EMAIL PROTECTED]
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/



Re: [Mailman-Users] List Security

2002-10-23 Thread J C Lawrence
On Wed, 23 Oct 2002 08:45:46 +0200 
Dan Richter [EMAIL PROTECTED] wrote:

 I was using Majordomo, but I got scared off when I realized that
 anyone could bypass the list posting restrictions by posting to the
 correct alias. (The normal list alias processes, then redirects to a
 second alias which blindly transmits.) The blind forward alias shows
 up in the headers, so I can't even hide it from people. Please
 reassure me that Mailman does not have this vulnerability!

Mailman doesn't use secret aliased.

Mailman v2.0 authenticates on From: or envelope (you pick).

Mailman v2.1 authenticates on From: and envelope.

-- 
J C Lawrence
-(*)Satan, oscillate my metallic sonatas. 
[EMAIL PROTECTED]   He lived as a devil, eh?  
http://www.kanga.nu/~claw/  Evil is a name of a foeman, as I live.


--
Mailman-Users mailing list
[EMAIL PROTECTED]
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/



Re: [Mailman-Users] List Security

2002-10-23 Thread Dan Richter


Mailman doesn't use secret aliased.


That's good.


Mailman v2.0 authenticates on From: or envelope (you pick).

Mailman v2.1 authenticates on From: and envelope.


Pardon me for being a pain here, but isn't it ridiculously easy to forge a 
From:, and also rather easy to forge an envelope?

Now I'll be humble and admit that I don't even know what an envelope is. So 
my question about the envelope really boils down to: if I have root access 
on a machine other than the one Mailman is running on, can I fool Mailman's 
envelope recognition?

== Dan Richter == mailto:Dan;wimba.com ===
   He [Bob Dole] fought in Italy, where he suffered
   a serious head injury. Then he went into politics.
   - a poorly worded radio announcement in 1961


--
Mailman-Users mailing list
[EMAIL PROTECTED]
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/


Re: [Mailman-Users] List Security

2002-10-23 Thread admin
 Mailman v2.1 authenticates on From: and envelope.
What is used?

 Pardon me for being a pain here, but isn't it ridiculously easy to forge a
 From:, and also rather easy to forge an envelope?

 Now I'll be humble and admit that I don't even know what an envelope is.
So
 my question about the envelope really boils down to: if I have root access
 on a machine other than the one Mailman is running on, can I fool
Mailman's
 envelope recognition?
no seen protection no - write although with any machines, but faked field
From: and access open - I checked from miscellaneous hosts and domains


--
Mailman-Users mailing list
[EMAIL PROTECTED]
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/



[Mailman-Users] qrunner backlog in mailman 2.1b3

2002-10-23 Thread Andrew D. Clark
OK, so mailman 2.1b3 was doing a better of not getting backlogged than 
mailman 2.0.12, but today I have 1085 files total in all the queues (552 in 
the in queue).  The oldest file in the in queue is about 1 hour old. 
Should mailman be able to handle high volume bursty postings like this? 
The system itself is pretty fast (PIII 733 with 1GB RAM, fast disks, local 
caching named server).  qrunner logs (or any other log, for that matter) 
don't point out anything unusual.

--
Andrew Clark
Campus Network Programmer
Office of Information Technology
University of California, Santa Barbara
[EMAIL PROTECTED] (805) 893-5311

--
Mailman-Users mailing list
[EMAIL PROTECTED]
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/


Re: [Mailman-Users] List Security

2002-10-23 Thread J C Lawrence
On Wed, 23 Oct 2002 19:00:06 +0200 
Dan Richter [EMAIL PROTECTED] wrote:

 Pardon me for being a pain here, but isn't it ridiculously easy to
 forge a From:, and also rather easy to forge an envelope?

From: is trivial under many MTAs.  Envelope requires understanding SMTP
and driving that manually.  However, this is largely moot: if you need
strong(er) authentication in email systems, period, and this is not just
limited to Mailman, you're basically into the realms of PKI.

  Exception: (I do this in a couple case) I require mail arriving with
  specific From: and Envelopes to also list specific addresses in the
  Received: headers.  This is not strong, it is equally trivially forged
  as the envelope, but it is (currently) a sufficient barrier to entry
  to cut even the few who do forge envelopes that I've found.

 Now I'll be humble and admit that I don't even know what an envelope
 is. 

Crudely, its the From  header (note the space).  More usefully the
envelope contains the return-path, the address to which a bounce should
be sent back to if this message bounces.

