[Mailman-Users] Unable to access web interface

2005-05-15 Thread William McLain

We recently started a new installation on a Mailman list on a new server,
and transferrred several lists from another server.  One list with about
4000 subscribers was not configured properly (left unmoderated) resulting in
several auto-replies to get through which then resulted in a mass reply of
many subscribers that ended up in using almost all of the servers resources.
In an effort to shutdown and clean up the list and traffic, the log files
were removed and then recreated but with the wrong permissions which
resulted in several "unable to write" errors.  One of these caused the web
interface to come up with this error

Bug in Mailman version 2.1.5

We're sorry, we hit a bug!

If you would like to help us identify the problem, please email a copy of
this page to the webmaster for this site with a description of what
happened. Thanks!
Traceback:

Traceback (most recent call last):
  File "/usr/local/mailman/scripts/driver", line 68, in run_main
immediate=1)
  File "/usr/local/mailman/Mailman/Logging/StampedLogger.py", line 52, in
__init__
Logger.__init__(self, category, nofail, immediate)
  File "/usr/local/mailman/Mailman/Logging/Logger.py", line 49, in __init__
self.__get_f()
  File "/usr/local/mailman/Mailman/Logging/Logger.py", line 67, in __get_f
1)
  File "/usr/local/lib/python2.4/codecs.py", line 607, in open
file = __builtin__.open(filename, mode, buffering)
IOError: [Errno 13] Permission denied: '/usr/local/mailman/logs/error'


Subsequently, the permissions and ownerships of the log files were repaired.
We finally got mailman to stabilize and it seems to be working properly
except that the web interdace still comes up with the above error and will
not allow access to the administration of the list.  I have a feeling that
this error is not generated dynamically on each access to the web interface,
but rather it is generaterd from a file that was saved when the error
ocurred.  I have searched through all the directories within Mailman and
have not been able to locate anything that may be the cause of this.  How
can I get rid of this "error" and get our web interface back.  Any list
tried on the web interface has the same error message with only the
applicable parts changing (location of the particualr lists).

Any help in resolving this problem would be greatly appreciated.

Thanking you all in advance,

William McLain




--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: 
http://www.python.org/cgi-bin/faqw-mm.py?req=show&file=faq01.027.htp


Re: [Mailman-Users] How do the spammers do it?

2005-05-15 Thread Christophe Meessen
If each user used a specific address to post to the list, one would know 
the source of inspiration of the spammer. For public lists it would not 
be easy to setup though.

Another method which I suspect was used for this purpose is to send to 
each subcriber a mail with a specific reply-to address in the form 
[EMAIL PROTECTED] Where 12345 is a user identifier. In this mail 
you request that users reply to confirm that the address is used by a 
real person and operational.

spybots that collect valid email addresses would collect this address 
once the requested reply is sent by the user. If the spammer use this 
address you would then know its source of inspiration.

--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: 
http://www.python.org/cgi-bin/faqw-mm.py?req=show&file=faq01.027.htp


Re: [Mailman-Users] How do the spammers do it?

2005-05-15 Thread JLB
On Sun, 15 May 2005, Christophe Meessen wrote:

> Date: Sun, 15 May 2005 13:38:55 +0200
> From: Christophe Meessen <[EMAIL PROTECTED]>
> To: Heather Madrone <[EMAIL PROTECTED]>
> Cc: mailman-users@python.org
> Subject: Re: [Mailman-Users] How do the spammers do it?
> 
> If each user used a specific address to post to the list, one would know
> the source of inspiration of the spammer. For public lists it would not
> be easy to setup though.
>
> Another method which I suspect was used for this purpose is to send to
> each subcriber a mail with a specific reply-to address in the form
> [EMAIL PROTECTED] Where 12345 is a user identifier. In this mail
> you request that users reply to confirm that the address is used by a
> real person and operational.
>
> spybots that collect valid email addresses would collect this address
> once the requested reply is sent by the user. If the spammer use this
> address you would then know its source of inspiration.
>

I just don't get it. Nobody on this mailing list would be stupid enough to 
fall for a spammer. Isn't there some way we can track these morons down 
and say "HEY IDIOT, GO SPAM AOL OR SOMETHING AND LEAVE US TECHIES ALONE"?

> --
> Mailman-Users mailing list
> Mailman-Users@python.org
> http://mail.python.org/mailman/listinfo/mailman-users
> Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
> Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
> Unsubscribe: 
> http://mail.python.org/mailman/options/mailman-users/jlb%40twu.net
>
> Security Policy: 
> http://www.python.org/cgi-bin/faqw-mm.py?req=show&file=faq01.027.htp
>

--
J. L. Blank, Systems Administrator, twu.net
--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: 
http://www.python.org/cgi-bin/faqw-mm.py?req=show&file=faq01.027.htp


Re: [Mailman-Users] How do the spammers do it?

