Re: [Mailman-Users] Harvesting of email addresses for spam fromarchives

2008-09-08 Thread David Beaumont
I've just checked myself and the HTML source still seems to allow robots:
 on each message and  on the index page.  I would want
noindex and nofollow on both pages.  

Changing to private archives doesn't seem to make any difference to that,
does it only apply to new archiving?  The help is a bit vague here, does
public mean the data is prepared for public posting  (emails obscufacted)
and private mean they are not, or does private mean they are not put on the
web? i.e. which of private and public is actually the most secure?

Also search engines still seem to be able to see the data e.g. type 
"neoprene site:lists.shire.net/pipermail/dbamain/ " into Google, maybe this
will go in a few days?

David

> -Original Message-
> From: [EMAIL PROTECTED] 
> [mailto:[EMAIL PROTECTED] On 
> Behalf Of David Beaumont
> Sent: 08 September 2008 20:19
> To: mailman-users@python.org
> Subject: Re: [Mailman-Users] Harvesting of email addresses 
> for spam fromarchives
> 
> Thanks is this still the case at  
> http://lists.shire.net/pipermail/dbamain/
> ?  We have just put a password on so I am hoping that will 
> stop robots too.
> 
> David 
> 
> > -Original Message-
> > From: Paul [mailto:[EMAIL PROTECTED] 
> > Sent: 08 September 2008 20:00
> > To: David Beaumont
> > Cc: mailman-users@python.org
> > Subject: Re: [Mailman-Users] Harvesting of email addresses 
> > for spam from archives
> > 
> > It helps to disallow but the site is allowing.  So possible 
> > some engines
> > will bot the whole site:
> > 
> > http://www.mail-archive.com/robots.txt
> > 

--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: http://wiki.list.org/x/QIA9


Re: [Mailman-Users] Harvesting of email addresses for spam fromarchives

2008-09-08 Thread Mark Sapiro
Bill Christensen wrote:
>
>It appears that the code which does the obfuscation is in 
>($prefix)/Mailman/Mailman/Archiver/HyperArch.py between lines 280 and 
>290 in 2.1.11. (I'm sure someone will correct me if that's wrong info)


That's one place. There are several others for addresses in the message
body, the subject, the index page, etc. They are all in
Mailman/Archiver/HyperArch.py, but look at the code around all six
occurrences of

   if mm_cfg.ARCHIVER_OBSCURES_EMAILADDRS:

-- 
Mark Sapiro <[EMAIL PROTECTED]>The highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan

--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: http://wiki.list.org/x/QIA9


Re: [Mailman-Users] Harvesting of email addresses for spam fromarchives

2008-09-08 Thread Mark Sapiro
David Beaumont wrote:

>> >I notice this list's archives are not standard
>> >mailman format!
>> 
>> 
>> I assume by 'this list' you mean [EMAIL PROTECTED] In what way
>> are the archives "not standard"?
>
>Thanks I mean the archives at
>http://www.mail-archive.com/mailman-users%40python.org/
>
>Ours are at http://lists.shire.net/pipermail/dbamain/
>
>On ours you will see the emails have the ' at ' obscuration.   Yours don't
>seem to show the email in any form.  How do we change to your format?


Those are the 'searchable' archive at mail-archive.com. We also have
the same pipermail archive as you at
.

If you want to have a mail-archive.com archive as your only public
archive, go to  for
instructions on how to set up archiving for your list.

Then see  for how to
import your existing archives/private/dbamain.mbox/dbamain.mbox
archive.

Finally, you can turn off local archiving for your list or make the
archive private.

Also, I note that going to 
requires authentication to your web server. If this is something new
to stop spammers, OK, but it might be preferable to just make the
archive private, but if this has been in effect for some time, it's
not likely that spammers have accessed your archive.

-- 
Mark Sapiro <[EMAIL PROTECTED]>The highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan

--
Mailman-Users mailing list
Mailman-Users@python.org
http://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
http://mail.python.org/mailman/options/mailman-users/archive%40jab.org

Security Policy: http://wiki.list.org/x/QIA9