 So my question about the envelope really boils down to: if I have root
 access on a machine other than the one Mailman is running on, can I
 fool Mailman's envelope recognition?

Absolutely.

You don't need root access on any system to forge email.

-- 
J C Lawrence
-(*)Satan, oscillate my metallic sonatas. 
[EMAIL PROTECTED]   He lived as a devil, eh?  
http://www.kanga.nu/~claw/  Evil is a name of a foeman, as I live.


--
Mailman-Users mailing list
[EMAIL PROTECTED]
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/



[Mailman-Users] mailman and domino mail server

2002-10-23 Thread gbm
I have mailman on a slackware box with sendmail.ww1.mydomain.com
The mailserver for ww1 is mx.mydomain.com. It is a WinNT box running Domino
Mail Server.
I have a mailing list: list
So the addresses are : [EMAIL PROTECTED]
  [EMAIL PROTECTED]
  [EMAIL PROTECTED]
  [EMAIL PROTECTED]
These are set up in aliases.

When I try to send a request, etc, say to [EMAIL PROTECTED] it routes to
mx.mydomain.com and is rejected because their is no user name
[EMAIL PROTECTED] on the Domino Server.  If I make a user
[EMAIL PROTECTED], it stops at the Domino Server level.

How do I get the mail back to ww1.mydomain.com?

Brent Mayes


--
Mailman-Users mailing list
[EMAIL PROTECTED]
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/



[Mailman-Users] Mailman Software

2002-10-23 Thread Oliver
Hi...

I would like to use your software to run my mailing list (about
900,000 subscribers) on my own server (currently I use Lyris.)

I would like to run Mailamn on a 1.3 GHZ Celeron with 512 mb Ram, but
I could also upgrade to 1 GB Ram, or get a 2 GHZ Pentium 4 if you
think that would improve performance.

How many mails can Mailman send out per hour? I usually send out one
e-mail every day at midnight, and occasionally a second mail at 11
am. Do you think your software would be able to handle that? What's
the largest list you know of that is being managed through your
software?

Thank you.

Oliver



__
Do you Yahoo!?
Y! Web Hosting - Let the expert host your web site
http://webhosting.yahoo.com/

--
Mailman-Users mailing list
[EMAIL PROTECTED]
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/



[Mailman-Users] Fwd: Returned mail: unknown mailer error 1

2002-10-23 Thread Travis Knabe
This is the message I'm getting when I try to send a message to my list 
called [EMAIL PROTECTED]

The .db files they're referring to have the owner as nsuser ( what my 
webserver on a diff. machine runs under ) During the config I told it to run 
the cgi-scripts as nsgroup ( the group my webserver runs as )  But the 
group on the .db files is set to mailman.  So I'm not sure what doesn't 
have permissions to the .db file 

any help would be great.

Travis Knabe
Systems Manager
503-838-8507
---BeginMessage---
The original message was received at Tue, 22 Oct 2002 17:09:45 -0700 (PDT)
from kitty.wou.edu [140.211.117.31]

   - The following addresses had permanent fatal errors -
|/net/aero/global/a1/data/solaris8/apps/mailman/mail/wrapper post testing
(expanded from: [EMAIL PROTECTED])

   - Transcript of session follows -
Traceback (most recent call last):
  File /net/aero/global/a1/data/solaris8/apps/mailman/scripts/post, line 94, in ?
main()
  File /net/aero/global/a1/data/solaris8/apps/mailman/scripts/post, line 73, in main
mlist = MailList.MailList(listname, lock=0)
  File /net/aero/global/a1/data/solaris8/apps/mailman/Mailman/MailList.py, line 79, 
in __init__
self.Load()
  File /net/aero/global/a1/data/solaris8/apps/mailman/Mailman/MailList.py, line 892, 
in Load
dict, e = self.__load(dbfile)
  File /net/aero/global/a1/data/solaris8/apps/mailman/Mailman/MailList.py, line 869, 
in __load
fp = open(dbfile)
IOError: [Errno 13] Permission denied: 
'/net/aero/global/a1/data/solaris8/apps/mailman/lists/testing/config.db'
554 |/net/aero/global/a1/data/solaris8/apps/mailman/mail/wrapper post testing... 
unknown mailer error 1

Reporting-MTA: dns; gilligan.wou.edu
Received-From-MTA: DNS; kitty.wou.edu
Arrival-Date: Tue, 22 Oct 2002 17:09:45 -0700 (PDT)

Final-Recipient: RFC822; [EMAIL PROTECTED]
X-Actual-Recipient: RFC822; |/net/aero/global/a1/data/solaris8/apps/mailman/mail/wrapper post [EMAIL PROTECTED]
Action: failed
Status: 5.0.0
Last-Attempt-Date: Tue, 22 Oct 2002 17:09:47 -0700 (PDT)

---BeginMessage---


Travis Knabe
Systems Manager
503-838-8507


---End Message---
---End Message---


[Mailman-Users] Mailman withlist documents

2002-10-23 Thread Prakash Subramanian
Hello,

I am trying to use withlist+python through command line to control 100s 
of lists.  I know only m.Save(), m.Unlock() ... where can I find 
documents more about functions like these.