2005-05-15 Thread Christophe Meessen
JLB wrote:
...

> I just don't get it. Nobody on this mailing list would be stupid 
> enough to fall for a spammer. 

Of course. It is ment to catch trojans and spybots that steal valid 
emails without the user beeing aware of it.

> Isn't there some way we can track these morons down and say "HEY 
> IDIOT, GO SPAM AOL OR SOMETHING AND LEAVE US TECHIES ALONE"?

If some human is forwarding the list address purposely to spammers then 
this method won't help.

The only efficient filtering system I can think of would use mail 
signature (pkcs7/pgp). Such signature can be generated for free it is 
only used for a specific application like a mailing list. It could be 
done with Python I think. For such kind of applications there is no need 
to renew certificates every year. A 10 to 20 year certificate would be 
safe enough for such kind of application.

--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: 
http://www.python.org/cgi-bin/faqw-mm.py?req=show&file=faq01.027.htp


[Mailman-Users] SPAM relayed mail through Mailman.

2005-05-15 Thread Colorado Tech Support
Hi, I'm pretty new to this, but I've got a  problem.

Last night, a SPAMer was able to relay 250 mail messages through my 
server and I can't figure out how they did it.

Here's my configuration:

Fedora Core 2 - kernel-2.6.10-1.771_FC2
apache - httpd-2.0.51-2.9
mailman-2.1.5-10.fc2
sendmail-8.12.11-4.6

Here's what I know...

My sendmail is configured in a way to only allow relaying from IP 
addresses within my network (the 192.168.blah.blah range).
I believe this is configured correctly because I get "RELAYING DENIED" 
messages all the time from SPAMers trying to relay through my server.

The only reason I know about the attempt is because I received over 100 
bounced messages to "[EMAIL PROTECTED]" from the target of the 
attack.

The bounced messages all contained the original message (which came from 
[EMAIL PROTECTED]).

My /etc/log/maillog file shows all 250 sendmails being relayed (here's 
just one):
maillog:May 14 21:02:52 nameofmyserver sendmail[14830]: j4F32px8014830: 
from=<[EMAIL PROTECTED]>, size=2408, class=0, nrcpts=1, 
msgid=<[EMAIL PROTECTED]>, bodytype=7BIT, 
proto=ESMTP, daemon=MTA, relay=mail.popcap.com [69.25.140.155]

My mailman settings don't allow anyone from any groups to send 
mass-mailings without approval.  (I verified this all this morning.)

So, I guess I have two questions:
1)  How did they do it?
(and more importantly)  2) How do I stop it?

Thank you all for your time!

Jon



-- 
Jon D Slater   Colorado Tech Support
p: 970.988.7246P.O. Box 143
f: 970.674.8060Windsor, Colorado
www.ColoTechSupport.Com80550

--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: 
http://www.python.org/cgi-bin/faqw-mm.py?req=show&file=faq01.027.htp


Re: [Mailman-Users] shunt dir and "Uncaught runner exception"

2005-05-15 Thread Brad Knowles
At 7:43 PM -0400 2005-05-14, Charles Sprickman wrote:

>  The perms look OK, but I do remember many months ago that the "smtp"
>  logfile would sometimes revert to being owned by root rather than
>  mailman. Very odd.

Are the logs being automatically rolled by a cron job?  That 
might explain things

>  If it is a permissions problem on a log, should that actually cause
>  the message to get shunted?  If that is what's happening, perhaps I
>  should put that in the SF bug tracker...

No, I wouldn't say that it should result in the message being 
shunted.  However, on reading the message being reported, that seems 
to be what is happening.

-- 
Brad Knowles, <[EMAIL PROTECTED]>

"Those who would give up essential Liberty, to purchase a little
temporary Safety, deserve neither Liberty nor Safety."

 -- Benjamin Franklin (1706-1790), reply of the Pennsylvania
 Assembly to the Governor, November 11, 1755

   SAGE member since 1995.  See  for more info.
--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: 
http://www.python.org/cgi-bin/faqw-mm.py?req=show&file=faq01.027.htp


Re: [Mailman-Users] Mailman FAQ

2005-05-15 Thread Brad Knowles
At 9:36 PM -0400 2005-05-14, Deboo ^ wrote:

>  Is there a Mailman howto and some FAQ? Please provide the links.

