Re: [mailop] Yahoo no longer accepting email forwards?

2024-05-21 Thread Andrew C Aitchison via mailop
On Tue, 21 May 2024, Mark E. Jeftovic via mailop wrote: The only difference between messages that get through vs ones that are rejected (same message) is whether we send to the Yahoo email box directly, or else via an email forward (which has SRS enabled, and optionally SPF and even minimal

Re: [mailop] (Mis)use of DKIM's length tag and it's impact on DMARC and BIMI

2024-05-17 Thread Andrew C Aitchison via mailop
On Fri, 17 May 2024, Taavi Eomäe via mailop wrote: As part of coordinated disclosure, I am sharing it here as well. In short, using the approach described below, attackers can replace the entire contents of a letter, in a way the letters still pass DKIM’s cryptographic checks. This also means

Re: [mailop] Doesn't ARC substitute DKIM at Gmail inbound?

2024-05-05 Thread Andrew C Aitchison via mailop
On Sat, 4 May 2024, Alessandro Vesely via mailop wrote: The last URL in the response says something about ARC: ARC checks the previous authentication status of forwarded messages. If a forwarded message passes SPF or DKIM authentication, but ARC shows it previously failed

[mailop] MX records required - Was Re: Problems with invoices.premierinn.de and postmas...@premierinn.de

2024-04-26 Thread Andrew C Aitchison via mailop
AA record addresses ? TonyFinch> Too late for that by about 10 years, I'm afraid. Looks like that dream is getting further away :-( We wont will that fight if we don't push for it. On 25.04.24 14:59, Andrew C Aitchison via mailop wrote: Should someone here not know, RFC 7505 A "Null MX&

Re: [mailop] Problems with invoices.premierinn.de and postmas...@premierinn.de

2024-04-25 Thread Andrew C Aitchison via mailop
On Thu, 25 Apr 2024, Paul Menzel via mailop wrote: Dear mail operators, Until now we rejected emails from donotre...@invoices.premierinn.de 2024-04-23.log:2024-04-23 17:48:53 194.95.238.12 <22>Apr 23 17:48:53 mgw6-erl postfix/smtpd[744016]: NOQUEUE: reject: RCPT from

Re: [mailop] Off-Topic - VMWare ESXI 7.0

2024-04-17 Thread Andrew C Aitchison via mailop
On Wed, 17 Apr 2024, Bruno Flückiger via mailop wrote: What sort of shortcomings do you see for, say, Proxmox?  I would say that by using Open vSwitch & Free Range Routing (with EVPN), one can get pretty close to the VMware NSX.  And with enabling Ceph on Proxmox, one can get the VSan-like

Re: [mailop] mailop and DKIM signatures

2024-03-21 Thread Andrew C Aitchison via mailop
On Sat, 16 Mar 2024, Gellner, Oliver via mailop wrote: Depending on the kind of changes which have been applied to the message you can reverse the transformations and verify the original DKIM signatures. A member of this list developed a software to do this programmatically. Where can I learn

Re: [mailop] Google unsolicited mail rejected with 421

2024-03-14 Thread Andrew C Aitchison via mailop
On Thu, 14 Mar 2024, Johann Klasek via mailop wrote: On Thu, Mar 14, 2024 at 12:03:46PM +0100, Marco Moock via mailop wrote: Am 14.03.2024 schrieb Julian Bradfield via mailop : On 2024-03-14, Marco Moock via mailop wrote: sendmail tried to deliver it 20 times during the night - this

Re: [mailop] Ubuntu Noble/24.04 - TLS 1.0, 1.1 and DTLS 1.0 are forcefully disabled

2024-03-14 Thread Andrew C Aitchison via mailop
On Thu, 14 Mar 2024, Marco Moock via mailop wrote: Am 14.03.2024 schrieb Cyril - ImprovMX via mailop : But in my opinion, moving the needle upward by not accepting deprecated versions would force those users to be compliant and improve the general security. Most of them will simply fall

Re: [mailop] Ubuntu Noble/24.04 - TLS 1.0, 1.1 and DTLS 1.0 are forcefully disabled

2024-03-13 Thread Andrew C Aitchison via mailop
On Wed, 13 Mar 2024, Marco Moock via mailop wrote: Am 13.03.2024 um 10:43:27 Uhr schrieb Bill Cole via mailop: Without one, disabling them is a cargo-cult praxis that is worse than any false sense of security provided to oblivious peers who can't do TLSv1.2 or better. What are legitimate

