Re: [OpenSIPS-Users] Problem with HEP-monitoring of tls_wolfssl

[Artiom Druz]

Hi Bogdan.
I use trace_on parameter of proto_tls module and subroute for sending
messages to Homer.

I enabled trace_on parameter for proto_tcp module and now it works correct.
I'm not sure if this is the only fix I made because it may have been a
misconfiguration in the script logic.

вт, 9 авг. 2022 г., 13:42 Bogdan-Andrei Iancu :

> Hi Artiom,
>
> Do you use any proto TCP or TLS specific tracing (like [1]), or only pure
> SIP TLS tracing ?
>
> [1]
> https://opensips.org/html/docs/modules/3.2.x/proto_tls.html#param_trace_on
>
> Regards,
>
> Bogdan-Andrei Iancu
>
> OpenSIPS Founder and Developer
>   https://www.opensips-solutions.com
> OpenSIPS Summit 27-30 Sept 2022, Athens
>   https://www.opensips.org/events/Summit-2022Athens/
>
> On 7/25/22 11:20 AM, Artiom Druz wrote:
>
> Hello Everyone.
> I have a problem with monitoring SIPS/TLS based on tls_wolfssl module via
> proto_hep (target monitoring service is Homer 7).
> My opensips config works ok with SIP/UDP, but when I make a call via TLS
> (OpenSIPS convert TLS from VoIP provider to internal SIP/UDP software PBX)
> in dump file on Homer 7 side I see that all packets in HEP3 payload has
> this info:
>
> HEP3 Protocol
> HEP Version: HEP3
> HEP Packet Size (Bytes): 152
> IP family: IPv4
> Ingested Transport Protocol: IPv4
> Source port: 0
> Destination port: 0
> Unix Timestamp: 1658731857
> Timestamp µs: 106136
> Application Protocol: Unknown Application Protocol
> Capture Node ID: 1301
> Source IPv4 address: 127.0.0.2
> Destination IPv4 address: 127.0.0.2
> Encapsulated Payload: TLS:CLOSED:SUCCESS:Read error
> Correlation ID: 350784072629638188
>
> Only unix timestamp and capture node id is correct.
> As you can see in encapsulated payload I have an error with read. What can
> be wrong?
>
> OpenSIPS 3.2.5 (git revision 7e284ab03) compiled from source.
>
> ___
> Users mailing 
> listUsers@lists.opensips.orghttp://lists.opensips.org/cgi-bin/mailman/listinfo/users
>
>
>
___
Users mailing list
Users@lists.opensips.org
http://lists.opensips.org/cgi-bin/mailman/listinfo/users

Re: [OpenSIPS-Users] call_center module on 3.3

[Bogdan-Andrei Iancu]

Thanks Ivan,

The relevant log is

DBG:call_center:b2bl_callback_customer:  call (0x7f0a08e95a00) has event 4

But the event 4 (B2B leg destroyed) is a wrong one in this case, it 
should have been 2 (B2B leg rejected). It seems the problem is in the 
B2B logic somewhere.


Let me do some digging there.

Regards,

Bogdan-Andrei Iancu

OpenSIPS Founder and Developer
  https://www.opensips-solutions.com
OpenSIPS Summit 27-30 Sept 2022, Athens
  https://www.opensips.org/events/Summit-2022Athens/

On 8/9/22 3:04 PM, Ryzhik Ivan wrote:

Hi,
thank you for your reply.

There is no B2B_REJECT_CB in my case. See log below, only B2B_DESTROY_CB

2022-08-09T11:44:27.788721+00:00
 DBG:call_center:b2bl_callback_customer:  call (0x7f0a08e95a00)
has event 4,
2022-08-09T11:44:27.788767+00:00
 DBG:call_center:b2bl_callback_customer: A delete in b2blogic,
call->state=6, 0x7f0a08e95a00


Negative reply processed in _b2b_handle_reply, but the tuple->state is 
not in B2B_BRIDGING_STATE and process_bridge_negreply doesn't called 
with cbf(_params, B2B_REJECT_CB);.


2022-08-09T11:44:27.769757+00:00 DBG:b2b_logic:_b2b_handle_reply:
Negative reply [486] - delete[0x7f0a08e95b28]
2022-08-09T11:44:27.769808+00:00  DBG:b2b_logic:b2b_mark_todel:
0x7f0a08e95b28


P.S. But with message_flow_id uri in db (its do simple 200/bye on 
invite) - all works fine , because negative reply is in  
B2B_BRIDGING_STATE. But this is not a good way.


