Peter Chubb via Mailman-users writes: > To do that I need to find the original message headers. By the time > the message gets to the archive, or to the mailing list recipients, > all the Received: headers seem to have been deleted, leaving only > the ones from my list server outwards.
That's not something Mailman does by default (maybe it does for anonymous lists?) For example, the Received chain in your post as I received it goes back through several subdomains of "chubb" before getting to mailman3.org. > Is there a way to access the original incoming email, before DMARC > mitigation etc., has changed the headers? What are you looking for in the received chain? If you just need the malicious source addresses and message-ids, those should be in the MTA log already. The only ways I can think of in a stock Mailman to preserve the original message are (1) emergency moderation, which should catch the mail before anything is done to it, and (2) reverting the anonymous configuration to default. In case (1) you can see the headers of held messages in Postorius, or with the "mailman qfile" subcommand. The held message remains in the "in" queue until its disposition is decided, I think. If you don't find it there, look around the queues (not bad or shunt, those have a different purpose) for messages that have been there for a while. In case (2), end recipients should get the whole received chain with the original from heder. The less disruptive way to do it involves configuring the MTA to both log the whole message to a file and send it to Mailman. To say more we'd need to know about your MTA. -- GNU Mailman consultant (installation, migration, customization) Sirius Open Source https://www.siriusopensource.com/ Software systems consulting in Europe, North America, and Japan _______________________________________________ Mailman-users mailing list -- [email protected] To unsubscribe send an email to [email protected] https://lists.mailman3.org/mailman3/lists/mailman-users.mailman3.org/ Archived at: https://lists.mailman3.org/archives/list/[email protected]/message/GFRIO3QHSIPR3N7SEU7WCYPQYZ74FALP/ This message sent to [email protected]
