dovecot - Feb 2022 - Sv: dovecot mailing list (this mailing list), DKIM, SPF and DMARC

> 
>   Problem is, I need to unpack each of them to be sure, that these are
> false positives and I'm afraid, that it could lower reputation of my
mail
> server IP address with major providers (like Google Mail).
> 
How can you get a lower reputation? Afaik dmarc is just signing your outgoing
messages.

On 2022-02-11 14:31, Marc wrote:
> How can you get a lower reputation? Afaik dmarc is just signing your
> outgoing messages.
there is no repution in dmarc, it either pass or fail, if all fails, it 
proves nothing, if all pass it proves just a litte that is not forged 
content

maillist should always be trusted, in the AR header, but not from 
untrusted AR header domains, dmarc check must not be used from untrusted 
AR signers, so make maillists ARC domains trusted, noice will then be 
lover on reports

i say still opendkim/openarc/openspf/opendmarc is still unstable, and no 
one should relly trust it in current state

On 11.02.2022 16:31, Marc wrote:
>>    Problem is, I need to unpack each of them to be sure, that these are
>> false positives and I'm afraid, that it could lower reputation of
my mail
>> server IP address with major providers (like Google Mail).
>>
> 
> How can you get a lower reputation? Afaik dmarc is just signing your
outgoing messages.
  DKIM is signing of headers. DMARC is policy (like "This domain must sign
all messages with DKIM, no exceptions, and has strict SFP") and reporting
mechanism for other hosts ("We get mail from you and this message violates
declared policy of your domain").

  As I get these reports, it means that messages from "my domain"
(really, forwarded by mailing list software) violate policies set by my domain.
It means, my domain is compromised somehow.


-- 
// Black Lion AKA Lev Serebryakov

On 11.02.2022 16:31, Marc wrote:

  (sorry for posting to list this, but I don't have any ways to contact Marc
off-list now)
>>
>>    Problem is, I need to unpack each of them to be sure, that these are
>> false positives and I'm afraid, that it could lower reputation of
my mail
>> server IP address with major providers (like Google Mail).
>>
> 
> How can you get a lower reputation? Afaik dmarc is just signing your
outgoing messages.
  Marc, my domain already has problems sending mail to you, for example:

<Marc at f1-outsourcing.eu>: host spam1.roosit.eu[212.26.193.45] said: 553
5.3.0
     550We have blocked this toplevel because of spam. Use another toplevel
     until the maintainer has resolved these issues (in reply to MAIL FROM
     command)

-- 
// Black Lion AKA Lev Serebryakov