Thank you very much.

log:

[]


вт, 9 авг. 2022 г. в 11:36, Bogdan-Andrei Iancu >:


Hi,

In such a case, in `b2bl_callback_customer()` you should get a
B2B_REJECT_CB event.

Could you post here the logs in log_level 4 (debug) for your test
call ?

Regards,

Bogdan-Andrei Iancu

OpenSIPS Founder and Developer
   https://www.opensips-solutions.com  
OpenSIPS Summit 27-30 Sept 2022, Athens
   https://www.opensips.org/events/Summit-2022Athens/  


On 8/8/22 11:48 AM, Ryzhik Ivan wrote:

Hi @All.
I have a simple flow with 2 agents. When call entering queue
by cc_handle_call("600")
and the first agent rejects call (busy or decline) - queue also
rejects call with same reason and does not proceed to second agent.
I looked at sources  - negative replies processed only
in B2B_BRIDGING_STATE. But for that time i have B2B_NOTDEF_STATE
only.
What am I doing wrong?




___
Users mailing list
Users@lists.opensips.org  
http://lists.opensips.org/cgi-bin/mailman/listinfo/users  





___
Users mailing list
Users@lists.opensips.org
http://lists.opensips.org/cgi-bin/mailman/listinfo/users

Re: [OpenSIPS-Users] DBAliases with Late SDP Negotiation

[Bogdan-Andrei Iancu]

Hi HS,

The aliases and late SDP negotiation has noting in common.

And the mentioned script has no support for aliase - I guess you added 
such support ?


Regards,

Bogdan-Andrei Iancu

OpenSIPS Founder and Developer
  https://www.opensips-solutions.com
OpenSIPS Summit 27-30 Sept 2022, Athens
  https://www.opensips.org/events/Summit-2022Athens/

On 6/20/22 5:21 PM, HS wrote:

Hi all.

Just wondering if anyone has "dbaliases" working with the Late SDP 
negotiation script below:


https://opensips.org/pub/docs/tutorials/websockets/opensips-late.cfg 



If we call an alias, it works fine if the user is online. However, in 
case of offline users I want the call to be forwarded to another 
instance/server. If we use the ID (from subscriber table) calls are 
being forwarded. But not if we dial an alias.


Appreciate the help.

___
Users mailing list
Users@lists.opensips.org
http://lists.opensips.org/cgi-bin/mailman/listinfo/users


___
Users mailing list
Users@lists.opensips.org
http://lists.opensips.org/cgi-bin/mailman/listinfo/users

Re: [OpenSIPS-Users] OpenSIPS CP 9.3.2 password mode ha1_sha256 for adding new user

[Bogdan-Andrei Iancu]

Hi Bela,

The OCP does not support ha1_sha256 AFAIK. Consider opening a feature 
request here https://github.com/OpenSIPS/opensips-cp/issues


Regards,

Bogdan-Andrei Iancu

OpenSIPS Founder and Developer
  https://www.opensips-solutions.com
OpenSIPS Summit 27-30 Sept 2022, Athens
  https://www.opensips.org/events/Summit-2022Athens/

On 6/29/22 9:10 AM, Bela H wrote:


Hi all,

Is there any way to add new subscriber from OpenSIPS CP 9.3.2 using 
password mode ha1_sha256?


The ha1 (MD5(username:realm:password)) works fine but I had no luck 
with the value generation for the ha1_sha256 field in “subscriber” table.


I have this setting:

modparam("auth_db", "calculate_ha1", 0)

modparam("auth_db", "password_column", "ha1_sha256")

Thanks!

Bela


___
Users mailing list
Users@lists.opensips.org
http://lists.opensips.org/cgi-bin/mailman/listinfo/users


___
Users mailing list
Users@lists.opensips.org
http://lists.opensips.org/cgi-bin/mailman/listinfo/users

Re: [OpenSIPS-Users] Why is rest_get truncating pem in the output var?

[Bogdan-Andrei Iancu]

Hi Joshua,

The xlogging is truncated by default to 4K, see 
https://www.opensips.org/Documentation/Script-CoreParameters-3-2#xlog_buf_size.