All the Mailman documentation is linked under 
, and the FAQ Wizard is at 
.

-- 
Brad Knowles, <[EMAIL PROTECTED]>

"Those who would give up essential Liberty, to purchase a little
temporary Safety, deserve neither Liberty nor Safety."

 -- Benjamin Franklin (1706-1790), reply of the Pennsylvania
 Assembly to the Governor, November 11, 1755

   SAGE member since 1995.  See  for more info.
--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: 
http://www.python.org/cgi-bin/faqw-mm.py?req=show&file=faq01.027.htp


Re: [Mailman-Users] Group mailnull

2005-05-15 Thread Mark Sapiro
John Poltorak wrote:
>
>I've just tried send mailing to a mailman list and get this error:-
>
>
>   - Transcript of session follows -
>Group mismatch error.  Mailman expected the mail
>wrapper script to be executed as group "mail", but
>the system's mail server executed the mail script as
>group "mailnull".  Try tweaking the mail server to run the
>script as group "mail", or re-run configure,
>providing the command line option `--with-mail-gid=mailnull'.
>554 5.3.0 unknown mailer error 2
>
>
>
>Why does the script get run as the group 'mailnull'? 
>
>I'm not sure what I need to do to run it as group 'mail' - I thought it 
>was already set to that. Can anyone help?

See http://www.python.org/cgi-bin/faqw-mm.py?req=show&file=faq06.016.htp

--
Mark Sapiro <[EMAIL PROTECTED]>   The highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan

--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: 
http://www.python.org/cgi-bin/faqw-mm.py?req=show&file=faq01.027.htp


Re: [Mailman-Users] How do the spammers do it?

2005-05-15 Thread Brad Knowles
At 5:10 PM +0200 2005-05-15, Christophe Meessen wrote:

>  The only efficient filtering system I can think of would use mail
>  signature (pkcs7/pgp). Such signature can be generated for free it is
>  only used for a specific application like a mailing list.

If the signature is automatically generated by the MUA, then the 
trojans/spybots can make use of this and still get through.  The only 
way you can make this work is if you require actual human 
intervention on the part of the sender, and that would probably also 
require human intervention on the part of the mailing list 
administrator -- for each and every message.

-- 
Brad Knowles, <[EMAIL PROTECTED]>

"Those who would give up essential Liberty, to purchase a little
temporary Safety, deserve neither Liberty nor Safety."

 -- Benjamin Franklin (1706-1790), reply of the Pennsylvania
 Assembly to the Governor, November 11, 1755

   SAGE member since 1995.  See  for more info.
--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: 
http://www.python.org/cgi-bin/faqw-mm.py?req=show&file=faq01.027.htp


Re: [Mailman-Users] Messages moderated from port 2525

2005-05-15 Thread Mark Sapiro
Ed Danley wrote:
>
>My domain host (http://www.siteground.com) runs mailman 2.1.5p1. I have a
>mailing list setup for my church for general news. The pastor and secretary
>are authorized to post. All others are moderated.
>
>This setup ran fine through my ISP, DSL via SBC, until SBC decided to start
>blocking port 25. At that time all mail needed to be sent with their
>signon/password for outgoing mail. When that happened, both the secretary
>and pastor postings became moderated. I have to intervene to allow the posts
>to proceed.


Something else must have changed too. What hoops Mailman has to jump
through to send mail won't affect holding an incoming post.


>In talking with my domain provider about this, they suggested that I send
>outgoing emails using port 2525 direct via them. While this works to allow
>mail going out without SBC blocking it, mailman is still moderating all
>postings. Siteground.com has tried a multitude of things (I don't know what)
>but nothing seems to work.


What reason does Mailman give for holding the post? Once we know that,
we'll have a clue as to what to look for.

--
Mark Sapiro <[EMAIL PROTECTED]>   The highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan

--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: 
http://www.python.org/cgi-bin/faqw-mm.py?req=show&file=faq01.027.htp


Re: [Mailman-Users] Include original e-mail with Held notice

2005-05-15 Thread Mark Sapiro
Bryan Carbonnell wrote:

>When a post is over the max_message_size a held notice is sent back to
>the sender.
>
>Is it possible to include the original e-mail with this held notice?
>Or at least the first line of the e-mail?

If admin_immed_notify is Yes, the entire post is attached to the
notification to the admin.

The notice to the sender contains the subject of the post, the list it
was sent to and the size of the post and the limit, but no other info
from the post. I know of no way to change this short of hacking the
code.

