dovecot - Feb 2022 - Sv: dovecot mailing list (this mailing list), DKIM, SPF and DMARC

We did that replacement for a while, but people complained. We have ARC signing
there, unfortunately it only works if you trust it.

Aki
> On 04/02/2022 23:10 Sebastian Nielsen <sebastian at sebbe.eu> wrote:
> 
>  
> I get it too. These appear because they don't replace either MAIL FROM:
or Mime From: with the list address. This causes validations to fail since the
mailing list is trying to spoof mail in your name, and of course, anti-spoofing
security is going to react. DKIM can be troublesome since mailing lists
sometimes change or reencode content so DKIM signature fails.
> 
> -----Ursprungligt meddelande-----
> Fr?n: dovecot-bounces at dovecot.org <dovecot-bounces at dovecot.org>
F?r Lev Serebryakov
> Skickat: den 4 februari 2022 21:58
> Till: dovecot at dovecot.org
> ?mne: dovecot mailing list (this mailing list), DKIM, SPF and DMARC
> 
> 
>   My domain (serebrtyajov.spb.ru) has all these "new" e-mail
technologies configured. It works fine till I write to this mailing list.
> 
>   After that I've got several DMARC reports about "spam" from
my domain. All these reports are about my mailing list post.
> 
>   I don't have such problems with other mailing lists (FreeBSD ones,
OpenJDK ones, and others).
> 
>   Looks like mailing list software for this mailing list is misconfigured.
> 
>   I'm sure, I'll get new after this message.
> 
> -- 
> // Black Lion AKA Lev Serebryakov

On 2022-02-09 14:33, Aki Tuomi wrote:
> We did that replacement for a while, but people complained. We have
> ARC signing there, unfortunately it only works if you trust it.
ARC-Authentication-Results: i=1; talvi.dovecot.org;
  dkim=pass header.d=open-xchange.com header.s=201705 header.b=kWkbHwXq;
  dmarc=pass (policy=reject) header.from=open-xchange.com;
  spf=pass (talvi.dovecot.org: domain of aki.tuomi at open-xchange.com 
designates
  87.191.57.183 as permitted sender) 
smtp.mailfrom=aki.tuomi at open-xchange.com

X-Spam-Status: No, score=-6.4 required=5.0 
tests=AWL,DKIM_INVALID,DKIM_SIGNED,
	HEADER_FROM_DIFFERENT_DOMAINS,KAM_DMARC_STATUS,LOCAL_HASHWL_ALL,
	MAILING_LIST_MULTI,RCVD_IN_DNSWL_MED,RCVD_IN_HOSTKARMA_W,
	RCVD_IN_MSPIKE_H5,RCVD_IN_MSPIKE_WL,SPF_HELO_PASS,SPF_PASS,
	T_SCC_BODY_TEXT_LINE autolearn=ham autolearn_force=no

seems it breaks :/

On 09.02.2022 16:33, Aki Tuomi wrote:

  I'm participating in ~20 mailing lists and only this one gives a storm of
DMARC reports on each my posting.

  Problem is, I need to unpack each of them to be sure, that these are false
positives and I'm afraid, that it could lower reputation of my mail server
IP address with major providers (like Google Mail).
> We did that replacement for a while, but people complained. We have ARC
signing there, unfortunately it only works if you trust it.
> 
> Aki
> 
>> On 04/02/2022 23:10 Sebastian Nielsen <sebastian at sebbe.eu>
wrote:
>>
>>   
>> I get it too. These appear because they don't replace either MAIL
FROM: or Mime From: with the list address. This causes validations to fail since
the mailing list is trying to spoof mail in your name, and of course,
anti-spoofing security is going to react. DKIM can be troublesome since mailing
lists sometimes change or reencode content so DKIM signature fails.
>>
>> -----Ursprungligt meddelande-----
>> Fr?n: dovecot-bounces at dovecot.org <dovecot-bounces at
dovecot.org> F?r Lev Serebryakov
>> Skickat: den 4 februari 2022 21:58
>> Till: dovecot at dovecot.org
>> ?mne: dovecot mailing list (this mailing list), DKIM, SPF and DMARC
>>
>>
>>    My domain (serebrtyajov.spb.ru) has all these "new" e-mail
technologies configured. It works fine till I write to this mailing list.
>>
>>    After that I've got several DMARC reports about "spam"
from my domain. All these reports are about my mailing list post.
>>
>>    I don't have such problems with other mailing lists (FreeBSD
ones, OpenJDK ones, and others).
>>
>>    Looks like mailing list software for this mailing list is
misconfigured.
>>
>>    I'm sure, I'll get new after this message.
>>
>> -- 
>> // Black Lion AKA Lev Serebryakov

-- 
// Black Lion AKA Lev Serebryakov