[mailop] Ubuntu Noble/24.04 - TLS 1.0, 1.1 and DTLS 1.0 are forcefully disabled

2024-03-12 Thread Andrew C Aitchison via mailop
https://discourse.ubuntu.com/t/noble-numbat-release-notes/39890#tls-10-11-and-dtls-10-are-forcefully-disabled-13 (which is mostly a template) suggests that TLS 1.0, 1.1 and DTLS 1.0 are "forcefully disabled" in the upcoming Ubuntu release (due next month at a guess). Apparently this is not new

Re: [mailop] Filter out emoji from email adresses

2024-03-06 Thread Andrew C Aitchison via mailop
On Wed, 6 Mar 2024, John Levine via mailop wrote: Right. I am aware of communities of EAI mail users in India and Thailand, but not anywhere else. You might expect EAI users in China, but nope, for reasons I can explain if anyone cares. Everywhere else people use ASCII mail addresses, even

Re: [mailop] Contact of postmaster for hostedemail.com domains

2024-02-26 Thread Andrew C Aitchison via mailop
On Mon, 26 Feb 2024, Jaroslaw Rafa via mailop wrote: Dnia 26.02.2024 o godz. 10:19:54 Kris Deugau via mailop pisze: Also try getting your recipients to complain to their mail hosting provider - complaints from the people who want to *receive* the message are far more effective than complaints

Re: [mailop] One click unsubscribe in mailing list messages

2024-02-24 Thread Andrew C Aitchison via mailop
On Sat, 24 Feb 2024, Anne P. Mitchell, Esq. via mailop wrote: Not to mention that Federal law requires a one-step unsubscribe method. As I often seem to get challenged on this, here is the text of the law: "§ 316.5 Prohibition on charging a fee or imposing other requirements on recipients who

[mailop] CloudSererblocks - was Re: Outgoing Spam from Microsoft IPs

2024-02-16 Thread Andrew C Aitchison via mailop
On Fri, 16 Feb 2024, Matt Palmer via mailop wrote: On Wed, Feb 14, 2024 at 07:57:09AM +0100, Hans-Martin Mosner via mailop wrote: Is there some way to identify the host IPs which are used by those cloud servers, so one could block incoming SMTP from them if Microsoft can't be bothered to

Re: [mailop] Is forwarding to Gmail basically dead?

2024-02-11 Thread Andrew C Aitchison via mailop
On Sun, 11 Feb 2024, Sebastian Nielsen via mailop wrote: because SPF is too easy to forge.) Wrong. When a shared space is used, its up to that particular space, to enforce so customers cannot use other customer’s email addresses. Since some of these shared spaces have demonstrated that

Re: [mailop] zen.spamhaus.org

2024-02-07 Thread Andrew C Aitchison via mailop
On Wed, 7 Feb 2024, Atro Tossavainen via mailop wrote: Otherwise you need to stop using Spamhaus -- even if you sign-up, perhaps because of the query volume, you still must query them directly not via a public resolver. This is not true. One of the main points of DQS is that the DNS service

Re: [mailop] Support contact for Shaw.ca

2024-02-02 Thread Andrew C Aitchison via mailop
On Thu, 1 Feb 2024, Scott Undercofler via mailop wrote: I'm replying on list for visibility. The issue you’re seeing is directly related to SMTP smuggling which was discussed on list ad nauseam about a month ago. The servers at shaw are configured to reject non-RFC bare linefeeds. Can you

Re: [mailop] Anyone else noticing an increase in spam from Office365 distribution lists?

2024-01-14 Thread Andrew C Aitchison via mailop
On Sun, 14 Jan 2024, Mark Alley via mailop wrote: This is anecdotal, but I think it illustrates even at a smaller scale the persistent problem Microsoft currently has with their tenancy. I did some quick perusal of the last month's data from our email logs, and out of a total of 22,473

Re: [mailop] BIMI and multiple hops

2024-01-13 Thread Andrew C Aitchison via mailop
On Sat, 13 Jan 2024, Benny Pedersen via mailop wrote: Andrew C Aitchison via mailop skrev den 2024-01-13 07:16: [ Wearing an MTA developer's hat. ] +1 I see that an MTA is supposed to remove existing Authentication-Results and BIMI-Indicator headers, and that generally an MUA may use

[mailop] BIMI and multiple hops

2024-01-12 Thread Andrew C Aitchison via mailop
[ Wearing an MTA developer's hat. ] I see that an MTA is supposed to remove existing Authentication-Results and BIMI-Indicator headers, and that generally an MUA may use these headers if present. I presume that most MTAs only add these headers on delivery, but if a non-compliant MTA

Re: [mailop] BIMI boycott?