--
Mark Sapiro <[EMAIL PROTECTED]>   The highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan

--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: 
http://www.python.org/cgi-bin/faqw-mm.py?req=show&file=faq01.027.htp


[Mailman-Users] Outbound smtp email problems: (110, 'Connection timed out')

2005-05-15 Thread Matt England
Hello,

I'm having outbound email problems on my qmail-based server.  I've had the 
outbound email working previously on this server, so I know it CAN work.  I 
upgraded Mailman to 2.1.6rc4 since then.

Here's some of the smtp-failures log:

May 15 17:58:22 2005 (6656) Low level smtp error: (110, 'Connection timed 
out'), msgid: <[EMAIL PROTECTED]>
May 15 17:58:22 2005 (6656) Low level smtp error: please run connect() 
first, msgid: <[EMAIL PROTECTED]>
May 15 17:58:22 2005 (6656) delivery to [EMAIL PROTECTED] failed 
with code -1: (110, 'Connection timed out')


Outbound email from my /bin/mail command is working ok; I am running a 
virtual lists domain, however, not sure if that has anything to do with it.

While I'm hunting down this bug I was wondering if anyone could shed some 
light on it for me.

Thanks in advance,
-Matt

--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: 
http://www.python.org/cgi-bin/faqw-mm.py?req=show&file=faq01.027.htp


Re: [Mailman-Users] Outbound smtp email problems: (110, 'Connection timed out')

2005-05-15 Thread Brad Knowles
At 6:20 PM -0500 2005-05-15, Matt England wrote:

>  May 15 17:58:22 2005 (6656) Low level smtp error: (110, 'Connection timed
>  out'), msgid: <[EMAIL PROTECTED]>
>  May 15 17:58:22 2005 (6656) Low level smtp error: please run connect()
>  first, msgid: <[EMAIL PROTECTED]>
>  May 15 17:58:22 2005 (6656) delivery to [EMAIL PROTECTED] failed
>  with code -1: (110, 'Connection timed out')

Occasional timeouts are not too unusual, if you're on a busy 
server.  We see them on the python.org mail system, for example.

>  Outbound email from my /bin/mail command is working ok; I am running a
>  virtual lists domain, however, not sure if that has anything to do with it.

You could be having some reverse DNS problems on the virtual domain.

>  While I'm hunting down this bug I was wondering if anyone could shed some
>  light on it for me.

From the small amount of information you've provided, it's hard 
to say anything more.  We'd need more detail, especially including 
data from the MTA logs to see what it was thinking about those 
attempts.

-- 
Brad Knowles, <[EMAIL PROTECTED]>

"Those who would give up essential Liberty, to purchase a little
temporary Safety, deserve neither Liberty nor Safety."

 -- Benjamin Franklin (1706-1790), reply of the Pennsylvania
 Assembly to the Governor, November 11, 1755

   SAGE member since 1995.  See  for more info.
--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: 
http://www.python.org/cgi-bin/faqw-mm.py?req=show&file=faq01.027.htp


Re: [Mailman-Users] Messages moderated from port 2525

2005-05-15 Thread Ed Danley
The message reads:

The reason it is being held:
Posting to a moderated newsgroup

When I go to the web page for Membership Management, the box for "mod" is
not selected on any of the ids having problems. Of all of the boxes for the
ID, only nodupes and plain are have a check mark in them.

I also tried to reset the ID to moderated then reset it back to not
moderated with no luck.

Ed



On 5/15/05 5:52 PM, "Mark Sapiro" <[EMAIL PROTECTED]> wrote:

> Ed Danley wrote:
>> 
>> My domain host (http://www.siteground.com) runs mailman 2.1.5p1. I have a
>> mailing list setup for my church for general news. The pastor and secretary
>> are authorized to post. All others are moderated.
>> 
>> This setup ran fine through my ISP, DSL via SBC, until SBC decided to start
>> blocking port 25. At that time all mail needed to be sent with their
>> signon/password for outgoing mail. When that happened, both the secretary
>> and pastor postings became moderated. I have to intervene to allow the posts
>> to proceed.
> 
> 
> Something else must have changed too. What hoops Mailman has to jump
> through to send mail won't affect holding an incoming post.
> 
> 
>> In talking with my domain provider about this, they suggested that I send
>> outgoing emails using port 2525 direct via them. While this works to allow
>> mail going out without SBC blocking it, mailman is still moderating all
>> postings. Siteground.com has tried a multitude of things (I don't know what)
>> but nothing seems to work.
> 
> 
> What reason does Mailman give for holding the post? Once we know that,
> we'll have a clue as to what to look for.
> 
> --
> Mark Sapiro <[EMAIL PROTECTED]>   The highway is for gamblers,
> San Francisco Bay Area, Californiabetter use your sense - B. Dylan



--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: 
http://www.python.org/cgi-bin/faqw-mm.py?req=show&file=faq01.027.htp


Re: [Mailman-Users] Messages moderated from port 2525

2005-05-15 Thread Mark Sapiro
Ed Danley wrote:

>The message reads:
>
>The reason it is being held:
>Posting to a moderated newsgroup
>

On the admin->Mail<->News gateways page, news_moderation is set to
Moderated. It should probably be None unless you actually are gating
to a moderated Usenet news group.