Still, the printing only of the first line is strange :-/, unless some 
special chars are in the certificate. You can try to print what is after 
that first line, by using the substr() transformation , skip the first 
28/29 chars of the "-BEGIN CERTIFICATE-"...just to see what's in 
there.


Now regarding on the failure of the verification, have you tried to run 
in debug level (set log_level to 4), to see what the function does, 
maybe there are some clues there.


Best regards,

Bogdan-Andrei Iancu

OpenSIPS Founder and Developer
  https://www.opensips-solutions.com
OpenSIPS Summit 27-30 Sept 2022, Athens
  https://www.opensips.org/events/Summit-2022Athens/

On 7/1/22 7:59 PM, Joshua Young via Users wrote:

Hello OpenSIPS,

I'm trying to implement the stir_shaken_verify() function, and I have 
a feeling the rest_get() is truncating output variable...


I have these for the modules

...
# STIR/SHAKEN modules
loadmodule "rest_client.so"
loadmodule "stir_shaken.so"
modparam("stir_shaken", "require_date_hdr", 0)
modparam("stir_shaken", "verify_date_freshness", 300)
loadmodule "cfgutils.so"
modparam("cfgutils", "shvset", "stirshaken=s:enable")
modparam("stir_shaken", "ca_list", "/etc/opensips/tls/calist.pem")
...

and then I'm using something like this to do the verifying

...
    $var(rc) = rest_get( "$identity(x5u)", $var(cert), $var(ctype), 
$var(http_rc));

    if ($var(rc) < 0) {
        xlog("L_ERR", "rest_get() FAILED\n");
       send_reply(436, "Bad Identity Info");
       exit;
    } else {
        $var(len) = $(var(cert){s.len});
        $var(cert_full) = $(var(cert){s.escape.common});
        xlog("L_ERR","cert full = $var(cert_full)");
        xlog("L_ERR", "length $$var(cert) = $var(len)\n");
        xlog("L_ERR", "rest_get() PASSED:  $$var(cert) = $var(cert)");
    }

    xlog("L_ERR","$$identity(x5u) = $identity(x5u)");
    $var(rc) = stir_shaken_verify("$var(cert)", $var(err_code), 
$var(err_reason), $identity(orig), $identity(dest));

    if ($var(rc) < -1) {
        xlog("L_ERR", "stir_shaken_verify() FAILED\n");
        send_reply($var(err_code), $var(err_reason));
        exit;
    } else {
        xlog("L_ERR", "stir_shaken_verify() PASSED\n");
    }
...


my output xlogs are showing
...
/usr/local/sbin/opensips[113989]: cert full = -BEGIN CERTIFICATE-
/usr/local/sbin/opensips[113989]: length $var(cert) = 2367
/usr/local/sbin/opensips[113989]: rest_get() PASSED:  $var(cert) = 
-BEGIN CERTIFICATE-

/usr/local/sbin/opensips[113989]: cached $var(cert) is still good
/usr/local/sbin/opensips[113989]: $identity(x5u) = 
https://cr.sansay.com/star2star-prod-stirshaken 

/usr/local/sbin/opensips[113989]: INFO:stir_shaken:verify_callback: 
certificate validation failed: certificate signature failure
/usr/local/sbin/opensips[113989]: INFO:stir_shaken:w_stir_verify: 
Invalid certificate

/usr/local/sbin/opensips[113989]: stir_shaken_verify() FAILED
...

the variable is showing 2367 bytes

$var(len) = $(var(cert){s.len});
xlog("L_ERR", "length $$var(cert) = $var(len)\n");
/usr/local/sbin/opensips[113989]: length $var(cert) = 2367

but regardless what I try to print, it only printing the first line

$var(cert_full) = $(var(cert){s.escape.common});
xlog("L_ERR","cert full = $var(cert_full)");
/usr/local/sbin/opensips[113989]: cert full = -BEGIN CERTIFICATE-

 xlog("L_ERR", "rest_get() PASSED:  $$var(cert) = $var(cert)");
/usr/local/sbin/opensips[113989]: rest_get() PASSED:  $var(cert) = 
-BEGIN CERTIFICATE-



Perhaps this isnt the issue after all, but I am unable to determine 
why the stir_shaken_verify() is failing


/usr/local/sbin/opensips[113989]: INFO:stir_shaken:verify_callback: 
certificate validation failed: certificate signature failure
/usr/local/sbin/opensips[113989]: INFO:stir_shaken:w_stir_verify: 
Invalid certificate


I feel like the $var(cert) is being truncated which i why it's 
failing... but I have no clue...


