[Mailman-Users] Disabling mailman/create Web Page

2009-09-04 Thread Barry Finkel
Our cyber security group sent me notice of a vulnerability in
a Mailman web page:

 Web Application Potentially Sensitive CGI Parameter Detection

I think it is the URL:

 mailman/create

As I do not use that web page to create a new Mailman list, I want to
disable that page.  Is there an easy way to do it in Mailman, or do I
--
Barry S. Finkel
Computing and Information Systems Division
Argonne National Laboratory  Phone:+1 (630) 252-7277
9700 South Cass Avenue   Facsimile:+1 (630) 252-4601
Building 222, Room D209  Internet: bsfin...@anl.gov
Argonne, IL   60439-4828 IBMMAIL:  I1004994

--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: http://wiki.list.org/x/QIA9


[Mailman-Users] domain regex and template for the lists?

2009-09-04 Thread Andrei
Two quick questions:

Is it possible to copy list preferences from one list to another?

Is it possible to create a regex in mailman that would accept emails
from all domain members even if they are not members of a list?
For example, I have compla...@lists.host.com list with three members.
I would like users from host.com and lists.host.com (only) to be able
to send this list
--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: http://wiki.list.org/x/QIA9


Re: [Mailman-Users] Disabling mailman/create Web Page

2009-09-04 Thread Adam McGreggor
On Fri, Sep 04, 2009 at 09:02:58AM -0500, Barry Finkel wrote:
  mailman/create
 
 As I do not use that web page to create a new Mailman list, I want to
 disable that page.  Is there an easy way to do it in Mailman, or do I

By default, I don't ScriptAlias it ('create') in the first place.

Location /mailman/create
Deny from all
/Location

in the appropriate httpd config (or something like that) should do the
job, if you don't want over-the-web list-creation.

(invariably, i just switch screen(1) to the appropriate machine and
run newlist to handle list-creation.)

-- 
``There is a providence that protects idiots, drunkards,
  children and the United States of America.'' (Otto von Bismarck)
--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: http://wiki.list.org/x/QIA9


Re: [Mailman-Users] domain regex and template for the lists?

2009-09-04 Thread Mark Sapiro
Andrei wrote:

Two quick questions:

Is it possible to copy list preferences from one list to another?


Use bin/config_list -o to write the settings from one list to a file,
edit out the list specific settings which don't apply to the other
list. Some candidates are real_name, owner, moderator, description,
info and subject_prefix. Then use bin/config_list -i to apply the
remaining settings to the other list.


Is it possible to create a regex in mailman that would accept emails
from all domain members even if they are not members of a list?
For example, I have compla...@lists.host.com list with three members.
I would like users from host.com and lists.host.com (only) to be able
to send this list


If you really want just those two, put in accept_these_nonmembers

^.*@(lists\.)?host\.com$

or you could put both

^...@lists\.host\.com$
^...@host\.com$

If you want host.com and all subdomains, use

^...@.]host\.com$

-- 
Mark Sapiro m...@msapiro.netThe highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan

--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: http://wiki.list.org/x/QIA9


Re: [Mailman-Users] Disabling mailman/create Web Page

2009-09-04 Thread Mark Sapiro
Barry Finkel wrote:

Our cyber security group sent me notice of a vulnerability in
a Mailman web page:

 Web Application Potentially Sensitive CGI Parameter Detection

I think it is the URL:

 mailman/create


Googling 'Web Application Potentially Sensitive CGI Parameter
Detection mailman' doesn't show me anything relevant to current
Mailman.

If there really is a Mailman security issue, please post the details to
mailman-secur...@python.org.


As I do not use that web page to create a new Mailman list, I want to
disable that page.  Is there an easy way to do it in Mailman, or do I


Adam McGreggor has already replied suggesting denying access via the
web server configuration.

You could also just remove the create wrapper from Mailman's cgi-bin/
directory.

