[HowTo] Mailman with ispCP, suexec

[FeG]

Hi Smallserver,

Smallserver Wrote:And what happens after a update of ISPCP with this config?

I've updated from RC2c to RC3 to RC4 with this and never had any problems.

Greetings
FeG

[kionchan]

with guide Setup Mailman, to me, donsn't work. I think that is for suexec...
this is report to suexec.log:

[2008-05-08 16:20:07]: uid: (vu2000/vu2000) gid: (vu2000/vu2000) cmd: php5-fcgi-starter
[2008-05-08 16:48:30]: uid: (vu2000/vu2000) gid: (vu2000/vu2000) cmd: php5-fcgi-starter
[2008-05-08 16:48:55]: uid: (0/root) gid: (38/38) cmd: admin
[2008-05-08 16:48:55]: cannot run as forbidden uid (0/admin)


any help??

[FeG]

Hi kionchan,

kionchan Wrote:with guide Setup Mailman, to me, donsn't work. I think that is for suexec...

I suppose you mean the web interface of mailman? Are the mailinglists working?

Please post the content of /etc/apache2/sites-available/mailman.conf and the permissions of the directory /usr/lib/cgi-bin/mailman/

Greetings
FeG

[kionchan]

I',m add a new user manually... with path /var/www/virtual/mailman. Inside I make a default page... anyone... but, to access to Mailman web config... I do:

http://www.domain.com/mailman/create or /listinfo.... or ...

The permissions of directori /usr/lib/cgi-bin/mailman/ is root.list

Think that you make a new mailman.conf without SUEXEC... for this workly all... but apache write in iscpc.conf *.domain.com... you have delete of template this option...

in /etc/postfix/main.cf, I add to end file this: relay_domains = listas.domain.com




#
# mailman Virtual Host Webinterface
#

<VirtualHost ip:80>

ServerAdmin root@dominio.com
DocumentRoot /var/www/virtual/mailman/htdocs

ServerName listas.dominio.com
ServerAlias listas.dominio.com


ErrorLog /var/log/apache2/listas.domain.com-error.log
CustomLog /var/log/apache2/listas.domain.com-access.log combined

Alias /pipermail /var/lib/mailman/archives/public/
Alias /images/mailman /usr/share/images/mailman/

<Directory /var/lib/mailman/archives/>
Options Indexes FollowSymLinks
AllowOverride None
</Directory>


<Directory /var/www/virtual/mailman/htdocs>
# httpd dmn entry PHP support BEGIN.
# httpd dmn entry PHP support END.
Options -Indexes -Includes -FollowSymLinks MultiViews
AllowOverride None
Order allow,deny
Allow from all
</Directory>

ScriptAlias /admin /usr/lib/cgi-bin/mailman/admin
ScriptAlias /admindb /usr/lib/cgi-bin/mailman/admindb
ScriptAlias /confirm /usr/lib/cgi-bin/mailman/confirm

# The create.html-file is a dummy-file so that no one can create new mailing lists via the webinterface
ScriptAlias /create /usr/lib/cgi-bin/mailman/create
#Alias /create /var/www/mailman/create.html

ScriptAlias /edithtml /usr/lib/cgi-bin/mailman/edithtml
ScriptAlias /listinfo /usr/lib/cgi-bin/mailman/listinfo
ScriptAlias /options /usr/lib/cgi-bin/mailman/options
ScriptAlias /private /usr/lib/cgi-bin/mailman/private
ScriptAlias /rmlist /usr/lib/cgi-bin/mailman/rmlist
ScriptAlias /roster /usr/lib/cgi-bin/mailman/roster
ScriptAlias /subscribe /usr/lib/cgi-bin/mailman/subscribe
ScriptAlias /mailman/ /usr/lib/cgi-bin/mailman/

</VirtualHost>

[thielmann]

FeG Wrote:I've just added this HowTo to the documentation: Setup Mailman.

When following the HowTo, I'm having problems with Postfix telling me, that "<ANYMAILINGLIST@localhost>: mail for localhost loops back to myself".

[FeG]

Hi,

we need more information about how you've done the setup in postfix, etc.

Anyway there are lots of responses Google when you search for "postfix @localhost>: mail for localhost loops back to myself".

Greetings
FeG

[thielmann]

FeG Wrote:we need more information about how you've done the setup in postfix, etc.