2024-01-10 Thread Andrew C Aitchison via mailop
On Wed, 10 Jan 2024, Jaroslaw Rafa via mailop wrote: As the OP has written, the only ones that may be interested in this may be marketers. Nobody else needs any logos, avatars etc. displayed alongside the email headers. There is a reason why the early attempt at this - I'm talking about the

Re: [mailop] BIMI boycott?

2024-01-10 Thread Andrew C Aitchison via mailop
On Wed, 10 Jan 2024, Olga Fischer via mailop wrote: Hi mailops, I am new here because I want to collect some opinion. Many bigger mailers are blogging about BIMI. As far as I see its exclusively for brands. It has 2 big barriers for entry: - Expensive bespoke cert oids - Registered trademark

Re: [mailop] Malformed To: header

2023-12-30 Thread Andrew C Aitchison via mailop
On Sat, 30 Dec 2023, Slavko via mailop wrote: Hi, recently i see messages from this ML rejected by my MTA, due malformed To: header (from postmas...@inter-corporate.com): To: mailop@mailop.org AFAIK, the display name have to be quoted (@ char in it), thus my MTA is right, but... Please,

Re: [mailop] ECDSA DKIM validation?

2023-12-21 Thread Andrew C Aitchison via mailop
On Thu, 21 Dec 2023, John R Levine via mailop wrote: On Thu 21/Dec/2023 10:37:52 +0100 John Levine via mailop wrote: Yes, your code should handle them. No, that doesn't mean you should sign with them. Yup. The question was why Gmail doesn't /verify/ ed25519 signatures. Answering that they

Re: [mailop] Merry Christmas from Google?

2023-12-17 Thread Andrew C Aitchison via mailop
On Sun, 17 Dec 2023, Marco Moock via mailop wrote: Am 16.12.2023 um 16:07:19 Uhr schrieb Jarland Donnell via mailop: Obligatory: We don't intend to send any email their way that could be perceived as unsolicited, but our users do use forwarders and we'll never completely match their filters.

[mailop] Historical spam loads - was Re: Google rate-limiting more aggressively than usual?

2023-11-19 Thread Andrew C Aitchison via mailop
On Sun, 19 Nov 2023, Bill Cole via mailop wrote: On 2023-11-19 at 06:59:37 UTC-0500 (Sun, 19 Nov 2023 12:59:37 +0100) Alessandro Vesely via mailop is rumored to have said: I don't think someone can drop almost all mail and still call itself a mail server. Were you running a mail system in

[mailop] ClientID - was Re: Microsoft lays hands on login data: Beware of the new Outlook

2023-11-11 Thread Andrew C Aitchison via mailop
On Sat, 11 Nov 2023, Carsten Schiefner via mailop wrote: Hi Andrew, Am 11.11.2023 um 14:25 schrieb Andrew C Aitchison via mailop : […] I guess we need to look at ClientID https://datatracker.ietf.org/doc/draft-storey-smtp-client-id/ (SMTP) https://datatracker.ietf.org/doc/draft-yu-imap

Re: [mailop] Microsoft lays hands on login data: Beware of the new Outlook

2023-11-11 Thread Andrew C Aitchison via mailop
On Sat, 11 Nov 2023, Bjoern Franke via mailop wrote: Hi, ... I have not been aware of the fact that *ALL* apps actually might be doing this. It was just recently that I looked for alternative iOS mail apps - and "phoning home" credentials got noted only for the Spark app. This seems to be

Re: [mailop] Microsoft lays hands on login data: Beware of the new Outlook

2023-11-10 Thread Andrew C Aitchison via mailop
On Fri, 10 Nov 2023, Carsten Schiefner via mailop wrote: Folks, sort of triggered by Benoit's recent and absolutely spot-hitting rant about Microsoft's inability resp. unwillingness to appropriately deal with spam complaints, I thought I should share this article: Microsoft lays hands on

Re: [mailop] valid DKIM-signed email spam-classified @gmail only; correct PASS @ other server recipients ?

