[Mailman-Users] DKIM, SPF, DMARC, Mail_as_list all working, but MUAs not happy
araasch at gmail.com
Tue Apr 5 17:48:26 EDT 2016
Thanks much. I think I will give Munge From and see what happens.
Computers are supposed to be deterministic. This stuff, well, not so much.
On Tue, Apr 5, 2016 at 4:00 PM, Mark Sapiro <mark at msapiro.net> wrote:
> On 04/05/2016 12:14 PM, Arlen Raasch wrote:
> > A large number of our users are not happy with how mail is presented when
> > Mail_as_list is active. They messages appear as attachments in some
> > If I change from Mail_as_list to Mung From, DKIM does not validate.
> I'm guessing you are talking about the from_is_list setting and you are
> using 'Wrap Message'.
> > I noticed from previous emails I received from this list that DKIM does
> > validate here either.
> The original, incoming DKIM signature doesn't validate because list
> transformations such as prefixing the subject or adding msg_footer break
> the sig.
> I just checked and found that mail.python.org was not DKIM signing
> outgoing list mail because it was checking only the From: domain for
> python.org. I have hopefully just corrected that.
> > Can I just switch the list to Mung From with some certainty that the
> > providers will continue to relay our traffic as we have valid SPF and
> > records?
> If Wrap Message is currently working for you, I don't know why Munge
> From would not work, but there is little difference between these
> actions in Mailman 2.1.21 vs 2.1.16. However, 2.1.21 does offer
> dmarc_moderation_action so you can apply Wrap Message or Munge From only
> to those messages which are From: a domain which publishes a DMARC
> p=reject (and optionally p=quarantine) policy.
> > Would switching to a later version of mailman make this any better (and
> > why)?
> Maybe. As I say above, it would allow you to only apply DMARC
> mitigations to those posts that need it. Whether it would make Munge
> From any better depends on what the current issue is. I know of no
> reason why Wrap Message would be effective in avoiding DMARC rejects and
> Munge From would not, but ISPs do funny things and are secretive about
> it, so who knows.
> My own lists and the python.org lists do Munge From and we don't see
> DMARC bounces.
> Mark Sapiro <mark at msapiro.net> The highway is for gamblers,
> San Francisco Bay Area, California better use your sense - B. Dylan
> Mailman-Users mailing list Mailman-Users at python.org
> Mailman FAQ: http://wiki.list.org/x/AgA3
> Security Policy: http://wiki.list.org/x/QIA9
> Searchable Archives:
More information about the Mailman-Users