-- 
Mark Sapiro m...@msapiro.netThe highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan

--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: http://wiki.list.org/x/QIA9


Re: [Mailman-Users] Disabling mailman/create Web Page

2009-09-04 Thread George A. Theall
On Fri, Sep 04, 2009 at 09:02:58AM -0500, Barry Finkel wrote:

 Our cyber security group sent me notice of a vulnerability in
 a Mailman web page:
 
  Web Application Potentially Sensitive CGI Parameter Detection

This almost certainly is from a Nessus scan - see:

  http://www.nessus.org/plugins/index.php?view=singleid=40773

This particular plugin isn't reporting a vulnerability per se (ie, its
risk factor is None).  Instead, it notes that the name of one or more
parameters suggests it might be sensitive in some fashion.

 I think it is the URL:
 
  mailman/create

Probably.  That form has a parameter named 'password' (Initial list
password), which could be sniffed if the target web server doesn't use
HTTPS. 

 As I do not use that web page to create a new Mailman list, I want to
 disable that page.  

Not a bad idea.

Disclaimer: I work for Tenable Network Security as Director of
Vulnerability Research, which, among other things, is responsible for
writing the plugins for Nessus. 

George
-- 
the...@tifaware.com
--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: http://wiki.list.org/x/QIA9


[Mailman-Users] How to get rid of bogus held-message notifications?

2009-09-04 Thread Anne Anderson
Hello!

After a spammer targeted about 80 of our lists, I deleted the held messages
by physically removing the files at the command line.  However, every day at
8 AM I still get the emailed notifications that a message is being held.
Evidently something in Mailman still thinks those messages are there.  Is
there a way to clear this?  Thanks for any advice you can give.

We are running 2.1.9 on a SLES Linux server.

Anne
-- 
Anne Anderson
Web Application Developer / Database Manager
Information Technology
Westmont College
--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: http://wiki.list.org/x/QIA9


[Mailman-Users] Microsoft Outlook and footer/signature attachments

2009-09-04 Thread Christopher C. Wright
I've done some reading through this and other mailing lists, but I can't
find anything relating to this topic past 2004; if there is something
more current, please forgive me.

In short, any time someone sends a non purely-text/plain email through
our Mailman lists, Outlook decides the footer (detailing the list name
and the like) is an attachment, and so presents it as such to the user. 
I understand this is purely an Outlook problem (several other mail
clients in use do not display this behavior), but the higher-ups at my
company wish this 'problem' resolved, and each of them use Outlook.

I had found a patch to one of the message-handling scripts, specifically
related to attachment processing, but discovered that it had already
been implemented in the main Mailman build some time ago.  In short, I'm
just trying to append the message footer to the body of whatever message
comes through, before tacking on attachments.

Thank you for your time
-- Christopher
--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: http://wiki.list.org/x/QIA9

[Mailman-Users] accept email to a maillist only from list owner

2009-09-04 Thread Eric Parker

I'm running Mailman version 2.1.9

Is there a setting I could make make to only accept mail to a maillist that 
comes from the maillist owner?

I was thinking I could set all list members moderation bit to on and set 
'discard posts from moderated members'. Is this the only way, and/or the best 
way to accomplish this?

Thank you for any help you can provide.
Eric

_
Windows Live: Keep your friends up to date with what you do online.
http://windowslive.com/Campaign/SocialNetworking?ocid=PID23285::T:WLMTAGL:ON:WL:en-US:SI_SB_online:082009
--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: http://wiki.list.org/x/QIA9


Re: [Mailman-Users] Mail to yahoo / google accounts

2009-09-04 Thread Gary R. Schmidt

 Nor do we, and it's likely they won't tell you because they consider
 such information to be proprietary and of potential use to spammers.

A way around these problems may be to use your ISP's mail-relay, rather 
than delivering directly.  Or use a third-party mailer, such as fastmail.fm.


Usually your ISP is not on any black-lists, and they also (should) have 
mechanisms in place to get off such black-lists when they get on them.


Of course, to get lots of messages out via your ISP you may need to 
authenticate your connections and so on - I ended up building a custom 
version or postfix to use SASL and TLS, with which my ISP let's me 
specify 300 recipients rather than 50.  Telling postfix 
default_destination_recipient_limit=300 completed the magic.