Please help.

Thanks,
Prakash



--
Mailman-Users mailing list
[EMAIL PROTECTED]
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/


[Mailman-Users] CVS

2002-10-23 Thread Johan Fransson
Hi!

I wonder how I can get the latest CVS-version of mailman.
I have not been able to find any repository adress on your site?

I also wonder if you plan to develop the list-join functionality soon
since it is in your TODO-list?
I was thinking I might do it myself if it is not finished :)

Best Regards, Johan

--

| Datorkraft i Stockholm - datorer, programmering, webhotell...|

| Johan Fransson | Tel: 08-35 13 41   | [EMAIL PROTECTED]  |
| Malmvägen 57 A, BV | Cell:070-766 48 17 | [EMAIL PROTECTED]   |
| 191 62 Sollentuna  | SMS: [EMAIL PROTECTED]|
| www.fransson.se| www.datorkraft.se  | ICQ:3682765|





--
Mailman-Users mailing list
[EMAIL PROTECTED]
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/



[Mailman-Users] Need help on email headers

2002-10-23 Thread Terence
Hello,

I see some redundant links on the email headers, listed below:

List-Help: mailto:be-request;sourcevisions.net?subject=help 
List-Post: mailto:be;sourcevisions.net 
List-Subscribe: http://sourcevisions.net:81/mailman/listinfo/be, 
mailto:be-request;sourcevisions.net?subject=subscribe 
List-Id: Basic Essence Mailing List be.sourcevisions.net 
List-Unsubscribe: http://sourcevisions.net:81/mailman/listinfo/be, 
mailto:be-request;sourcevisions.net?subject=unsubscribe 
List-Archive: http://sourcevisions.net:81/pipermail/be/ 

Is there any way to remove those above while only maintaining the 
List-Id?. Those lines are extras since we can follow the link below to 
configure our options

I'll appreciate if anyone can help me out

Thank you very much :) 

-- 
Best Regards
Terence Tham
E-Alias: Odin 
[EMAIL PROTECTED]


--
Mailman-Users mailing list
[EMAIL PROTECTED]
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/



[Mailman-Users] Official Mailman Logo in EPS format

2002-10-23 Thread Bob Horton
Hi,

I am involved in an Open Source Expo and we would like to put a large
version (ie about 10 x 20 inches) of the Mailman logo on the back of a
booth.

Where would I go to find a version in EPS format that could be used?

Thanks in advance.

Bob Horton.

Bob Horton
PSD Services Inc.
Web Hosting  Development
Phone: (306) 522-4638 (522-INET)
[EMAIL PROTECTED]


--
Mailman-Users mailing list
[EMAIL PROTECTED]
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/



[Mailman-Users] Cron sending mailman error every 15 mins

2002-10-23 Thread Jared Faris
I have had a lot of trouble getting mailman to run on my debian box, and
I am going to setup another box to play with it on because of said
trouble...but I am having a really major issue.

Every fifteen minutes or so I get the following email:


from: root@myserver
subject: Cron mail@myserver   if [ -x /usr/sbin/exim -a -f
/etc/exim/exim.conf ]; then /usr/sbin/exim -q ; fi

2002-10-18 23:23:02 182JT9-0003AY-03 Neither the system_aliases director
nor the address_pipe transport set a uid for local delivery of
|/var/lib/mailman/mail/wrapper mailowner cr


Cron is sending it regularly and it is almost self DOS'ing itself.  I
su'd to the mail user and checked his crontab with a crontab -u mail
-l and it says there is no crontab for user.  I tried to do the same
from many of the other possible users that mail could have dealt with to
no avail.

If anyone knows how I can find out what is causing this and stop it I
would be eternally grateful.  I saw some posts in the past about this
issue but was unable to find any solutions.


