[Mailman-Users] Re: protecting the web interface against subscription spam

2021-03-05 Thread Al Brussey
Yea tried different browsers, let me see if I can get that url manually from the server. > On Mar 5, 2021, at 9:32 PM, Mark Sapiro wrote: > > On 3/5/21 6:14 PM, Al Brussey wrote: >> There is nothing between the digest question and the submit button. >> >> When I submit the form, I get this:

[Mailman-Users] Re: protecting the web interface against subscription spam

2021-03-05 Thread Mark Sapiro
On 3/5/21 6:14 PM, Al Brussey wrote: > There is nothing between the digest question and the submit button. > > When I submit the form, I get this: > > reCAPTCHA validation failed: missing-input-response That's the expected response in this case. Have you tried different browsers? Is there a

[Mailman-Users] Re: protecting the web interface against subscription spam

2021-03-05 Thread Al Brussey
There is nothing between the digest question and the submit button. When I submit the form, I get this: reCAPTCHA validation failed: missing-input-response > On Mar 5, 2021, at 7:38 PM, Mark Sapiro wrote: > > On 3/5/21 3:35 PM, Al Brussey wrote: >> Yes they are v2 keys. >> On Mar 5,

[Mailman-Users] Re: Pipermail scrubbing ascii txt to ksh attachment

2021-03-05 Thread Mark Sapiro
On 3/5/21 2:56 PM, Mark Dale via Mailman-Users wrote: > > > I'll pass it on to the list owner to modify their script and see how we > get on. > > Content-Disposition: inline > Content-Type: text/plain > MIME-Version: 1.0 > X-Mailer: MIME::Lite 3.031 (F2.85; T2.17; A2.21; B3.15; Q3.13) In case

[Mailman-Users] Re: protecting the web interface against subscription spam

2021-03-05 Thread Mark Sapiro
On 3/5/21 3:35 PM, Al Brussey wrote: > Yes they are v2 keys. > >> On Mar 5, 2021, at 5:28 PM, Mark Sapiro wrote: >> >> On 3/5/21 2:10 PM, AJ wrote: >>> >>> View source of page, i see this, with the correct site key: >>> >>> This form requires >>> JavaScript.>>

[Mailman-Users] Re: protecting the web interface against subscription spam

2021-03-05 Thread Al Brussey
Yes they are v2 keys. > On Mar 5, 2021, at 5:28 PM, Mark Sapiro wrote: > > On 3/5/21 2:10 PM, AJ wrote: >> >> View source of page, i see this, with the correct site key: >> >> This form requires >> JavaScript.> src="

[Mailman-Users] Re: Pipermail scrubbing ascii txt to ksh attachment

2021-03-05 Thread Mark Dale via Mailman-Users
Original Message From: Mark Sapiro [mailto:m...@msapiro.net] Sent: Friday, March 5, 2021, 05:08 UTC To: mailman-users@python.org Subject: [Mailman-Users] Re: Pipermail scrubbing ascii txt to ksh attachment > On 3/4/21 8:36 PM, Mark Dale via Mailman-Users wrote: >> >> Reading

[Mailman-Users] Re: Pipermail scrubbing ascii txt to ksh attachment

2021-03-05 Thread Mark Sapiro
On 3/5/21 2:42 PM, Mark Dale via Mailman-Users wrote: > > > Here is what the edited scripts/post wrote to file last night. > ... > Content-Disposition: inline > Content-Type: text/plain ... So what's triggering the issue is the lack of a charset= on the Content-Type: text/plain header

[Mailman-Users] Re: Pipermail scrubbing ascii txt to ksh attachment

2021-03-05 Thread Mark Dale via Mailman-Users
Original Message From: Mark Sapiro [mailto:m...@msapiro.net] Sent: Friday, March 5, 2021, 04:50 UTC To: mailman-users@python.org Subject: [Mailman-Users] Re: Pipermail scrubbing ascii txt to ksh attachment > On 3/4/21 8:36 PM, Mark Dale via Mailman-Users wrote: >> >> Thanks.

