Re: [Mailman-Users] Are there any known exploits in 2.1.5 rerequestemail address and spamming?

2008-09-23 Thread Martin Evans

Mark Sapiro wrote:

Martin Evans wrote:


Mark Sapiro wrote:

If I understand correctly what you are saying, spam is being sent to
the list-request address with a From: header containing an innocent
3rd party address. The response from Mailman, which contains the
original message, is sent to the innocent 3rd party.
Actually that is not the case. It appears spam is sent to the request 
address and it ends up being sent to an innocent 3rd party without any 
mailman text at all. It is difficult for me to diagnose this as my mail 
server has been blacklisted by so many places I've had to disable 
mailmain completely. I saw lots of emails coming in to the request 
address and caught some of the identical emails stuck on my outgoing 
mail queue due to failure to send. What happened in between I cannot say 
right now.



Do your MTA logs or the outgoing queue entries give any clues. I'd be
interested in the timing of the messages to the -request address
relative to the outgoing messages, and the envelope sender of the
outgoing messages.

I don't know of any way that Mailman would resend a message from the
-request address without Mailman added text.


Sorry, I was mistaken, there is a little mailman text in the message - 
we were spamming so much I got lost in all the messages. What follows is 
what I copied off the mail queue at the time:


--===1172181569==
Content-Type: text/plain; charset=us-ascii
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit

The results of your email command are provided below. Attached is your
original message.


- Unprocessed:
   Viagrapills Cialix Pills FemaleViagra  Phentrimine 
  PenisGrowth Pack SQMA  Tramadol Levitr   410 
more meds to choose FromPlease get your Free 4 - 12 ViagraPills from 
ushttp://kciu.pclinx.cn


- Done.


--===1172181569==
Content-Type: message/rfc822
MIME-Version: 1.0

Received: from vlxqyggr (bd223d4f.virtua.com.br [189.34.61.79] (may be 
forged))

   by ..com (8.14.0/8.14.0) with SMTP id m8EEbNYe015008;
   Sun, 14 Sep 2008 15:37:32 +0100
To: [EMAIL PROTECTED]
Subject: 82%-92% Off Price!!  ViagraPills $1.40/pill, Cialix 
Pills$2.21/pill,

   super LowPrice just for You tyjlt 2v4
X-Sender: [EMAIL PROTECTED]
Sender: [EMAIL PROTECTED]
From: x x [EMAIL PROTECTED]
Reply-To: x x [EMAIL PROTECTED]
Message-ID: [EMAIL PROTECTED]
Date: Sun, 14 Sep 2008 07:18:39 -0700
Content-Type: text/plain;
   charset=iso-8859-2
Content-Transfer-Encoding: 8bit

  We Give You FreeViagraPills (Free 4 - 12 pills With any Order) 
Viagrapills  Cialix Pills  FemaleViagra   Phentrimine 
PenisGrowth Pack  SQMA   Tramadol  Levitr  410 more meds to 
choose From
Please get your Free 4 - 12 ViagraPills from us 
http://kciu.pclinx.cn


--===1172181569==--

So it appears it was handled as an unprocessed command.



I don't really want to start mailman up again as we cannot 
afford to be black listed since we do most of our business online and 
after a weekend of not spamming people we may get off some of the black 
lists.



Current Mailman through 2.1.11 will behave the same. These issues will
be addressed in 2.2.

In the mean time, the best solution is effective spam filtering ahead
of Mailman. Barring that, you can disable the -request and perhaps
other support addresses and force everyone to use the web for
subscribing, confirming, etc.


That is a reasonable alternative I'll look in to.



Also, see the FAQ at http://wiki.list.org/x/NQAy.



Thank you and sorry for the mistake suggesting there was no mailman text 
in the replies.


Martin
--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: http://wiki.list.org/x/QIA9


[Mailman-Users] posting returned mail

2008-09-23 Thread faisal anif

hi,
 
on subscribing to my list the subscribers recieve the welcome messageto their 
inboxes. 
 
but when I post to the list I get a returned mail with the following error:
 
*
[EMAIL PROTECTED]: Command died with status 2:/var/lib/mailman/mail/mailman 
post listname. Command output: Groupmismatch error. Mailman expected the mail 
wrapper script to be executed asgroup daemon, but the system's mail server 
executed the mail script asgroup mailman. Try tweaking the mail server to run 
the script as groupdaemon, or re-run configure, providing the command line 
option`--with-mail-gid=mailman'.
*
 
what commands should I run when I log to SSH as ROOT?
 
Thanks
 
 
_
Discover the new Windows Vista
http://search.msn.com/results.aspx?q=windows+vistamkt=en-USform=QBRE
--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: http://wiki.list.org/x/QIA9


Re: [Mailman-Users] massive unsubscribe

2008-09-23 Thread Tecru Info
There have been like 600 unsubscribes at once, some from from people  
we know, all across the board as far as ISP's go, not all AOL, or even  
google or yahoo.


Is there anything else I should check?

On Sep 18, 2008, at 6:51 PM, Stephen J. Turnbull wrote:


Tecru Info writes:


We are having a problem where half the email list is getting
unsubscribed. Has this happened to anyone? The people did not
unsubscribe themselves.


Things to check:

(1) You have been (mis)identified as a spammer, and ISPs are bouncing
   your mail.  This causes the mail you send to those ISPs (any user
   at such an ISP) to bounce, and the users get unsubscribed.