/etc/postfix/main.cf

Code:

command_directory = /usr/sbin
daemon_directory  = /usr/lib/postfix
program_directory = /usr/lib/postfix

inet_interfaces  = all
mynetworks_style = host

myhostname = host.example.com
mydomain   = host.example.com.local
myorigin   = $mydomain

smtpd_banner = $myhostname ISPCP 1.0 Priamos Managed ESMTP 1.0.0 RC2 OMEGA
setgid_group = postdrop

mydestination       = $myhostname, $mydomain
append_dot_mydomain = no
append_at_myorigin  = yes
local_transport     = local
virtual_transport   = virtual
transport_maps      = hash:/etc/postfix/ispcp/transport

mail_spool_directory = /var/mail

mailbox_size_limit = 0
mailbox_command    = procmail -a "$EXTENSION"

biff = no

alias_database                    = hash:/etc/aliases

alias_maps              = hash:/etc/aliases,
              hash:/var/lib/mailman/data/aliases

local_destination_recipient_limit = 1
local_recipient_maps              = unix:passwd.byname $alias_maps


ispcp-arpl_destination_recipient_limit = 1

virtual_mailbox_base    = /var/mail/virtual
virtual_mailbox_limit   = 0

virtual_mailbox_domains = hash:/etc/postfix/ispcp/domains
virtual_mailbox_maps    = hash:/etc/postfix/ispcp/mailboxes

virtual_alias_maps      = hash:/etc/postfix/ispcp/aliases,
              hash:/var/lib/mailman/data/virtual-mailman

virtual_minimum_uid     = 106
virtual_uid_maps        = static:106
virtual_gid_maps        = static:8

smtpd_sasl_auth_enable       = yes
smtpd_sasl2_auth_enable      = yes
smtpd_sasl_security_options  = noanonymous
smtpd_sasl_local_domain      =
broken_sasl_auth_clients     = yes
smtpd_sender_restrictions    = permit_mynetworks,
                               permit_sasl_authenticated,
                               reject_unauth_destination
smtpd_recipient_restrictions = permit_mynetworks,
                               permit_sasl_authenticated,
                               reject_unauth_destination
                               check_policy_service inet:127.0.0.1:60000


content_filter = amavis:[127.0.0.1]:10024

unknown_local_recipient_reject_code = 550
owner_request_special               = no
mailman_destination_recipient_limit = 1

/etc/postfix/master.cf

Code:

587       inet  n       -       -       -       -       smtpd
   -o smtpd_client_restrictions=permit_sasl_authenticated,reject_unauth_destination
pickup    fifo  n       -       -       60      1       pickup
cleanup   unix  n       -       -       -       0       cleanup
qmgr      fifo  n       -       -       300     1       qmgr
tlsmgr    unix  -       -       -       1000?   1       tlsmgr
rewrite   unix  -       -       -       -       -       trivial-rewrite
bounce    unix  -       -       -       -       0       bounce
defer     unix  -       -       -       -       0       bounce
trace     unix  -       -       -       -       0       bounce
verify    unix  -       -       -       -       1       verify
flush     unix  n       -       -       1000?   0       flush
proxymap  unix  -       -       n       -       -       proxymap
smtp      unix  -       -       -       -       -       smtp
relay     unix  -       -       -       -       -       smtp
    -o fallback_relay=
showq     unix  n       -       -       -       -       showq
error     unix  -       -       -       -       -       error
discard   unix  -       -       -       -       -       discard
local     unix  -       n       n       -       -       local
virtual   unix  -       n       n       -       -       virtual
lmtp      unix  -       -       -       -       -       lmtp
anvil     unix  -       -       -       -       1       anvil
scache    unix  -       -       -       -       1       scache
amavis    unix  -       -       n       -       1       smtp
   -o smtp_data_done_timeout=1200
   -o smtp_send_xforward_command=yes
   -o disable_dns_lookups=yes

localhost:10025 inet  n -       n       -      -        smtpd
   -o content_filter=
   -o local_recipient_maps=
   -o relay_recipient_maps=
   -o smtpd_restriction_classes=
   -o smtpd_client_restrictions=
   -o smtpd_helo_restrictions=
   -o smtpd_sender_restrictions=
   -o smtpd_recipient_restrictions=permit_mynetworks,reject
   -o smtpd_override_options=no_address_mappings
   -o mynetworks=127.0.0.0/8
   -o strict_rfc821_envelopes=yes