Jared Faris


--
Mailman-Users mailing list
[EMAIL PROTECTED]
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/



Re: [Mailman-Users] CVS

2002-10-23 Thread Jon Parise
On Tue, Oct 22, 2002 at 09:11:31PM +0200, Johan Fransson wrote:

 I wonder how I can get the latest CVS-version of mailman.
 I have not been able to find any repository adress on your site?

http://sourceforge.net/cvs/?group_id=103

-- 
Jon Parise ([EMAIL PROTECTED])  ::  http://www.csh.rit.edu/~jon/

--
Mailman-Users mailing list
[EMAIL PROTECTED]
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/



[Mailman-Users] speeding up archiver in mailman 2.1b3?

2002-10-23 Thread Andrew D. Clark
Since I'm hopelessly backlogged in my archive queue (1644 files), does 
anyone have any suggestions for speeding up archiving?  The qrunner process 
is certainly eating up CPU and memory, but is only archiving about 1 msg 
per minute.  All the other queues move at a decent pace.

--
Andrew Clark
Campus Network Programmer
Office of Information Technology
University of California, Santa Barbara
[EMAIL PROTECTED] (805) 893-5311

--
Mailman-Users mailing list
[EMAIL PROTECTED]
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/


[Mailman-Users] 2.0.13 -- list configuration not saving?

2002-10-23 Thread Shane DeRidder
I upgraded to 2.0.13 from 2.0.11 a while back and everything has been 
running fine.  The lists I maintain have all been working perfectly as 
with previous versions.

Tonite, I created a new list.  Any changes I attempt to make this list via
the web interface do not get saved.  I cannot add subscribers to the list
from the web interface either.  I can, however, use config_list to make
changes to the new list, and it saves properly.

My previously running lists seem unaffected.  I can make changes and
add/remove subscribers via the web and also the commandline tools with no 
problems.

Neither Mailman nor Apache are generating any error messages.

I'm running the following:

RedHat Linux 7.2 on Intel.
Apache 1.3.27
Mailman 2.0.13 (compiled and installed from source)
Python v1.5.2 (RedHat RPM)


Anyone have any ideas?

--
 __  _ _  Founder/Owner - [EMAIL PROTECTED]
(_ |_  _.._  _  | \ _ |_)o _| _| _ ._ AnotherNet - http://www.another.net/
__)| |(_|| |(/_ |_/(/_| \|(_|(_|(/_|  Your Internet Community!


--
Mailman-Users mailing list
[EMAIL PROTECTED]
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/



Re: [Mailman-Users] Fwd: Returned mail: unknown mailer error 1

2002-10-23 Thread Jon Carnes
have you run ~mailman/bin/check_perms?

The owner of the .db file should be the mailman user.
Good Luck

On Tue, 2002-10-22 at 20:12, Travis Knabe wrote:
 This is the message I'm getting when I try to send a message to my list 
 called [EMAIL PROTECTED]
 
 The .db files they're referring to have the owner as nsuser ( what my 
 webserver on a diff. machine runs under ) During the config I told it to run 
 the cgi-scripts as nsgroup ( the group my webserver runs as )  But the 
 group on the .db files is set to mailman.  So I'm not sure what doesn't 
 have permissions to the .db file 
 
 any help would be great.
 
 Travis Knabe
 Systems Manager
 503-838-8507
 
 

 From: Mail Delivery Subsystem [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Subject: Returned mail: unknown mailer error 1
 Date: 22 Oct 2002 17:09:47 -0700
 
 The original message was received at Tue, 22 Oct 2002 17:09:45 -0700 (PDT)
 from kitty.wou.edu [140.211.117.31]
 
- The following addresses had permanent fatal errors -
 |/net/aero/global/a1/data/solaris8/apps/mailman/mail/wrapper post testing
 (expanded from: [EMAIL PROTECTED])
 
- Transcript of session follows -
 Traceback (most recent call last):
   File /net/aero/global/a1/data/solaris8/apps/mailman/scripts/post, line 94, in ?
 main()
   File /net/aero/global/a1/data/solaris8/apps/mailman/scripts/post, line 73, in 
main
 mlist = MailList.MailList(listname, lock=0)
   File /net/aero/global/a1/data/solaris8/apps/mailman/Mailman/MailList.py, line 
79, in __init__
 self.Load()
   File /net/aero/global/a1/data/solaris8/apps/mailman/Mailman/MailList.py, line 
892, in Load
 dict, e = self.__load(dbfile)
   File /net/aero/global/a1/data/solaris8/apps/mailman/Mailman/MailList.py, line 
869, in __load
 fp = open(dbfile)
 IOError: [Errno 13] Permission denied: 
'/net/aero/global/a1/data/solaris8/apps/mailman/lists/testing/config.db'
 554 |/net/aero/global/a1/data/solaris8/apps/mailman/mail/wrapper post testing... 
unknown mailer error 1
 
