Could Mailman apply "munge from" in less cases?
For example, "munge from" is applied only to messages from domains that publish a DMARC policy of 'reject' or 'quarantine'. However, if the message mailman is sending has a valid DKIM signature because there is no footer or subject prefix and no other edge cases, there is no reason to munge, because it will pass the DMARC check. It seems Mailman could do that. Or, if not, could it seems the MTA could do this checking and munging.
-- Ian Kelling | Senior Systems Administrator, Free Software Foundation GPG Key: B125 F60B 7B28 7FF6 A2B7 DF8F 170A F0E2 9542 95DF https://fsf.org | https://gnu.org
On 6/17/19 2:51 PM, Ian Kelling wrote:
For example, "munge from" is applied only to messages from domains that publish a DMARC policy of 'reject' or 'quarantine'. However, if the message mailman is sending has a valid DKIM signature because there is no footer or subject prefix and no other edge cases, there is no reason to munge, because it will pass the DMARC check. It seems Mailman could do that.
It can. If your list makes no transformations that break DMARC, just set dmarc_moderation_action to Accept.
There is still a potential issue if you do that if the sender's domain doesn't DKIM sign the message and relies on SPF (which any forwarding will break) to pass DMARC, but my experience is very few if any domains that publish a DMARC policy do not DKIM sign their mail.
-- Mark Sapiro mark@msapiro.net The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan
participants (2)
-
Ian Kelling
-
Mark Sapiro