Cheers,
GaryB-)
--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: http://wiki.list.org/x/QIA9


Re: [Mailman-Users] Relay not permitted...

2009-09-04 Thread Dylan L Evans
I am fairly new to both email and list administration.  I inherited a 
domino environment and a majordomo listserv.  I am in the process of 
migrating the lists to a new mailman server running on redhat and am 
experiencing the same relaying  issue.  Messages are routing to everyone 
in the domino domain but go no further.  I apologize if this is below the 
scope of this listserv but any help you can offer would be greatly 
appreciated!

Thanks,

Dylan Evans 
Systems Manager 
Information Technology Services 
University of Nebraska at Kearney 




From:
Stephen J. Turnbull turnb...@sk.tsukuba.ac.jp
To:
Adam McGreggor adam-mail...@amyl.org.uk
Cc:
mailman-users@python.org
Date:
09/02/2009 10:13 AM
Subject:
Re: [Mailman-Users] Relay not permitted...
Sent by:
mailman-users-bounces+evansdl=unk@python.org



Adam McGreggor writes:

  My advice would be ditch the god-awful split config, and use a
  monolithic file, there's usually a sample in
  /usr/share/doc/exim4-base/examples/example.conf.gz

Actually, it might be more useful to start with the monolithic config
file that lives at

/var/lib/exim4/config.autogenerated

--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Searchable Archives: 
http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/evansdl%40unk.edu

Security Policy: http://wiki.list.org/x/QIA9


--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: http://wiki.list.org/x/QIA9


Re: [Mailman-Users] Mail to yahoo / google accounts

2009-09-04 Thread Hien HUYNH HUU
Dear Stephen, Mark !
 Thank you for your reply.
 I don't know why the gmail/yahoo mail server indicate my server is spam 
although my customers want to receive my post from the list.
 I check my qmail settings and see that my DNS, rDNS are Ok.
 I am configuring concurrencyremote is 5 with qmail and : SMTP_MAX_RCPTS = 
10, SMTP_MAX_SESSIONS_PER_CONNECTION = 1, QRUNNER_SLEEP_TIME = seconds(10) with 
Mailman so that we just use bad performance to be called spam.
 Please help me .
 Best regards,
 Huu Hien


-Original Message-
From: Stephen J. Turnbull [mailto:step...@xemacs.org] 
Sent: Wednesday, September 02, 2009 7:48 AM
To: Hien HUYNH HUU
Cc: mailman-users@python.org
Subject: [Mailman-Users] Mail to yahoo / google accounts

Hien HUYNH HUU writes:

Have you read the FAQ?

  Now I have a problem when sending emails to yahoo/gmail
  accounts with my maillist. Actually I send post to a lot of
  accounts so that yahoo and google deny to receive my post, the
  log I received likes this:

Both of those indicate you are suspected of spamming.  The Yahoo
message says their users are actually complaining about your mail.
(The big freemail hosts have been know to lie about exactly why
they're blocking your mail, but if you really are causing user
complaint you're in big trouble at that host.  It's very difficult to
get back in their good graces after a history of user complaint.)

You should go read their guidelines, and find out how to conform to
them.

 I must wait for about 2 hours to resend and It block again.
 Please help me to config mailman/qmail so that I can send mail
 to them without being deny anything.

This is probably more a qmail problem than a Mailman problem.

You really should talk to qmail people about qmail.  There may be a
few on this list, but most people here use sendmail, Postfix, or Exim,
and the most active experts on this list know nothing about qmail that
isn't in the FAQ.
--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: http://wiki.list.org/x/QIA9


[Mailman-Users] Opt out footers as .txt attachments preventing CAN SPAM Act compliance

2009-09-04 Thread Keith Jarvis
Hello

 

I'm part of a small nonprofit running Mailman version 2.1.9 and we have
consistently found that most of our subscribers receive the footers where
the opt out language is as .txt attachments and therefore do not know how to
opt out.

 

I searched the help/support forums to find that this seems to be a
widespread problem.