It should definitely be None unless the first two settings on the page
are other than blank and gateway_to_news is Yes

--
Mark Sapiro <[EMAIL PROTECTED]>   The highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan

--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: 
http://www.python.org/cgi-bin/faqw-mm.py?req=show&file=faq01.027.htp


Re: [Mailman-Users] SPAM relayed mail through Mailman.

2005-05-15 Thread Mark Sapiro
Colorado Tech Support wrote:

>Hi, I'm pretty new to this, but I've got a  problem.
>
>Last night, a SPAMer was able to relay 250 mail messages through my 
>server and I can't figure out how they did it.
>
>Here's my configuration:
>
>Fedora Core 2 - kernel-2.6.10-1.771_FC2
>apache - httpd-2.0.51-2.9
>mailman-2.1.5-10.fc2
>sendmail-8.12.11-4.6
>
>Here's what I know...
>
>My sendmail is configured in a way to only allow relaying from IP 
>addresses within my network (the 192.168.blah.blah range).
>I believe this is configured correctly because I get "RELAYING DENIED" 
>messages all the time from SPAMers trying to relay through my server.
>
>The only reason I know about the attempt is because I received over 100 
>bounced messages to "[EMAIL PROTECTED]" from the target of the 
>attack.
>
>The bounced messages all contained the original message (which came from 
>[EMAIL PROTECTED]).

How do you know that Mailman was even involved in sending the original
spam? Perhaps the mailman-owner address was just spoofed. Mailman
generally sends messages with Sender:, Errors-To: and envelope sender
of -bounces so that bounces go there, not directly to
mailman-owner.

What do the full headers of one of these bounced messages look like?


>My /etc/log/maillog file shows all 250 sendmails being relayed (here's 
>just one):
>maillog:May 14 21:02:52 nameofmyserver sendmail[14830]: j4F32px8014830: 
>from=<[EMAIL PROTECTED]>, size=2408, class=0, nrcpts=1, 
>msgid=<[EMAIL PROTECTED]>, bodytype=7BIT, 
>proto=ESMTP, daemon=MTA, relay=mail.popcap.com [69.25.140.155]

What in here indicates any Mailman involvement?

--
Mark Sapiro <[EMAIL PROTECTED]>   The highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan

--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: 
http://www.python.org/cgi-bin/faqw-mm.py?req=show&file=faq01.027.htp


Re: [Mailman-Users] Messages moderated from port 2525

2005-05-15 Thread Ed Danley
Thank you. That solved the problem.


On 5/15/05 6:58 PM, "Mark Sapiro" <[EMAIL PROTECTED]> wrote:

> Ed Danley wrote:
> 
>> The message reads:
>> 
>> The reason it is being held:
>>Posting to a moderated newsgroup
>> 
> 
> On the admin->Mail<->News gateways page, news_moderation is set to
> Moderated. It should probably be None unless you actually are gating
> to a moderated Usenet news group.
> 
> It should definitely be None unless the first two settings on the page
> are other than blank and gateway_to_news is Yes
> 
> --
> Mark Sapiro <[EMAIL PROTECTED]>   The highway is for gamblers,
> San Francisco Bay Area, Californiabetter use your sense - B. Dylan
> 
> --
> Mailman-Users mailing list
> Mailman-Users@python.org
> http://mail.python.org/mailman/listinfo/mailman-users
> Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
> Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
> Unsubscribe: 
> http://mail.python.org/mailman/options/mailman-users/edwardd20%40danleys.org
> 
> Security Policy: 
> http://www.python.org/cgi-bin/faqw-mm.py?req=show&file=faq01.027.htp
> 
> 


--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: 
http://www.python.org/cgi-bin/faqw-mm.py?req=show&file=faq01.027.htp


Re: [Mailman-Users] Multiple Virtual domains Postfix+Mailman

2005-05-15 Thread Mark Sapiro
Dave Pisarek wrote:

>I built a new list server and will be moving the lists from the old
>server to the new. My question is - How do I set it so the old lists
>i.e. [EMAIL PROTECTED] will also still work with the new server
>that would have a list address of [EMAIL PROTECTED] I hope that
>makes sense.
>
>In other words if you have two different servers running two different
>virtual domains can they be combined on one server and not effect old
>customers ability to send to a list using the old virtual domain?