Can you provide pointers?
Thanks

___
Users mailing list
Users@lists.opensips.org
http://lists.opensips.org/cgi-bin/mailman/listinfo/users


___
Users mailing list
Users@lists.opensips.org
http://lists.opensips.org/cgi-bin/mailman/listinfo/users

Re: [OpenSIPS-Users] Dialog ping question

[Bogdan-Andrei Iancu]

Hi MS,

You can use the Call-ID to correlate with the dialog. For example, use 
the localcache to store (when creating the dialog) a record having as 
key the call-id of the call and as value the time to start. In the 
generic on_reply you can look for that records into localcache and to 
the math for the duration.


Regards,

Bogdan-Andrei Iancu

OpenSIPS Founder and Developer
  https://www.opensips-solutions.com
OpenSIPS Summit 27-30 Sept 2022, Athens
  https://www.opensips.org/events/Summit-2022Athens/

On 7/10/22 9:23 PM, M S wrote:

Hi all,
I need to catch the replies to OPTIONS (ping) packets that 
Create_dialog("Pp") sends to both sides, and then based on response 
code and some other transaction information, i.e. I need to calculate 
the call length (from pick up till that moment) to send 
Interim-Updates to RADIUS.

My questions are:
1. How do I  check for those internal OPTIONS replies? I can see 
replies in a global onreply_route, but there is no transaction level 
information there
2. How do I calculate the call length? I assume if #1 above is fixed, 
I can store answer time in a variable and then calculate length in 
onreply.


Thank you!

___
Users mailing list
Users@lists.opensips.org
http://lists.opensips.org/cgi-bin/mailman/listinfo/users


___
Users mailing list
Users@lists.opensips.org
http://lists.opensips.org/cgi-bin/mailman/listinfo/users

Re: [OpenSIPS-Users] About obstacles to implement the matched Id in event header of NOTIFY(REFER)

[Bogdan-Andrei Iancu]

Hi Li,

If I understand correctly, you try to improve the b2b support in 
OpenSIPS in order to properly handle that NOTIFY for REFER, right ?


Regards,

Bogdan-Andrei Iancu

OpenSIPS Founder and Developer
  https://www.opensips-solutions.com
OpenSIPS Summit 27-30 Sept 2022, Athens
  https://www.opensips.org/events/Summit-2022Athens/

On 7/22/22 11:02 PM, Li Cai wrote:


Hi experts,

I’m working on the implementation for ‘2.4.6 Multiple REFER Requests 
in a Dialog’ of RFC3515 in a B2B SIP Proxy. Right now, I got stuck 
with two problems in the solution. Please see the paragraph from RFC-


   A REFER creates an implicit subscription sharing the dialog

identifiers in the REFER request.  If more than one REFER is issued

   in the same dialog (a second attempt at transferring a call for

example), the dialog identifiers do not provide enough information to

associate the resulting NOTIFYs with the proper REFER.

   Thus, for the second and subsequent REFER requests a UA receives in a

   given dialog, it MUST include an id parameter[2] in the Event header

   field of each NOTIFY containing the sequence number (the number from

   the CSeq header field value) of the REFER this NOTIFY is associated

   with. This id parameter MAY be included in NOTIFYs to the first

   REFER a UA receives in a given dialog.  A SUBSCRIBE sent to refresh

   or terminate this subscription MUST contain this id parameter.

Different from the definition in RFC, the NOTIFY forwarded by the 
proxy contains the same Id in Event header as the other side. Please 
see the below chart –


   B2BProxy

   |

<- REFER 2 (Cseq=2) |  <-REFER 1 
 (Cseq=1003)


   . . .  | . . .

->NOTIFY 1 (event:*id=2*) |  ->NOTIFY 2 (_event*:id=2*)_

The current problem is, the above NOTIFY on the right side should 
_include ‘id=1003’ instead of ‘id=2’_.