 

Is it fixed in current versions?  Are there repairs available to this
problem that a poor nonprofit without staff web developers or IT funds can
afford or know how to implement?

 

Please help!

 

Keith R Jarvis

The ManKind Project

Information Systems Director

 

7088 Burkitt Road

Antioch, Tennessee 37013 USA

Home/Office: 615.206.7232 

Fax: 615.224.0928

Cell: 615.828.2033

Email: infosyst...@mkp.org

Skype: JarvisDog

 

I create a world of healing and truth by touching the Divine and modeling
authentic transparency.

 

 

 

 

--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: http://wiki.list.org/x/QIA9


[Mailman-Users] Donate to the GNU Mailman Project (directed donation program)

2009-09-04 Thread Verwaltung

Dear GNU Mailman - Team,

we want to sponsor 500 $ for the further development of your excellent 
GNU Mailman Project.
Is it possible that we will appear as a sponsor (directed donation 
program) on the URL http://www.gnu.org/software/mailman/index.html below 
Thanks go out to: with a link to our agency http://www.seocomplete.de 
and anchor text Suchmaschinenoptimierung?


Best Regards

Helmut Naber

--
seoCOMPLETE
Suchmaschinenoptimierung und Internet Marketing

Dipl.-Inf. (FH) Helmut Naber

Telefon: +49 231 225 12 92
Telefax: +49 231 225 12 99
E-Mail: verwalt...@seocomplete.de
Web: http://www.seocomplete.de


Postanschrift:
Rheinlanddamm 201
44139 Dortmund


USt-Id: DE 261497243
Str-Nr.: 340/5119/1262




--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: http://wiki.list.org/x/QIA9


Re: [Mailman-Users] How to get rid of bogus held-message notifications?

2009-09-04 Thread Mark Sapiro
Anne Anderson wrote:

After a spammer targeted about 80 of our lists, I deleted the held messages
by physically removing the files at the command line.  However, every day at
8 AM I still get the emailed notifications that a message is being held.
Evidently something in Mailman still thinks those messages are there.  Is
there a way to clear this?  Thanks for any advice you can give.


If you had deleted the messages from the command line with Mailman's
bin/discard tool instead of just removing the files, there would be no
problem.

You have a couple of choices. If you go to the list's admindb
interfaces, you will see items there for the messages, but without the
actual massage. The process of attempting to display these will, in
fact, clear the problem, so just visiting the admindb page for the
list will clear that list.

You can also just remove the lists/LISTNAME/request.pck files, but that
will also lose any other pending requests.

-- 
Mark Sapiro m...@msapiro.netThe highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan

--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: http://wiki.list.org/x/QIA9


Re: [Mailman-Users] Microsoft Outlook and footer/signature attachments

2009-09-04 Thread Mark Sapiro
Christopher C. Wright wrote:

In short, any time someone sends a non purely-text/plain email through
our Mailman lists, Outlook decides the footer (detailing the list name
and the like) is an attachment, and so presents it as such to the user. 
I understand this is purely an Outlook problem (several other mail
clients in use do not display this behavior), but the higher-ups at my
company wish this 'problem' resolved, and each of them use Outlook.


See the FAQ at http://wiki.list.org/x/84A9. It is clear that options
3 and 4 don't work for you. If neither option 1 or 2 works either, you
can see the note at the bottom which will lead you to a patch which we
don't recommend for the reasons discussed in the FAQ, but which you
may find useful.

-- 
Mark Sapiro m...@msapiro.netThe highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan

--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: http://wiki.list.org/x/QIA9


Re: [Mailman-Users] Donate to the GNU Mailman Project (directed donation program)

2009-09-04 Thread Brad Knowles

Verwaltung wrote:

we want to sponsor 500 $ for the further development of your excellent 
GNU Mailman Project.
Is it possible that we will appear as a sponsor (directed donation 
program) on the URL http://www.gnu.org/software/mailman/index.html below 
Thanks go out to: with a link to our agency http://www.seocomplete.de 
and anchor text Suchmaschinenoptimierung?


