[Mailman-Users] deleted admins and attachments wouldn't work.

[St John's Webmaster]

G'Day.

I've now had a look in the config.pck files and i have a whole lot of  
rubbish namely the friend at public.com etc... i'm really unsure what the  
proper contents of this should be.. as someone said they think i was  
previously hacked. do things look right? The 'message-id:  
relay.comanche.denmark.eu' makes me suspicious.

Patrick

}q^A(U^Psend_welcome_msgq^BK^@U moderatorq^C]q^DU^Nanonymous_listq^EI00
U
advertisedq^FK^@U^Madministriviaq^GI01
U^Runsubscribe_policyq^HK^@U^Oone_last_digestq  }q
U 
^ 
Sdigest_last_sent_atq 
^KK^@U^Ndigest_membersq^L}q^MU^Oscrub_nondigestq^NI00
U 
^ 
Opass_mime_typesq 
^ 
O 
]q 
^ 
PU 
^ 
Kwelcome_msgq 
^ 
QU 
^ 
@U 
^ 
Ogateway_to_newsq 
^RK^@U^Ntopics_enabledq^SK^@U^Uadmin_notify_mchangesq^TI00
U 
^ 
Xgeneric_nonmember_actionq 
^UK^AU^Vadmin_member_chunksizeq^VK^^U^Waccept_these_nonmembersq^W]q^XU^Xtim.vernum at macquarie.comq 
^YaU^Wdi$
U^Wbounce_info_stale_afterq^\J^?:        
^@U^Zfilter_filename_extensionsq^]]q^^(U^Cexeq^_U^Cbatq U^Ccmdq! 
U^Ccomq"U^Cpifq#U^Cscrq$U^Cvb$
U 
^ 
Plinked_newsgroupq:U 
^@U^Nsend_remindersq;K^@U^Uregular_include_listsq<]q=U    passwordsq>}q?U^Vpatrick.helm at gmail.comq 
@U^Hseuzfufaq$
You have elected to receive messages from the %(real_name)s list in  
digest format'
Please visit %(web_page_url)slistinfo%(cgiext)s/%(_internal_name)s if  
you wish to modify your settings
----------------------------------------------- 
qIU^KdescriptionqJU^@U^Wbounce_matching_headersqKU^?
# Lines that *start* with a '#' are comments.
to: friend at public.com
message-id: relay.comanche.denmark.eu
from: list at listme.com
from 
: .*@uplinkpro 
.comqLU^Vbounce_score_thresholdqMG@^T^@^@^@^@^@^@U^MnondigestableqNI01
U^Qautorespond_adminqOK^@U^^bounce_notify_owner_on_removalqPI01
U 
^ 
Xpass_filename_extensionsqQ 
]qRU 
^ 
Yautoresponse_request_textqSU 
^@U^Qobscure_addressesqTK^AU^Qfilter_mime_typesqU]qV(U^Ltext/x-vcardqW$
msg_footerqhU?_______________________________________________
This is a message from the %(real_name)s mailing list at %(host_name)s
Please visit %(web_page_url)slistinfo%(cgiext)s/%(_internal_name)s if  
you wish to modify your settingsqiU^Rpreferred_languageqjU^Benq$
msg_headerqmU 
^ 
@U 
^ 
Pmax_message_sizeqnK 
(U^Xarchive_volume_frequencyqoK^AU^Radmin_immed_notifyqpI01
U^Onext_request_idqqK^TU^DinfoqrU^@U  
bounce_you_are_disabled_warningsqsK^CU^Nprivate_rosterqtK^BU^ 
\require_explicit_destinationquK^AU$
U 
^ 
Ydefault_member_moderationqxK 
^ 
AU 
^ 
Eownerqy 
]qzU^Vpatrick.helm at gmail.comq{aU^Hban_listq|]q}U^Mumbrella_listq~I00
U^Xmember_moderation_noticeq^? 
U^@U)bounce_you_are_disabled_warnings_intervalq^?J^?:      
^@U^Mdigest_footerq^?U^@U^Pnext_post_numberq^$
U^Nsubject_prefixq^?X^G^@^@^@[test] q^?U^Fvolumeq^? 
K^AU^Yconvert_html_to_plaintextq^?I01
U^Vumbrella_member_suffixq^?U^F-ownerq^?U^Savailable_languagesq^?]q^? 
hkaU^Rnext_digest_numberq^?K^AU^Tautorespond_postingsq^?K^@U^Uen$
U^Kgoodbye_msgq?U^@U^Vtopics_bodylines_limitq?K^EU^Garchiveq?I01
U^Nfilter_contentq?K^@U usernamesq?}q?U^Vpatrick.helm at gmail.comq?X^L^@^@^@Patrick 
  Helmq?sU      emergencyq?K^@U^Lmod_passwordq?U(ca6b$
U       nntp_hostq?U^@U^Wnews_prefix_subject_tooq? 
K^AU^Qbounce_processingq?I01
U^Oarchive_privateq?K^AU^Preply_to_addressq?U^@U^Luser_optionsq?}q? 
hbM^?^AsU^Winclude_rfc2369_headersq?K^AU^Uforward_auto_discardsq?K


>
> Hi again,
>
> I've been unable to fix the issue where attachments to all lists are  
> not getting through, even though the specific content filtering  
> options int he lists are not turned on. Where would I start looking  
> for the answers to a global scrub attachemnets.
>
> They exist in the moderation request sent to the owners/moderators,  
> but do not exist when the list members get the message.
>
> The root password was altered, and no rootkits were found. i  
> appreciate your help.
>
> Kind Regards,
> Patrick Helm

On 08/12/2008, at 1:08 PM, Brad Knowles wrote:

> on 12/6/08 5:29 PM, St John's Webmaster said:
>
>> One day last week, mailman reset the overarching admin password,  
>> removed certain people from lists as admins, and suddenly sent out  
>> password reminders. And, it wouldn't send out lists attachments.  
>> The attachments exits when the moderator sees the message, but are  
>> scrubbed after that. No content filtering is active.
>
> Mailman would not just do this on it's own.  Something else had to  
> happen, and I'm guessing it was probably someone restoring data from  
> a backup that wiped out your current production environment.
>
> Nothing that you're talking about could possibly happen with the  
> standard version of Mailman with the standard cron jobs.
>
>> 2.1.11cp2
>
> If you're running cPanel, please take a look at FAQ 6.11 at <http://wiki.list.org/x/sYA9 
> >.
>
> You need to talk to your provider or cPanel, to see what they must  
> have done to you.
>
> -- 
> Brad Knowles <brad at shub-internet.org>
> LinkedIn Profile: <http://tinyurl.com/y8kpxu>