[Mailman-Users] Problems with mailman header regexps

[Russell King]

Hi,

Please CC: me with any responses; I'm not subscribed to these mailman
lists.

I'm desperately trying to get mailman to filter HTML-encoded email
from my mailing lists.  The problem is no matter what I try it still
gets through.

It appears that some of my regexps work, but some don't; this has been
annoying me for some time now, and I'm now at the point of considering
dropping mailman unless a solution to this problem can be found.

The message in question had the following headers:

> Reply-To: [EMAIL PROTECTED]
> From: ³×Æ®¿öÅ© <[EMAIL PROTECTED]>
> To:  <[EMAIL PROTECTED]>
> Subject: [±¤°í]¼Õ½¬¿î »ç¾÷¹× ºÎ¾÷À» ¼Ò°³ÇÕ´Ï´Ù
> Mime-Version: 1.0
> Content-Type: text/html; charset="ks_c_5601-1987"
> X-User: 2.62-figjdliv-lilkhn-Ddigq
> Message-Id: <[EMAIL PROTECTED]>

We've had all of the following in "bounce matching headers":

Content-type: \(text\/html\|multipart\/alternative\)
Content-type: \(text/html\|multipart/alternative\)
Content-type \(text/html\|multipart/alternative\)

(the last is definitely wrong; mailman complains in the config log).
None of these have worked.  The full regexp list is currently:

Subject: \(xxx\|ndn:\|RCPT:\|Delivery Confirmation\|NON-DELIVERY of\|Undeliverable 
message\|Receipt Confirmation\|\(Failed\|Returned\|unable to deliver\|away from my\) 
mail\|autoreply\|millionaire\|money\|ADV\|=?ISO-20220JP?\|Snowhite and the Seven 
Dwarfs\|China-diesel\|invitation\|really works for me\|DVD Movies\|Tax 
Free\|Rated\|Credit\|\$\|MobiCam\)
Content-type: \(text\/html\|multipart\/alternative\)
Date: ..\s...\s..\s.*:..:..\s..\s*$
Date: .*=\?.*\?=
X-Mailer: eMerge
X-EM-Registration: .*
X-Mailman-Version: .*
To: linux-\(arm\|arm-announce\)\@lists.arm.linux.org.uk
CC: linux-\(arm\|arm-announce\)\@lists.arm.linux.org.uk

Note that the last two definitely have worked.

This is mailman 2.0.8.

Also, I'm pretty concerned that mailman developers don't take bug reports
seriously.  I have a bug report in the system against mailman that has sat
there since April 7th 2001 - 414502.  The nature of this bug is such that
mail content can cause mailman's queue runner to stop processing mail
(because it dies each time it hits this particular message).  If mail
content can crash mailman, maybe mail content can be used to exploit
mailman?  Well, I've had nothing back, apart from soneone else confirming
the problem.

Does anyone actually process any mailman bug reports?

-- 
Russell King ([EMAIL PROTECTED])The developer of ARM Linux
 http://www.arm.linux.org.uk/personal/aboutme.html


--
Mailman-Users maillist  -  [EMAIL PROTECTED]
http://mail.python.org/mailman/listinfo/mailman-users

[Mailman-Users] Another mailman bug

[Russell King]

Hi,

I've just been through my mailman lists handling the held postings, and I
notice that mailman is playing silly buggers with the web interface.
Please see:

http://www.arm.linux.org.uk/images/mailmangroupings.jpg

I'm rapidly loosing confidence in Mailman as a decent piece of secure
software, especially as my attempts to report previous bugs/add them to
the sourceforge bug manager go totally unacknowledged for MONTHS.  In
fact, I've NEVER had any acknowledgement from the mailman developers
for ANYTHING.  I'm expecting this one to be handled the same way, so
I don't suppose it matters whatever I put in this email.

Since I can't wait around for months while no one even responds to
something like this, I've handled those pending messages the best I
can, so consider any data mailman had lost.

Thanks.

-- 
Russell King ([EMAIL PROTECTED])The developer of ARM Linux
 http://www.arm.linux.org.uk/personal/aboutme.html


--
Mailman-Users mailing list
[EMAIL PROTECTED]
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://www.python.org/cgi-bin/faqw-mm.py