The solution I’m trying is as in the following flow –

  1. get CSeq 1 of REFER 1 in route[b2b_request]{}  ->

  2. get CSeq 2 of REFER 2 in local_route{},  then save 
the pair(key=CSeq2, value=CSeq1) in a map set->


  3. get Id  from NOTIFY 1 event in route[b2b_request]{}  ->

  4. use Id  as key then get matched CSeq1 from the map 
set, use remove_hf() and append_hf() to modify the event header in 
local_route{}


My two questions are:

 1. To transfer Cseq 1 from step1 to step2, I tried a variable in the
AVP type but it didn’t work. The script variable can work but it
doesn’t fit because the processing is based on per request.  Can I
ask if you have any suggest on how to transfer the value from
route[b2b_request]{} to local_route{}?
 2. In the step2, I tried to create and operate a JSON map set to save
the CSeq pairs. But the JSON data didn’t work for me.

    My source :

$json(csList) = ””;   # 
Initialize the data set, not sure if it’s correct


$json(csList/”$cs”) = “$avp(csNum)”;

    The error I got:

ERROR:core:do_assign: setting PV failed

ERROR:core:do_assign: error at /usr/local//et/opensips/opensips.cfg:531

Thank you very much for the help! Any your suggests are very welcomed.

Thanks,

Li

NOTICE TO RECIPIENT: This email, including attachments, may contain 
information which is confidential, proprietary, attorney-client 
privileged and / or controlled under U.S. export laws and regulations 
and may be restricted from disclosure by applicable State and Federal 
law. Nothing in this email shall create any legal binding agreement 
between the parties unless expressly stated herein and provided by an 
authorized representative of Comtech Telecommunications Corp. or its 
subsidiaries. If you are not the intended recipient of this message, 
be advised that any dissemination, distribution, or use of the 
contents of this message is strictly prohibited. If you received this 
message in error, please notify us immediately by return email and 
permanently delete all copies of the original email and any attached 
documentation from any computer or other media.


___
Users mailing list
Users@lists.opensips.org
http://lists.opensips.org/cgi-bin/mailman/listinfo/users


___
Users mailing list
Users@lists.opensips.org
http://lists.opensips.org/cgi-bin/mailman/listinfo/users

Re: [OpenSIPS-Users] TLS_MGM

[Bogdan-Andrei Iancu]

Hi Vadim,

This log looks weird :

июл 19 21:11:32 proxy-01 opensips[13765]: CRITICAL:core:yyerror: parse error in 
/etc/opensips/opensips.cfg:110:21-22: Parameter  not found in module 
 not found in module 


So, check the modparam line for any typos or weird chars in the name of the 
module.

Regards,

Bogdan-Andrei Iancu

OpenSIPS Founder and Developer
  https://www.opensips-solutions.com
OpenSIPS Summit 27-30 Sept 2022, Athens
  https://www.opensips.org/events/Summit-2022Athens/

On 7/20/22 12:35 AM, Vadim Dumalekov via Users wrote:

Hello!

I have installed the OpenSIPS-3.2.7. I'm trying to set up the WSS-proto. It 
requires the tls_mgm module be loaded. I have the following settings for this 
module:

loadmodule "tls_mgm.so"
 modparam("tls_mgm", "tls_library", "openssl")
 modparam("tls_mgm", "certificate", 
"/etc/opensips/tls/rootCA/cacert.pem")
 modparam("tls_mgm", "private_key", 
"/etc/opensips/tls/rootCA/private/cakey.pem")

But when i triy to run opensips I have this problem:

июл 19 21:11:32 proxy-01 opensips[13765]: CRITICAL:core:yyerror: parse error in 
/etc/opensips/opensips.cfg:110:21-22: Parameter  not found in module 
 not found in module 
http://lists.opensips.org/cgi-bin/mailman/listinfo/users



___
Users mailing list
Users@lists.opensips.org
http://lists.opensips.org/cgi-bin/mailman/listinfo/users

Re: [OpenSIPS-Users] Problem with HEP-monitoring of tls_wolfssl

[Bogdan-Andrei Iancu]

Hi Artiom,

Do you use any proto TCP or TLS specific tracing (like [1]), or only 
pure SIP TLS tracing ?


