[Mailman-Users] reject explanation send to owners ?

2005-06-27 Thread Christophe Meessen
Hello,

we have a list currently managed by two moderators. We use moderation 
and some time we reject mails and provide a specific explanation.
The ennoying feature in our current configuration is that the other 
moderator does not know the explanation given unless the moderator send 
by hand an explicit message to the other moderator to explain what he did.

There is an option to send mail to owner, but this function won't send 
the explanation sent back to the original sender. Is it possible that 
the reject message is sent also to the owners so that they can see the 
explanation given ?
--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: 
http://www.python.org/cgi-bin/faqw-mm.py?req=show&file=faq01.027.htp


[Mailman-Users] 1 pblm & 1 suggestion

2005-05-11 Thread Christophe Meessen
Hello,

I just created a list yesterday and this morning I recevied a message at 
8:00 saying I have -1 request to process.
When I check the page there are no requests. I then flagged mys self as 
moderated and sent a mail. I got the message informing me that there is 
a request to be processed. Everything worked fine.

Any idea where this -1 could come from ? How can I check if the list 
status/count is not corrupted ? Will it resynchronize it self 
automatically ?


The suggestion is for validating moderated mails. As a moderator we 
receive a mail with some short text in front and the mail to moderate as 
attachement. There is another mail attached at the end that suggest to 
reply to this mail to reject the moderated mail.  I would like to remove 
this mail and would prefer to have in the top of moderation mail a text
like

Reject: mailto:<...>
Accept: mailto:<>
etc.

I know that the accept is unsecure and that it would be preferable to 
request a connection to the web page with password authentication. Could 
it be possible to do this for a specific list ?

--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: 
http://www.python.org/cgi-bin/faqw-mm.py?req=show&file=faq01.027.htp


Re: [Mailman-Users] How do the spammers do it?

2005-05-15 Thread Christophe Meessen
If each user used a specific address to post to the list, one would know 
the source of inspiration of the spammer. For public lists it would not 
be easy to setup though.

Another method which I suspect was used for this purpose is to send to 
each subcriber a mail with a specific reply-to address in the form 
[EMAIL PROTECTED] Where 12345 is a user identifier. In this mail 
you request that users reply to confirm that the address is used by a 
real person and operational.

spybots that collect valid email addresses would collect this address 
once the requested reply is sent by the user. If the spammer use this 
address you would then know its source of inspiration.

--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: 
http://www.python.org/cgi-bin/faqw-mm.py?req=show&file=faq01.027.htp


Re: [Mailman-Users] How do the spammers do it?

2005-05-15 Thread Christophe Meessen
JLB wrote:
...

> I just don't get it. Nobody on this mailing list would be stupid 
> enough to fall for a spammer. 

Of course. It is ment to catch trojans and spybots that steal valid 
emails without the user beeing aware of it.

> Isn't there some way we can track these morons down and say "HEY 
> IDIOT, GO SPAM AOL OR SOMETHING AND LEAVE US TECHIES ALONE"?

If some human is forwarding the list address purposely to spammers then 
this method won't help.

The only efficient filtering system I can think of would use mail 
signature (pkcs7/pgp). Such signature can be generated for free it is 
only used for a specific application like a mailing list. It could be 
done with Python I think. For such kind of applications there is no need 
to renew certificates every year. A 10 to 20 year certificate would be 
safe enough for such kind of application.

--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: 
http://www.python.org/cgi-bin/faqw-mm.py?req=show&file=faq01.027.htp


Re: [Mailman-Users] How do the spammers do it?

2005-05-16 Thread Christophe Meessen
Brad Knowles wrote:
...

> If the signature is automatically generated by the MUA, then the 
> trojans/spybots can make use of this and still get through.  The only 
> way you can make this work is if you require actual human intervention 
> on the part of the sender,

That's true and is also the normal working model for signed messages.

> and that would probably also require human intervention on the part of 
> the mailing list administrator -- for each and every message.

That's not true. A mail signature is basically a hash value encrypted 
with a secret key. The public key, which is always passed along with the 
hash value, allows to decode the hash value and check the mail 
integrity. So you simply need to save the user public key, that you 
receive with the signed subscription confirmation mail, with the other 
user info.

Whenever this user sends a signed mail to the list you use his public 
key to decode the hash value and check the mail integrity. If it's valid 
you may forward it to the list. The signature can be removed if desired. 
This would protect the list from forged mails.

For lists that don't require subscription, there is no way to make a 
difference with spammers and normal users.
--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: 
http://www.python.org/cgi-bin/faqw-mm.py?req=show&file=faq01.027.htp


[Mailman-Users] archive indexed by google ?

2005-05-26 Thread Christophe Meessen
Hello,

I have two questions related to archiving with pipermail.

1° If the archive is made public, will google be able to index it ?
2° Is it possible to cutomise archive pages (list specific 
customisation) to append ads for instance ?

Thanx.

--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: 
http://www.python.org/cgi-bin/faqw-mm.py?req=show&file=faq01.027.htp


Re: [Mailman-Users] archive indexed by google ?

2005-05-27 Thread Christophe Meessen
Thank you for the answer. Sorry I should have checked the faq.

Now I have copied all the template files into lists/test/fr because it 
is french.
I modified all the html files with  to include link to personal 
favicon and added a banner with site logo just below the  tag.
I did the arch --wipe test and restarted qrunner.

This works well on most pages, though accessing the archives doesn't 
work anymore.

Here is what I see:
1°  since archives are private I get into a page where users have to 
provide a password.
2° just above the title bar (blue ribbon) there is a short text 
'%(message)s' showing up.
3° at end of blue ribbon instead of list name I see '%(realname)s'
4° when typing password and click button I see a web page with "Bad 
Request" message . The URL is .../test/%(action)s/

Another thing I noticed is that before I installed the files, when I 
accessed the archive page I would see a page in english instead of a 
french page. Don't know where this comes from and wanted to solve this 
anyway. I thought this could be a hint for an upstream problem or 
misconfiguration.

I don't think I messed up with template files since I only insterted text.
--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: 
http://www.python.org/cgi-bin/faqw-mm.py?req=show&file=faq01.027.htp


Re: [Mailman-Users] archive indexed by google ?

2005-05-27 Thread Christophe Meessen
Oops sorry, I just found out about the solution. I had a width="100%"  
and the % needs to be replaced by %%.
This is only required in some html template files. Apparently those 
related to archive management.

Unfortunately there are a few web pages that are not under template 
control.
I have identified two of them regarding user access. One is the page 
shown up when logging to view archives.
The other one is shown when showing page to unsubscribe or remind 
password. But this is not a showstopper.

--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: 
http://www.python.org/cgi-bin/faqw-mm.py?req=show&file=faq01.027.htp