 

 Reporting-MTA: dns; gilligan.wou.edu
 Received-From-MTA: DNS; kitty.wou.edu
 Arrival-Date: Tue, 22 Oct 2002 17:09:45 -0700 (PDT)
 
 Final-Recipient: RFC822; [EMAIL PROTECTED]
 X-Actual-Recipient: RFC822; 
|/net/aero/global/a1/data/solaris8/apps/mailman/mail/wrapper post 
[EMAIL PROTECTED]
 Action: failed
 Status: 5.0.0
 Last-Attempt-Date: Tue, 22 Oct 2002 17:09:47 -0700 (PDT)
 
 

 From: Travis Knabe [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Subject: asl;kdfja;l
 Date: 22 Oct 2002 17:10:25 -0700
 
 
 
 Travis Knabe
 Systems Manager
 503-838-8507
 



--
Mailman-Users mailing list
[EMAIL PROTECTED]
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/



Re: [Mailman-Users] newbie question -- sendmail errors

2002-10-23 Thread Jon Carnes
This is simply one of the first of a few errors you will run into while
installing on Red Hat (using the rpms). 

You need to add a link in your /etc/smrsh directory to your mailman
wrapper program.  Something like:
  cd /etc/smrsh
  ln -s ~mailman/mail/wrapper wrapper

This tells smrsh that Mailman's wrapper program is okay-dokie to run via
a Sendmail alias.

Next problem you will run into is that your Sendmail does not listen for
a local connection.  If you install from source, there are some really
nice files that tell you all about smrsh and about the overly paranoid
Sendmail problem - and how to get around them.

There are a couple of ways around the Sendmail problem, the easiest is
to comment out the line in your /etc/sendmail.cf file that restricts the
interfaces used by Sendmail.  If that line is commented out then
Sendmail will default to listening on all local interfaces, and isn't
that a happy thing to do!?!

  # SMTP client options
  #O ClientPortOptions=Address= ..

Good Luck!

On Wed, 2002-10-23 at 00:53, Dodson, Matthew wrote:
 I am runnibg redhat 7.2 with the latest build of mailman. I receive the
 following error from sendmail when I try to confirm a subscription. Sorry if
 this has been answered before.
 
- The following addresses had permanent fatal errors - 
 |/home/mailman/mail/wrapper mailcmd ops 
 (reason: service unavailable) 
 (expanded from: [EMAIL PROTECTED]) 
 
- Transcript of session follows - 
 smrsh: wrapper.mailcmd.ops not available for sendmail programs 
 554 5.0.0 Service unavailable 
 
 
 Thanks,
 MD 
 
 --
 Mailman-Users mailing list
 [EMAIL PROTECTED]
 http://mail.python.org/mailman/listinfo/mailman-users
 Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
 Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/



--
Mailman-Users mailing list
[EMAIL PROTECTED]
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/



[Mailman-Users] List Security

2002-10-23 Thread Dan Richter
I was using Majordomo, but I got scared off when I realized that anyone 
could bypass the list posting restrictions by posting to the correct alias. 
(The normal list alias processes, then redirects to a second alias which 
blindly transmits.) The blind forward alias shows up in the headers, so I 
can't even hide it from people. Please reassure me that Mailman does not 
have this vulnerability!

== Dan Richter == mailto:Dan;wimba.com ===
Customers who consider our waitresses uncivil
ought to see the manager.
   - Sign in a restaurant in New York


--
Mailman-Users mailing list
[EMAIL PROTECTED]
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/


Re: [Mailman-Users] List Security

2002-10-23 Thread admin
I had that- question
and in current of the week tried to get here answer, but alas, nobody not
was able on this answer, come to go to majordomo

 I was using Majordomo, but I got scared off when I realized that anyone
 could bypass the list posting restrictions by posting to the correct
alias.
 (The normal list alias processes, then redirects to a second alias which
 blindly transmits.) The blind forward alias shows up in the headers, so
I
 can't even hide it from people. Please reassure me that Mailman does not
 have this vulnerability!

