Mailman user options redirects

[JanKrohn]

Hi,

The latest WHM update introduced an issue with my Mailman lists.

Users can login to their subscriber option pages fine, for example:
domain/mailman/options/vyrso-90_example.net

If they make any changes to their subscription, usually a page such as follows would open:
domain/mailman/options/vyrso-90_example.net/someusr%40gmail.com

However, instead, they are being redirected to https://domain/ and whatever changes they've made to their settings don't take effect.

I've done some research, and rebuilt Apache making sure that Symlink Race Condition Protection is disabled (I don't think it was ever enabled). I couldn't find other possible root causes.

My WHM version: WHM 54.0 (build 12)

Any idea what's wrong?

Jan

 

[JanKrohn]

Some more tries; all without success:
* updated to build 14
* run /scripts/resetmailmanurls
* run /scripts/fixmailman

Any other ideas would be really welcome.

 

[cPanelMichael]

Hello

Could you let us know the specific URL used to access mailman (without a real domain name), and which specific mailman option you are clicking on and saving changes to when you are redirected? Also, is the redirect to purely the domain name on it's own? Or, are you referring to a redirect from the hostname to the domain name?

Thank you.

 

[JanKrohn]

Let me add a few screenshots to make clear what's happening.
I start of as a subscriber who clicks the "edit subscription" link that comes in the footer of every email. I come out at screenshot 1:

Then I enter my email address, and come out at screenshot 2:

Then I enter my password, and come out at screenshot 3:


I make some changes in the subscription. Clicking the button submits the data to http://domain/mailman/options/vyrso-90_domain, however, I come out at https://domain instead. Same thing happens when I try to unsubscribe.

So actually my users can't unsubscribe any longer, and I'm in violation of CAN-SPAM.

Any help would be greatly appreciated.

 

[cPanelMichael]

Hello

Please post the output from the following command:

grep DEFAULT_URL_PATTERN  /usr/local/cpanel/3rdparty/mailman/Mailman/Defaults.py

Thank you.

 

[JanKrohn]

Thanks for your reply. Here's the output.

DEFAULT_URL_PATTERN = 'http://%s/mailman/'

Jan

 

[cPanelMichael]

Could you open a support ticket using the link in my signature so we can take a closer look? You can post the ticket number here so we can update this thread with the outcome.

Thank you.

 

[JanKrohn]

Thanks! I've just created ticket 7471255.

Jan

 

[JanKrohn]

cPanel support found the problem!

ModSecurity OWASP rule 960035 needs to be deactivated. It conflicts with the Mailman URL.

> WHM: Home »Security Center »ModSecurity(tm) Tools » Edit Custom Rule
> 960035 <-unique ID <- search for this

 

[cPanelMichael]

I am happy to see the issue is now resolved. Thank you for updating us with the outcome.