ispcp-arpl unix  -      n       n       -       -       pipe
  flags=O user=vmail argv=/var/www/ispcp/engine/messager/ispcp-arpl-msgr

smtps     inet  n       -       -       -       -       smtpd
   -o smtpd_tls_wrappermode=yes
   -o smtpd_sasl_auth_enable=yes

maildrop  unix  -       n       n       -       -       pipe
  flags=DRhu user=vmail argv=/usr/local/bin/maildrop -d ${recipient}

old-cyrus unix  -       n       n       -       -       pipe
  flags=R user=cyrus argv=/cyrus/bin/deliver -e -m ${extension} ${user}

cyrus     unix  -       n       n       -       -       pipe
  user=cyrus argv=/cyrus/bin/deliver -e -r ${sender} -m ${extension} ${user}

uucp      unix  -       n       n       -       -       pipe
  flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient)

ifmail    unix  -       n       n       -       -       pipe
  flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient)
bsmtp     unix  -       n       n       -       -       pipe
  flags=Fq. user=foo argv=/usr/local/sbin/bsmtp -f $sender $nexthop $recipient

Additional specs: Debian Etch, using ISPCP 1.0 RC5. I'm using Amavis/Maia/Spamassassin/ClamAV, but that shouldn't affect mailman or Postfix. I already disabled it, the results don't change.

FeG Wrote:Anyway there are lots of responses Google when you search for "postfix @localhost>: mail for localhost loops back to myself".

I searched the net for hours, but couldn't find any setup at least similar to mine. Most problems seem to be related to using Postfix as a relay, which is not what I'm doing.

[FeG]

Hi,

I've got a (self-modified) different setup for my*, but I don't know if this changes anything in this case:

Code:

myhostname = hostname.domain.com
mydomain = domain.com
myorigin = $myhostname
mydestinatino = $myhostname

Can you post your /var/lib/mailman/data/aliases and /var/lib/mailman/data/virtual-mailman and the POSTFIX_STYLE_VIRTUAL_DOMAINS entry in your /etc/mailman/mm_cfg.py please.

Greetings
FeG

[thielmann]

FeG Wrote:I've got a (self-modified) different setup for my*, but I don't know if this changes anything in this case:

If I change my setup accordingly, I don't get bounces any longer, but mail.log still shows the messages are bounced since they loop back to postfix.

FeG Wrote:Can you post your /var/lib/mailman/data/aliases and /var/lib/mailman/data/virtual-mailman and the POSTFIX_STYLE_VIRTUAL_DOMAINS entry in your /etc/mailman/mm_cfg.py please.

Obviously, I obfuscated all domain names.

/var/lib/mailman/data/aliases

Code:

# STANZA START: orga
# CREATED: Thu Aug 14 16:43:46 2008
orga:             "|/var/lib/mailman/mail/mailman post orga"
orga-admin:       "|/var/lib/mailman/mail/mailman admin orga"
orga-bounces:     "|/var/lib/mailman/mail/mailman bounces orga"
orga-confirm:     "|/var/lib/mailman/mail/mailman confirm orga"
orga-join:        "|/var/lib/mailman/mail/mailman join orga"
orga-leave:       "|/var/lib/mailman/mail/mailman leave orga"
orga-owner:       "|/var/lib/mailman/mail/mailman owner orga"
orga-request:     "|/var/lib/mailman/mail/mailman request orga"
orga-subscribe:   "|/var/lib/mailman/mail/mailman subscribe orga"
orga-unsubscribe: "|/var/lib/mailman/mail/mailman unsubscribe orga"
# STANZA END: orga

# STANZA START: inha
# CREATED: Thu Aug 14 16:44:03 2008
inha:             "|/var/lib/mailman/mail/mailman post inha"
inha-admin:       "|/var/lib/mailman/mail/mailman admin inha"
inha-bounces:     "|/var/lib/mailman/mail/mailman bounces inha"
inha-confirm:     "|/var/lib/mailman/mail/mailman confirm inha"
inha-join:        "|/var/lib/mailman/mail/mailman join inha"
inha-leave:       "|/var/lib/mailman/mail/mailman leave inha"
inha-owner:       "|/var/lib/mailman/mail/mailman owner inha"
inha-request:     "|/var/lib/mailman/mail/mailman request inha"
inha-subscribe:   "|/var/lib/mailman/mail/mailman subscribe inha"
inha-unsubscribe: "|/var/lib/mailman/mail/mailman unsubscribe inha"
# STANZA END: inha