[1] 
https://opensips.org/html/docs/modules/3.2.x/proto_tls.html#param_trace_on


Regards,

Bogdan-Andrei Iancu

OpenSIPS Founder and Developer
  https://www.opensips-solutions.com
OpenSIPS Summit 27-30 Sept 2022, Athens
  https://www.opensips.org/events/Summit-2022Athens/

On 7/25/22 11:20 AM, Artiom Druz wrote:

Hello Everyone.
I have a problem with monitoring SIPS/TLS based on tls_wolfssl module 
via proto_hep (target monitoring service is Homer 7).
My opensips config works ok with SIP/UDP, but when I make a call via 
TLS (OpenSIPS convert TLS from VoIP provider to internal SIP/UDP 
software PBX) in dump file on Homer 7 side I see that all packets in 
HEP3 payload has this info:


HEP3 Protocol
    HEP Version: HEP3
    HEP Packet Size (Bytes): 152
    IP family: IPv4
    Ingested Transport Protocol: IPv4
    Source port: 0
    Destination port: 0
    Unix Timestamp: 1658731857
    Timestamp µs: 106136
    Application Protocol: Unknown Application Protocol
    Capture Node ID: 1301
    Source IPv4 address: 127.0.0.2
    Destination IPv4 address: 127.0.0.2
    Encapsulated Payload: TLS:CLOSED:SUCCESS:Read error
    Correlation ID: 350784072629638188

Only unix timestamp and capture node id is correct.
As you can see in encapsulated payload I have an error with read. What 
can be wrong?


OpenSIPS 3.2.5 (git revision 7e284ab03) compiled from source.

___
Users mailing list
Users@lists.opensips.org
http://lists.opensips.org/cgi-bin/mailman/listinfo/users


___
Users mailing list
Users@lists.opensips.org
http://lists.opensips.org/cgi-bin/mailman/listinfo/users

Re: [OpenSIPS-Users] Bug on TLS Management Interface

[Bogdan-Andrei Iancu]

Hi Francisco,

I guess you are talking about managing certificates via the Control 
Panel, right ? if so, what version of OpenSIPS and OpenSIPS CP are you 
using ? Also, could you provide a screenshot of the add / update form, 
showing the issue? IF you have any sensitive data, please send the 
screenshot privately to me.


Best regards,

Bogdan-Andrei Iancu

OpenSIPS Founder and Developer
  https://www.opensips-solutions.com
OpenSIPS Summit 27-30 Sept 2022, Athens
  https://www.opensips.org/events/Summit-2022Athens/

On 8/3/22 9:27 PM, Francisco Neto via Users wrote:

Hi All!

I’ve just installed open sips and everything is working ok, except the 
TLS Management interface.


When I try to add ou update any entry, it only accept “Network 
Address” as “*”.


If I type the IP address as x.x.x.x:port or “x.x.x.x:port” or 
‘x.x.x.x:port’ it always complain with the following message: Failed 
to validate input for match_ip_address


Can someone give me a tip of how should I write the IP address or if 
it a bug?


Thanks!



___
Users mailing list
Users@lists.opensips.org
http://lists.opensips.org/cgi-bin/mailman/listinfo/users


___
Users mailing list
Users@lists.opensips.org
http://lists.opensips.org/cgi-bin/mailman/listinfo/users

Re: [OpenSIPS-Users] call_center module on 3.3

[Bogdan-Andrei Iancu]

Hi,

In such a case, in `b2bl_callback_customer()` you should get a 
B2B_REJECT_CB event.


Could you post here the logs in log_level 4 (debug) for your test call ?

Regards,

Bogdan-Andrei Iancu

OpenSIPS Founder and Developer
  https://www.opensips-solutions.com
OpenSIPS Summit 27-30 Sept 2022, Athens
  https://www.opensips.org/events/Summit-2022Athens/

On 8/8/22 11:48 AM, Ryzhik Ivan wrote:

Hi @All.
I have a simple flow with 2 agents. When call entering queue 
by cc_handle_call("600")
and the first agent rejects call (busy or decline) - queue also 
rejects call with same reason and does not proceed to second agent.
I looked at sources  - negative replies processed only 
in B2B_BRIDGING_STATE. But for that time i have B2B_NOTDEF_STATE only.

What am I doing wrong?




___
Users mailing list
Users@lists.opensips.org
http://lists.opensips.org/cgi-bin/mailman/listinfo/users


___
Users mailing list
Users@lists.opensips.org
http://lists.opensips.org/cgi-bin/mailman/listinfo/users