Lev Serebryakov
2022-Feb-11 11:29 UTC
Sv: dovecot mailing list (this mailing list), DKIM, SPF and DMARC
On 09.02.2022 16:33, Aki Tuomi wrote: I'm participating in ~20 mailing lists and only this one gives a storm of DMARC reports on each my posting. Problem is, I need to unpack each of them to be sure, that these are false positives and I'm afraid, that it could lower reputation of my mail server IP address with major providers (like Google Mail).> We did that replacement for a while, but people complained. We have ARC signing there, unfortunately it only works if you trust it. > > Aki > >> On 04/02/2022 23:10 Sebastian Nielsen <sebastian at sebbe.eu> wrote: >> >> >> I get it too. These appear because they don't replace either MAIL FROM: or Mime From: with the list address. This causes validations to fail since the mailing list is trying to spoof mail in your name, and of course, anti-spoofing security is going to react. DKIM can be troublesome since mailing lists sometimes change or reencode content so DKIM signature fails. >> >> -----Ursprungligt meddelande----- >> Fr?n: dovecot-bounces at dovecot.org <dovecot-bounces at dovecot.org> F?r Lev Serebryakov >> Skickat: den 4 februari 2022 21:58 >> Till: dovecot at dovecot.org >> ?mne: dovecot mailing list (this mailing list), DKIM, SPF and DMARC >> >> >> My domain (serebrtyajov.spb.ru) has all these "new" e-mail technologies configured. It works fine till I write to this mailing list. >> >> After that I've got several DMARC reports about "spam" from my domain. All these reports are about my mailing list post. >> >> I don't have such problems with other mailing lists (FreeBSD ones, OpenJDK ones, and others). >> >> Looks like mailing list software for this mailing list is misconfigured. >> >> I'm sure, I'll get new after this message. >> >> -- >> // Black Lion AKA Lev Serebryakov-- // Black Lion AKA Lev Serebryakov
Marc
2022-Feb-11 13:31 UTC
Sv: dovecot mailing list (this mailing list), DKIM, SPF and DMARC
> > Problem is, I need to unpack each of them to be sure, that these are > false positives and I'm afraid, that it could lower reputation of my mail > server IP address with major providers (like Google Mail). >How can you get a lower reputation? Afaik dmarc is just signing your outgoing messages.
Benny Pedersen
2022-Feb-11 15:21 UTC
Sv: dovecot mailing list (this mailing list), DKIM, SPF and DMARC
On 2022-02-11 12:29, Lev Serebryakov wrote:> On 09.02.2022 16:33, Aki Tuomi wrote: > > I'm participating in ~20 mailing lists and only this one gives a > storm of DMARC reports on each my posting.+1> Problem is, I need to unpack each of them to be sure, that these are > false positives and I'm afraid, that it could lower reputation of my > mail server IP address with major providers (like Google Mail).your problem is that ARC seal, ARC sign, is not used or even trusted at the dmarc reporting host this will make noice and false reporting :/ until this is solved turn off reporting in dmarc policy> >> We did that replacement for a while, but people complained. We have >> ARC signing there, unfortunately it only works if you trust it.i can make that strong, people should learn on ARC, and use rspamd or wait for spamassassin 4, gmail does not let users change there missing problems with no dnssec domains, how can google be serius there ?