# STANZA START: mailman
# CREATED: Fri Aug 15 05:04:43 2008
mailman:             "|/var/lib/mailman/mail/mailman post mailman"
mailman-admin:       "|/var/lib/mailman/mail/mailman admin mailman"
mailman-bounces:     "|/var/lib/mailman/mail/mailman bounces mailman"
mailman-confirm:     "|/var/lib/mailman/mail/mailman confirm mailman"
mailman-join:        "|/var/lib/mailman/mail/mailman join mailman"
mailman-leave:       "|/var/lib/mailman/mail/mailman leave mailman"
mailman-owner:       "|/var/lib/mailman/mail/mailman owner mailman"
mailman-request:     "|/var/lib/mailman/mail/mailman request mailman"
mailman-subscribe:   "|/var/lib/mailman/mail/mailman subscribe mailman"
mailman-unsubscribe: "|/var/lib/mailman/mail/mailman unsubscribe mailman"
# STANZA END: mailman

/var/lib/mailman/data/virtual-mailman

Code:

# This file is generated by Mailman, and is kept in sync with the binary hash
# file virtual-mailman.db.  YOU SHOULD NOT MANUALLY EDIT THIS FILE unless you
# know what you're doing, and can keep the two files properly in sync.  If you
# screw it up, you're on your own.
#
# Note that you should already have this virtual domain set up properly in
# your Postfix installation.  See README.POSTFIX for details.

# LOOP ADDRESSES START
mailman-loop@example.com    mailman-loop@localhost
# LOOP ADDRESSES END

# STANZA START: orga
# CREATED: Thu Aug 14 16:43:46 2008
orga@example.com              orga@localhost
orga-admin@example.com        orga-admin@localhost
orga-bounces@example.com      orga-bounces@localhost
orga-confirm@example.com      orga-confirm@localhost
orga-join@example.com         orga-join@localhost
orga-leave@example.com        orga-leave@localhost
orga-owner@example.com        orga-owner@localhost
orga-request@example.com      orga-request@localhost
orga-subscribe@example.com    orga-subscribe@localhost
orga-unsubscribe@example.com  orga-unsubscribe@localhost
# STANZA END: orga

# STANZA START: inha
# CREATED: Thu Aug 14 16:44:03 2008
inha@example.com              inha@localhost
inha-admin@example.com        inha-admin@localhost
inha-bounces@example.com      inha-bounces@localhost
inha-confirm@example.com      inha-confirm@localhost
inha-join@example.com         inha-join@localhost
inha-leave@example.com        inha-leave@localhost
inha-owner@example.com        inha-owner@localhost
inha-request@example.com      inha-request@localhost
inha-subscribe@example.com    inha-subscribe@localhost
inha-unsubscribe@example.com  inha-unsubscribe@localhost
# STANZA END: inha

POSTFIX_STYLE_VIRTUAL_DOMAINS

Code:

POSTFIX_STYLE_VIRTUAL_DOMAINS = ['example.com','virtual-example.com','virtual-example2.com']

[FeG]

Hi,

thielmann Wrote:/var/lib/mailman/data/virtual-mailman

Code:

...

# STANZA START: orga
# CREATED: Thu Aug 14 16:43:46 2008
orga@example.com              orga@localhost
orga-admin@example.com        orga-admin@localhost
orga-bounces@example.com      orga-bounces@localhost
orga-confirm@example.com      orga-confirm@localhost
orga-join@example.com         orga-join@localhost
orga-leave@example.com        orga-leave@localhost
orga-owner@example.com        orga-owner@localhost
orga-request@example.com      orga-request@localhost
orga-subscribe@example.com    orga-subscribe@localhost
orga-unsubscribe@example.com  orga-unsubscribe@localhost
# STANZA END: orga
...

I don't know why it is like this but these lines are wrong.. the should be like this:

Code:

orga@example.com              orga
...

(no @localhost) ...

But I'm not sure why mailman did it like this... How did you created the lists?

Greetings
FeG