Actually, I think the best thing for you to do is to go to the page at 
https://my.fsf.org/donate/directed-donations/gnumailman and fill out the 
form there.


If you have any more questions about this process, please send an e-mail 
message to mailman-ca...@python.org.


--
Brad Knowles b...@python.org
Member of the Python.org Postmaster Team  Co-Moderator of the
mailman-users and mailman-developers mailing lists
--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: http://wiki.list.org/x/QIA9


Re: [Mailman-Users] accept email to a maillist only from list owner

2009-09-04 Thread Mark Sapiro
Eric Parker wrote:

Is there a setting I could make make to only accept mail to a maillist that 
comes from the maillist owner?

I was thinking I could set all list members moderation bit to on and set 
'discard posts from moderated members'. Is this the only way, and/or the best 
way to accomplish this?


That's the basic idea. See the FAQ at http://wiki.list.org/x/3YA9 for
more.

-- 
Mark Sapiro m...@msapiro.netThe highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan

--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: http://wiki.list.org/x/QIA9


Re: [Mailman-Users] Relay not permitted...

2009-09-04 Thread Mark Sapiro
Dylan L Evans wrote:

I am fairly new to both email and list administration.  I inherited a 
domino environment and a majordomo listserv.  I am in the process of 
migrating the lists to a new mailman server running on redhat and am 
experiencing the same relaying  issue.  Messages are routing to everyone 
in the domino domain but go no further.  I apologize if this is below the 
scope of this listserv but any help you can offer would be greatly 
appreciated!


These questions are best directed to support resources specific to your
MTA, but if you tell us what your MTA is, there may be someone on this
list who can help.

-- 
Mark Sapiro m...@msapiro.netThe highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan

--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: http://wiki.list.org/x/QIA9


Re: [Mailman-Users] Opt out footers as .txt attachments preventing CANSPAM Act compliance

2009-09-04 Thread Mark Sapiro
Keith Jarvis wrote:

I'm part of a small nonprofit running Mailman version 2.1.9 and we have
consistently found that most of our subscribers receive the footers where
the opt out language is as .txt attachments and therefore do not know how to
opt out.
[...]
Is it fixed in current versions?  Are there repairs available to this
problem that a poor nonprofit without staff web developers or IT funds can
afford or know how to implement?


There are no differences between 2.1.9 and the latest 2.1.12 release in
this respect. See the FAQ at http://wiki.list.org/x/84A9 and
consider option 2 - post only plain text and/or configure content
filtering to remove all non-plain-text.

Do you have an actual reference stating that the unsubscribe
information is not compliant if it is in a separate MIME part?

-- 
Mark Sapiro m...@msapiro.netThe highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan

--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: http://wiki.list.org/x/QIA9


[Mailman-Users] Opt out footers as .txt attachments preventing CAN SPAM Act compliance

2009-09-04 Thread Stephen J. Turnbull
Keith Jarvis writes:

  I'm part of a small nonprofit running Mailman version 2.1.9 and we have
  consistently found that most of our subscribers receive the footers where
  the opt out language is as .txt attachments and therefore do not know how to
  opt out.

Sounds like most of your subscribers use Outlook [Express].  There's
nothing Mailman can do about buggy software produced by an 800-lb
gorilla.

As Mark Sapiro wrote in another post:

See the FAQ at http://wiki.list.org/x/84A9. [...]
If neither option 1 or 2 works either, you can see the note at the
bottom which will lead you to a patch which we don't recommend for
the reasons discussed in the FAQ, but which you may find useful.

If you are running Mailman yourself but don't have the expertise to
apply a patch, there may be people on this list who would be willing
to help a poor nonprofit at nominal cost.  If you were located in
Tsukuba Japan I'd do it for beer and pizza. :-)  If you are depending
on your ISP for Mailman support, and they're getting a lot of problem
reports, they might be willing to do it to keep the paying customers
happy.

Note that if the patch is applied, you/they need to say so in any
future problem reports about attachments.

--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: http://wiki.list.org/x/QIA9