As long as all the listnames on the server are unique (i.e. no two
lists with the same name in different domains), this is no problem.
See the section on Virtual domains in Defaults.py (and put your
add_virtualhost() lines in mm_cfg.py).

If you want two have two distinct lists with the same name in different
domains see
http://www.python.org/cgi-bin/faqw-mm.py?req=show&file=faq04.047.htp
but be aware that the patches mentioned there don't work well -
running multiple Mailman copies works better.

--
Mark Sapiro <[EMAIL PROTECTED]>   The highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan

--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: 
http://www.python.org/cgi-bin/faqw-mm.py?req=show&file=faq01.027.htp


Re: [Mailman-Users] Unable to access web interface

2005-05-15 Thread Mark Sapiro
William McLain wrote:

>IOError: [Errno 13] Permission denied: '/usr/local/mailman/logs/error'
>
>
>Subsequently, the permissions and ownerships of the log files were repaired.
>We finally got mailman to stabilize and it seems to be working properly
>except that the web interdace still comes up with the above error and will
>not allow access to the administration of the list.  I have a feeling that
>this error is not generated dynamically on each access to the web interface,
>but rather it is generaterd from a file that was saved when the error
>ocurred.  I have searched through all the directories within Mailman and
>have not been able to locate anything that may be the cause of this.  How
>can I get rid of this "error" and get our web interface back.  Any list
>tried on the web interface has the same error message with only the
>applicable parts changing (location of the particualr lists).
>
>Any help in resolving this problem would be greatly appreciated.

Can you administer other lists? Does mailman write to other log files
successfully? Does /usr/local/mailman/logs/error exist? if so, you
might try moving it elsewhere and let Mailman create a new one and see
if that helps.

I suspect there is some error in the config.pck or some other file for
the list and then the failed attempt to log *that* error is what you
see on the bug page.

--
Mark Sapiro <[EMAIL PROTECTED]>   The highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan

--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: 
http://www.python.org/cgi-bin/faqw-mm.py?req=show&file=faq01.027.htp


Re: [Mailman-Users] Outbound smtp email problems: (110, 'Connection timed out')

2005-05-15 Thread Matt England
Some more info about my system:

MTA = patches qmail 1.03
Mailman = 2.1.6rc4

At 5/15/2005 06:36 PM, Brad Knowles wrote:
> Occasional timeouts are not too unusual, if you're on a busy 
> server.  We see them on the python.org mail system, for example.

That's note the case with my host.  There's virtually zero load on it at 
the moment.  It's a test server.

Also fyi:  all the inbound email to my list is showing up in my pipermail 
archive.

>>  Outbound email from my /bin/mail command is working ok; I am running a
>>  virtual lists domain, however, not sure if that has anything to do with it.
>
> You could be having some reverse DNS problems on the virtual domain.

I tried that, or at least according to Dave Sill's "The qmail handbook," 
and not difference in behavior.

I'm using tcpserver with qmail-smtpd, and here's my /etc/tcp.smtp:

[EMAIL PROTECTED] 8:47pm [...vpopmail/etc] 136> cat /etc/tcp.smtp
127.:allow,RELAYCLIENT=""
[EMAIL PROTECTED] 8:47pm [...vpopmail/etc] 137>


>>  While I'm hunting down this bug I was wondering if anyone could shed some
>>  light on it for me.
>
> From the small amount of information you've provided, it's hard 
> to say anything more.  We'd need more detail, especially including data 
> from the MTA logs to see what it was thinking about those attempts.

There's absolutely zero qmail-smtpd log entries (from what I can tell) 
corresponding to a smtp usage from a localhost process.  I'm grasping for 
air here and I find it rather frustrating.

Is there any way I can isolate the outbound/smtp mailman 
process/program/module?  I've got all my other outbound email mechanisms 
working, but I'm wading through a mountain of modules in mailman trying to 
figure out exactly which part is responsible for the outbound mail.

Still digging...any other thoughts/troubleshooting welcome, particularly 
when trying to isolate the outbound email.