 == Dan Richter == mailto:Dan;wimba.com ===
  Customers who consider our waitresses uncivil
  ought to see the manager.
 - Sign in a restaurant in New York


 --
 Mailman-Users mailing list
 [EMAIL PROTECTED]
 http://mail.python.org/mailman/listinfo/mailman-users
 Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
 Searchable Archives:
http://www.mail-archive.com/mailman-users%40python.org/



--
Mailman-Users mailing list
[EMAIL PROTECTED]
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/



[Mailman-Users] --with-mail-gid=?

2002-10-23 Thread Hennie Rautenbach
Hi there folks,

I have downloaded/configured/compiled and installed mailman-2.0.13 on a 
Sun running Solaris 8 and Python 2.2.1 and sendmail 8.10.2.

I have followed the documentation as best I could and have setup a 
mailing list etc.

When I post to the list the following error appear in /var/log/syslog...

Oct 23 10:14:44 vogue sendmail[15676]: [ID 801593 mail.info] 
g9NAEev15676: from=
[EMAIL PROTECTED], size=1600, class=0, nrcpts=1, 
msgid=3DB65A82.7040903@sa
binet.co.za, proto=ESMTP, daemon=MTA, relay=mfwjs01.mfw.is.co.za 
[196.35.77.13]
Oct 23 10:14:44 vogue Mailman mail-wrapper: [ID 702911 mail.error] 
Failure to ex
ec script. WANTED gid 2, GOT gid 1.  (Reconfigure to take 1?)

So my (probably stupid) question is: How do I determine under which GID 
sendmail runs ?

Regards,

Hennie

--
===
Hennie Rautenbach  Work: http://www.sabinet.co.za
082-556-1191   Play: http://www.overland.co.za	

It's choice, not chance, that determines your destiny. 
  -- Jean Nidetch
===



#
This e-mail message has been scanned for Viruses and Content and cleared 
by MailMarshal
For more information please visit www.marshalsoftware.com
#

--
Mailman-Users mailing list
[EMAIL PROTECTED]
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/


Re: [Mailman-Users] --with-mail-gid=? (please ignore..)

2002-10-23 Thread Hennie Rautenbach
My apologies folks,

Just found it in the FAQ. Pardon the waste of bandwidth.

Regards,

Hennie

Hennie Rautenbach wrote:


Hi there folks,

I have downloaded/configured/compiled and installed mailman-2.0.13 on 
a Sun running Solaris 8 and Python 2.2.1 and sendmail 8.10.2.

I have followed the documentation as best I could and have setup a 
mailing list etc.

When I post to the list the following error appear in /var/log/syslog...

Oct 23 10:14:44 vogue sendmail[15676]: [ID 801593 mail.info] 
g9NAEev15676: from=
[EMAIL PROTECTED], size=1600, class=0, nrcpts=1, 
msgid=3DB65A82.7040903@sa
binet.co.za, proto=ESMTP, daemon=MTA, relay=mfwjs01.mfw.is.co.za 
[196.35.77.13]
Oct 23 10:14:44 vogue Mailman mail-wrapper: [ID 702911 mail.error] 
Failure to ex
ec script. WANTED gid 2, GOT gid 1.  (Reconfigure to take 1?)

So my (probably stupid) question is: How do I determine under which 
GID sendmail runs ?

Regards,

Hennie


--
===
Hennie Rautenbach  Work: http://www.sabinet.co.za
082-556-1191   Play: http://www.overland.co.za	

It's choice, not chance, that determines your destiny. 
  -- Jean Nidetch
===




#
This e-mail message has been scanned for Viruses and Content and cleared 
by MailMarshal
For more information please visit www.marshalsoftware.com
#

--
Mailman-Users mailing list
[EMAIL PROTECTED]
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/


[Mailman-Users] e-mail to lists are rejected

2002-10-23 Thread Emmett Culley

I running a RH 7.3 distro, and am using Mailman with sendmail and
apache.  I can successfully send and receive e-mail both locally and
remotely, and the web server works correctly as well.

I've managed to get Mailman installed with the web interface working.  I
can add a new list and the list owner gets the notification message.  I
can add users from the admin page and they get the notification.

In all cases, replies to the addresses given in the notifications are
rejected by the server.  As are posts to the list.

I can see that the messages to the list are rejected (maillog) as User
unknown.  I can see in the cron log that qrunner is invoked every
minute.  I disabled the news portion in crontab.in.

I run into the end of my understanding of the connection from sendmail
to Mailman and cannot seem to find the information on the web.

None of the e-mail from this group or in the archives seems to address
this particular problem.  I am sure it is my configuration.

I'd be grateful for any help.

Emmett





--
Mailman-Users mailing list
[EMAIL PROTECTED]
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/