[Python-Dev] Tracker reviews look like spam

[Cameron Simpson]

On 12May2015 22:15, David Wilson <dw+python-dev at hmmz.org> wrote:
>SPF only covers the envelope sender, so it should be possible to set
>that to something that validates with SPF, keep the RFC822 From: header
>as it is, and maybe(?) include a separate Sender: header matching the
>envelope address.
>
>David

Indeed. That sounds sane to me too. Google's complaint is SPF specific, so 
hopefully that is the criterion for the spam rating.

It looks like bugs.python.org does not have an SPF record at all - neither SPF 
not TXT. (You really want both, same format, to support older DNS clients).

I'm not sure you need a Sender: (though it wouldn't hurt), given that the From: 
is already a "system" like address ("<report@") and not a forged From: eg 
"Terry Reedy <tjreedy at udel.edu>" as a mailing list would do.

Cheers,
Cameron Simpson <cs at zip.com.au>

>On Tue, May 12, 2015 at 06:08:30PM -0400, Terry Reedy wrote:
>> Gmail dumps patch review email in my junk box. The problem seems to be the
>> spoofed From: header.
>>
>> Received: from psf.upfronthosting.co.za ([2a01:4f8:131:2480::3])
>>         by mx.google.com with ESMTP id
>> m1si26039166wjy.52.2015.05.12.00.20.38
>>         for <tjreedy at udel.edu>;
>>         Tue, 12 May 2015 00:20:38 -0700 (PDT)
>> Received-SPF: softfail (google.com: domain of transitioning
>> storchaka at gmail.com does not designate 2a01:4f8:131:2480::3 as permitted
>> sender) client-ip=2a01:4f8:131:2480::3;
>>
>> Tracker reviews are the only false positives in my junk list. Otherwise, I
>> might stop reviewing. Verizon does not even deliver mail that fails its junk
>> test, so I would not be surprised if there are people who simply do not get
>> emailed reviews.
>>
>> Tracker posts are sent from Person Name <report at bugs.python.org>
>> Perhaps reviews could come 'from' Person Name <review at bugs.python.org>
>>
>> Even direct tracker posts just get a neutral score.
>> Received-SPF: neutral (google.com: 2a01:4f8:131:2480::3 is neither permitted
>> nor denied by best guess record for domain of
>> roundup-admin at psf.upfronthosting.co.za) client-ip=2a01:4f8:131:2480::3;
>>
>> SPF is Sender Policy Framework
>> https://en.wikipedia.org/wiki/Sender_Policy_Framework
>>
>> Checkins mail, for instance, gets an SPF 'pass' because python.org
>> designates mail.python.org as a permitted sender.
>_______________________________________________
>Python-Dev mailing list
>Python-Dev at python.org
>https://mail.python.org/mailman/listinfo/python-dev
>Unsubscribe: https://mail.python.org/mailman/options/python-dev/cs%40zip.com.au