(2) You have a lot of users at an ISP like AOL, which assume that
   you're a spammer until you take steps to prove otherwise.  (But
   these ISPs tend to throw away mail that they don't like rather
   than bounce it, so the symptom would be not getting posts rather
   than getting unsubscribed.)

There's more information about both of these issues, how to check and
how to resolve, in the FAQ.


--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: http://wiki.list.org/x/QIA9


[Mailman-Users] migrating Mailman

2008-09-23 Thread Shambhu Sharma
Hi,

  I would like to migrate my Mailman from one server to another server
which has already Mailman running and some lists are created. I searched
Mailman archives but didn't find any scenario like this. Here is detail:
I have two servers (A and B) and on both Mailman is running with having
different mailing lists. Now I want to stop Mailman on A and migrate all
lists to Mailman B without affecting existing lists of B. Please let me
know how to do that.

Thanks in adv.

-- 
If linux doesn't have a solution, then u have a wrong problem.

Shambhu Kumar Sharma
Arada Systems
91-98864 91913
--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: http://wiki.list.org/x/QIA9


Re: [Mailman-Users] posting returned mail

2008-09-23 Thread Brad Knowles

faisal anif wrote:


* [EMAIL PROTECTED]: Command died with status
2:/var/lib/mailman/mail/mailman post listname. Command output:
Groupmismatch error. Mailman expected the mail wrapper script to be
executed asgroup daemon, but the system's mail server executed the mail
script asgroup mailman. Try tweaking the mail server to run the script
as groupdaemon, or re-run configure, providing the command line
option`--with-mail-gid=mailman'. *

what commands should I run when I log to SSH as ROOT?


The FAQ Wiki is at 
http://wiki.list.org/display/DOC/Frequently+Asked+Questions.  Search for 
group mismatch.


--
Brad Knowles [EMAIL PROTECTED]
LinkedIn Profile: http://tinyurl.com/y8kpxu
--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: http://wiki.list.org/x/QIA9


Re: [Mailman-Users] massive unsubscribe

2008-09-23 Thread Brad Knowles

Tecru Info wrote:

There have been like 600 unsubscribes at once, some from from people we 
know, all across the board as far as ISP's go, not all AOL, or even 
google or yahoo.


Is there anything else I should check?


Check your logs.  Check to see if you are on any of the common black lists.

Check the FAQ Wiki for more information on these subjects.

--
Brad Knowles [EMAIL PROTECTED]
LinkedIn Profile: http://tinyurl.com/y8kpxu
--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: http://wiki.list.org/x/QIA9


Re: [Mailman-Users] migrating Mailman

2008-09-23 Thread Mark Sapiro
Shambhu Sharma wrote:

  I would like to migrate my Mailman from one server to another server
which has already Mailman running and some lists are created. I searched
Mailman archives but didn't find any scenario like this. Here is detail:
I have two servers (A and B) and on both Mailman is running with having
different mailing lists. Now I want to stop Mailman on A and migrate all
lists to Mailman B without affecting existing lists of B. Please let me
know how to do that.


As long as the Mailman version on B is the same or more recent than
that on A, this is no problem.

See the first paragraph of the FAQ at http://wiki.list.org/x/2oA9 and
the posts it points to.

Also see the post at
http://mail.python.org/pipermail/mailman-users/2008-February/060276.html.

-- 
Mark Sapiro [EMAIL PROTECTED]The highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan

--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: http://wiki.list.org/x/QIA9


Re: [Mailman-Users] (pipermail versus ...) To join aconversationfromthe web interface

2008-09-23 Thread Mark Sapiro
Edward Harvey wrote:

Not sure how much of this you like / agree with, but here's an example  
of how I like to obscure things like that:
   http://nedharvey.com/pipermailconfig.html


Thanks for the suggestion. One comment on your page - I don't think the
list reply mailto should be obscured even if
ARCHIVER_OBSCURES_EMAILADDRS = YES. Doing so leads to no links at all
with a non-javascript enabled browser.

-- 
Mark Sapiro [EMAIL PROTECTED]The highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan

--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: http://wiki.list.org/x/QIA9


Re: [Mailman-Users] migrating Mailman

2008-09-23 Thread Barry Finkel
Shambhu Sharma wrote:

  I would like to migrate my Mailman from one server to another server
which has already Mailman running and some lists are created. I searched
Mailman archives but didn't find any scenario like this. Here is detail:
I have two servers (A and B) and on both Mailman is running with having
different mailing lists. Now I want to stop Mailman on A and migrate all
lists to Mailman B without affecting existing lists of B. Please let me
know how to do that.


And Mark Sapiro replied:
As long as the Mailman version on B is the same or more recent than
that on A, this is no problem.

See the first paragraph of the FAQ at http://wiki.list.org/x/2oA9 and
the posts it points to.

AND there are no lists on A with the same name as a list on B.
--
Barry S. Finkel
Computing and Information Systems Division
Argonne National Laboratory  Phone:+1 (630) 252-7277
9700 South Cass Avenue   Facsimile:+1 (630) 252-4601
Building 222, Room D209  Internet: [EMAIL PROTECTED]
Argonne, IL   60439-4828 IBMMAIL:  I1004994

--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: http://wiki.list.org/x/QIA9