[Mailman-Users] Re: protecting the web interface against subscription spam

2021-03-05 Thread Mark Sapiro
On 3/5/21 2:10 PM, AJ wrote: > > View source of page, i see this, with the correct site key: > > This form requires > JavaScript. src="

[Mailman-Users] Re: protecting the web interface against subscription spam

2021-03-05 Thread Chromatest J. Pantsmaker
Looks like your noscript plugin is blocking javascript On Fri, Mar 5, 2021 at 3:12 PM AJ wrote: > Keys set properly in mm_cfg.py. I am on Mailman 2.1.34. > > mm_cfg.py: > > SUBSCRIBE_FORM_SECRET = "xxx" > BLOCK_SPAMHAUS_LISTED_IP_SUBSCRIBE = Yes > BLOCK_SPAMHAUS_LISTED_DBL_SUBSCRIBE = Yes >

[Mailman-Users] Re: protecting the web interface against subscription spam

2021-03-05 Thread AJ
Keys set properly in mm_cfg.py. I am on Mailman 2.1.34. mm_cfg.py: SUBSCRIBE_FORM_SECRET = "xxx" BLOCK_SPAMHAUS_LISTED_IP_SUBSCRIBE = Yes BLOCK_SPAMHAUS_LISTED_DBL_SUBSCRIBE = Yes RECAPTCHA_SITE_KEY = 'xxx' RECAPTCHA_SECRET_KEY = 'xxx' View source of page, i see this, with the correct site

[Mailman-Users] Re: protecting the web interface against subscription spam

2021-03-05 Thread Mark Sapiro
On 3/5/21 1:24 PM, AJ wrote: > I've tried to enable the reCaptcha by setting the keys in mm_cfg.py and the > list subscribe page does not display the reCaptcha checkbox. > This is the case on new and old lists. I've confirmed the following is > added to templates/en/listinfo.html > > >

[Mailman-Users] Re: protecting the web interface against subscription spam

2021-03-05 Thread Brian Carpenter
On 3/5/21 4:24 PM, AJ wrote: I've tried to enable the reCaptcha by setting the keys in mm_cfg.py and the list subscribe page does not display the reCaptcha checkbox. This is the case on new and old lists. I've confirmed the following is added to templates/en/listinfo.html

[Mailman-Users] Re: protecting the web interface against subscription spam

2021-03-05 Thread AJ
I've tried to enable the reCaptcha by setting the keys in mm_cfg.py and the list subscribe page does not display the reCaptcha checkbox. This is the case on new and old lists. I've confirmed the following is added to templates/en/listinfo.html None of the old lists have

[Mailman-Users] Re: Change moderator or admin password (random) different for each list they were an admin or moderator for - Mailman 2.1

2021-03-05 Thread Mark Sapiro
On 3/4/21 10:35 PM, Stephen J. Turnbull wrote: > Hi, Daniel > > Mark Sapiro writes: > > > > You need to > > generate a password within the script. > > I think > > newpassword = subprocess.run(["pwgen", "-sB", "15", "1"], > capture_output=True, >

[Mailman-Users] Re: protecting the web interface against subscription spam (solved)

2021-03-05 Thread Brian Carpenter
On 3/5/21 10:01 AM, jor...@gmail.com wrote: Am Freitag, dem 05.03.2021 um 09:41 -0500 schrieb Brian Carpenter: Depending upon what version of Mailman 2 you are running, you can add the following to your mailman_install_dir/Mailman/mm_cfg.py BLOCK_SPAMHAUS_LISTED_IP_SUBSCRIBE = Yes

[Mailman-Users] Re: protecting the web interface against subscription spam

2021-03-05 Thread jorohr
Am Freitag, dem 05.03.2021 um 09:41 -0500 schrieb Brian Carpenter: > > Depending upon what version of Mailman 2 you are running, you can add > the following to your mailman_install_dir/Mailman/mm_cfg.py > > BLOCK_SPAMHAUS_LISTED_IP_SUBSCRIBE = Yes > RECAPTCHA_SITE_KEY = "recaptcha site key" >

[Mailman-Users] Re: protecting the web interface against subscription spam

2021-03-05 Thread Brian Carpenter
On 3/5/21 9:31 AM, jor...@gmail.com wrote: currently we get  inundated with abuse complaint mails because our mailman instance is targeted by spambots who for whatever reason try to subscribe to the lists at our side with addresses belonging to someone else, and when mailman sends out the

[Mailman-Users] protecting the web interface against subscription spam

2021-03-05 Thread jorohr
Dear all, currently we get  inundated with abuse complaint mails because our mailman instance is targeted by spambots who for whatever reason try to subscribe to the lists at our side with addresses belonging to someone else, and when mailman sends out the confirmation email, this is considered