-Matt

--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: 
http://www.python.org/cgi-bin/faqw-mm.py?req=show&file=faq01.027.htp


Re: [Mailman-Users] Outbound smtp email problems: (110, 'Connection timed out')

2005-05-15 Thread Mark Sapiro
Matt England wrote:
>
>Is there any way I can isolate the outbound/smtp mailman 
>process/program/module?  I've got all my other outbound email mechanisms 
>working, but I'm wading through a mountain of modules in mailman trying to 
>figure out exactly which part is responsible for the outbound mail.

Mailman/Handlers/SMTPDirect.py

--
Mark Sapiro <[EMAIL PROTECTED]>   The highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan

--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: 
http://www.python.org/cgi-bin/faqw-mm.py?req=show&file=faq01.027.htp


Re: [Mailman-Users] Outbound smtp email problems (qmail problems)

2005-05-15 Thread Matt England
It seems there's some problem with my SMTP server...I'm just trying to 
figure out what it is or how I can reproduce it other then keeping to point 
Mailman or phpBB forums at it (both fail for SMTP localhost connections).

I can run the following test ok:

[EMAIL PROTECTED] 10:35pm [~] 1> telnet localhost 25
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
220 biz2tek.com ESMTP
HELO biz2tek.com
250 biz2tek.com
HELO lists.biz2tek.com
250 biz2tek.com
MAIL FROM: <[EMAIL PROTECTED]>
250 ok
^H
502 unimplemented (#5.5.1)
RCPT TO: <[EMAIL PROTECTED]>
250 ok
^]
telnet> c
Connection closed.
[EMAIL PROTECTED] 10:41pm [~] 2>

Any other suggestions for testing my localhost SMTP server?

-Matt



At 5/15/2005 09:02 PM, Mark Sapiro wrote:
>Matt England wrote:
> >
> >Is there any way I can isolate the outbound/smtp mailman
> >process/program/module?  I've got all my other outbound email mechanisms
> >working, but I'm wading through a mountain of modules in mailman trying to
> >figure out exactly which part is responsible for the outbound mail.
>
>Mailman/Handlers/SMTPDirect.py
>
>--
>Mark Sapiro <[EMAIL PROTECTED]>   The highway is for gamblers,
>San Francisco Bay Area, Californiabetter use your sense - B. Dylan

--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: 
http://www.python.org/cgi-bin/faqw-mm.py?req=show&file=faq01.027.htp


Re: [Mailman-Users] Outbound smtp email problems (qmail problems)

2005-05-15 Thread Matt England
I should also note:  Mailman outbound email seems to work just fine when 
using Sendmail.py.

-Matt

At 5/15/2005 10:49 PM, Matt England wrote:
>It seems there's some problem with my SMTP server...I'm just trying to 
>figure out what it is or how I can reproduce it other then keeping to 
>point Mailman or phpBB forums at it (both fail for SMTP localhost connections).
>
>I can run the following test ok:
>
>[EMAIL PROTECTED] 10:35pm [~] 1> telnet localhost 25
>Trying 127.0.0.1...
>Connected to localhost.
>Escape character is '^]'.
>220 biz2tek.com ESMTP
>HELO biz2tek.com
>250 biz2tek.com
>HELO lists.biz2tek.com
>250 biz2tek.com
>MAIL FROM: <[EMAIL PROTECTED]>
>250 ok
>^H
>502 unimplemented (#5.5.1)
>RCPT TO: <[EMAIL PROTECTED]>
>250 ok
>^]
>telnet> c
>Connection closed.
>[EMAIL PROTECTED] 10:41pm [~] 2>
>
>Any other suggestions for testing my localhost SMTP server?
>
>-Matt
>
>
>
>At 5/15/2005 09:02 PM, Mark Sapiro wrote:
>>Matt England wrote:
>> >
>> >Is there any way I can isolate the outbound/smtp mailman
>> >process/program/module?  I've got all my other outbound email mechanisms
>> >working, but I'm wading through a mountain of modules in mailman trying to
>> >figure out exactly which part is responsible for the outbound mail.
>>
>>Mailman/Handlers/SMTPDirect.py
>>
>>--
>>Mark Sapiro <[EMAIL PROTECTED]>   The highway is for gamblers,
>>San Francisco Bay Area, Californiabetter use your sense - B. Dylan
>

--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: 
http://www.python.org/cgi-bin/faqw-mm.py?req=show&file=faq01.027.htp


Re: [Mailman-Users] Outbound smtp email problems (qmail problems)

2005-05-15 Thread Matt England
I also ran this test successfully:

[EMAIL PROTECTED] 11:03pm [~] 3> telnet 127.0.0.1 25
Trying 127.0.0.1...
Connected to 127.0.0.1.
Escape character is '^]'.
220 biz2tek.com ESMTP
helo lists.biz2tek.com
250 biz2tek.com
mail from: <[EMAIL PROTECTED]>
250 ok
rcpt to: <[EMAIL PROTECTED]>
250 ok
data
354 go ahead
Subject: testing smtp server

this is just a test.
.
250 ok 1116216266 qp 17632
quit
221 biz2tek.com
Connection closed by foreign host.
[EMAIL PROTECTED] 11:04pm [~] 4>


-Matt


At 5/15/2005 10:49 PM, Matt England wrote:
>It seems there's some problem with my SMTP server...I'm just trying to 
>figure out what it is or how I can reproduce it other then keeping to 
>point Mailman or phpBB forums at it (both fail for SMTP localhost connections).
>
>I can run the following test ok:
>
>[EMAIL PROTECTED] 10:35pm [~] 1> telnet localhost 25
>Trying 127.0.0.1...
>Connected to localhost.
>Escape character is '^]'.
>220 biz2tek.com ESMTP
>HELO biz2tek.com
>250 biz2tek.com
>HELO lists.biz2tek.com
>250 biz2tek.com
>MAIL FROM: <[EMAIL PROTECTED]>
>250 ok
>^H
>502 unimplemented (#5.5.1)
>RCPT TO: <[EMAIL PROTECTED]>
>250 ok
>^]
>telnet> c
>Connection closed.
>[EMAIL PROTECTED] 10:41pm [~] 2>
>
>Any other suggestions for testing my localhost SMTP server?
>
>-Matt
>
>
>
>At 5/15/2005 09:02 PM, Mark Sapiro wrote:
>>Matt England wrote:
>> >
>> >Is there any way I can isolate the outbound/smtp mailman
>> >process/program/module?  I've got all my other outbound email mechanisms
>> >working, but I'm wading through a mountain of modules in mailman trying to
>> >figure out exactly which part is responsible for the outbound mail.
>>
>>Mailman/Handlers/SMTPDirect.py
>>
>>--
>>Mark Sapiro <[EMAIL PROTECTED]>   The highway is for gamblers,
>>San Francisco Bay Area, Californiabetter use your sense - B. Dylan
>

--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: 
http://www.python.org/cgi-bin/faqw-mm.py?req=show&file=faq01.027.htp


Re: [Mailman-Users] Outbound smtp email problems (qmail problems)

2005-05-15 Thread Matt England
Another note:

/usr/lib/sendmail is a qmail executable disguised as sendmail for 
backwards-compatibility.

-Matt


At 5/15/2005 10:50 PM, Matt England wrote:
>I should also note:  Mailman outbound email seems to work just fine when 
>using Sendmail.py.
>
>-Matt
>
>At 5/15/2005 10:49 PM, Matt England wrote:
>>It seems there's some problem with my SMTP server...I'm just trying to 
>>figure out what it is or how I can reproduce it other then keeping to 
>>point Mailman or phpBB forums at it (both fail for SMTP localhost 
>>connections).
>>
>>I can run the following test ok:
>>
>>[EMAIL PROTECTED] 10:35pm [~] 1> telnet localhost 25
>>Trying 127.0.0.1...
>>Connected to localhost.
>>Escape character is '^]'.
>>220 biz2tek.com ESMTP
>>HELO biz2tek.com
>>250 biz2tek.com
>>HELO lists.biz2tek.com
>>250 biz2tek.com
>>MAIL FROM: <[EMAIL PROTECTED]>
>>250 ok
>>^H
>>502 unimplemented (#5.5.1)
>>RCPT TO: <[EMAIL PROTECTED]>
>>250 ok
>>^]
>>telnet> c
>>Connection closed.
>>[EMAIL PROTECTED] 10:41pm [~] 2>
>>
>>Any other suggestions for testing my localhost SMTP server?
>>
>>-Matt
>>
>>
>>
>>At 5/15/2005 09:02 PM, Mark Sapiro wrote:
>>>Matt England wrote:
>>> >
>>> >Is there any way I can isolate the outbound/smtp mailman
>>> >process/program/module?  I've got all my other outbound email mechanisms
>>> >working, but I'm wading through a mountain of modules in mailman trying to
>>> >figure out exactly which part is responsible for the outbound mail.
>>>
>>>Mailman/Handlers/SMTPDirect.py
>>>
>>>--
>>>Mark Sapiro <[EMAIL PROTECTED]>   The highway is for gamblers,
>>>San Francisco Bay Area, Californiabetter use your sense - B. Dylan
>

--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: 
http://www.python.org/cgi-bin/faqw-mm.py?req=show&file=faq01.027.htp