2023-10-29 Thread Andrew C Aitchison via mailop
On Sun, 29 Oct 2023, pgnd via mailop wrote: Is that domain the same as you post here from? I ask, because your email was signed only by one key and you mentioned dualsign previously. nope. _this_ is not sent from one of my own servers. all my mails from all my servers are dual signed. as

Re: [mailop] fastmail and sender score snafu

2023-10-09 Thread Andrew C Aitchison via mailop
On Mon, 9 Oct 2023, Simon Arlott via mailop wrote: On 09/10/2023 07:44, Kirill Miazine via mailop wrote: The reason for a long retry is that I have to manually decrypt mailstore partition in case of server reboot. Exim would accept the message, but defer delivery until the mount appears. I

[mailop] DMARC report rejections - was Re: Recent increase in GMail 421-4.7.28 responses

2023-10-06 Thread Andrew C Aitchison via mailop
On Thu, 5 Oct 2023, Bernardo Reino via mailop wrote: On Thu, 5 Oct 2023, Slavko via mailop wrote: Dňa 2. 10. o 18:34 Brandon Long via mailop napísal(a): I've raised a bug to take a look, this looks like a too broad dkim replay rule. I am not sure if that is the same, but in last two days

Re: [mailop] Google not sending DMARC reports since 9/25

2023-10-03 Thread Andrew C Aitchison via mailop
On Tue, 3 Oct 2023, Faisal Misle via mailop wrote: We noticed (and looks like so did our counterparts at Dmarcian) that Google has not been sending DMARC reports since last week. I haven't had a dmarc report from google since 25 Sept either, but they did sent a tls report for 30 Sept. --

Re: [mailop] Zero-day RCE for exim - whacky stats?

2023-09-30 Thread Andrew C Aitchison via mailop
On Sat, 30 Sep 2023, Carsten Schiefner via mailop wrote: Hi Simon, On 30.09.2023 10:18, Simon Arlott via mailop wrote: On 30/09/2023 08:50, Andrew C Aitchison via mailop wrote: I see that there is an Exim release candidate out on test at the moment https://lists.exim.org/lurker/message

Re: [mailop] Zero-day RCE for exim - whacky stats?

2023-09-30 Thread Andrew C Aitchison via mailop
On Sat, 30 Sep 2023, Jay R. Ashworth via mailop wrote: I haven't even heard exim *mentioned* in like 20 years; these stats can't be right, can they? https://www.bleepingcomputer.com/news/security/millions-of-exim-mail-servers-exposed-to-zero-day-rce-attacks/

Re: [mailop] Zero-day RCE for exim - whacky stats?

2023-09-30 Thread Andrew C Aitchison via mailop
On Sat, 30 Sep 2023, Andrew C Aitchison wrote: On Sat, 30 Sep 2023, Jay R. Ashworth via mailop wrote: I haven't even heard exim *mentioned* in like 20 years; these stats can't be right, can they?

Re: [mailop] Microsoft announces DANE for Exchange Online Inbound starting next year

2023-09-29 Thread Andrew C Aitchison via mailop
On Fri, 29 Sep 2023, Philip Paeps via mailop wrote: On 2023-09-28 03:13:27 (+0800), Mike Hillyer via mailop wrote: Breaking news, Microsoft is pulling the trigger on DANE next year: Implementing Inbound SMTP DANE with DNSSEC for Exchange Online Mail Flow This is good news. Hopefully this

Re: [mailop] Sendlane Inc [ESP] New IP range warming notice

2023-09-15 Thread Andrew C Aitchison via mailop
On Fri, 15 Sep 2023, Damon Sauer via mailop wrote: Good Morning! Just an FYI to the mailop community, We are warming up: (in progress) 38.152.90.0/24 starting with 38.152.90.0/26 38.154.122.128/28 38.154.109.32/27 # whois 38.152.90.1 output includes: NetRange: 38.152.0.0 -

Re: [mailop] OT: OpenTable

2023-08-30 Thread Andrew C Aitchison via mailop
On Wed, 30 Aug 2023, Ángel via mailop wrote: On 2023-08-24 at 14:29 -0400, postfix--- via mailop wrote: (...) Needless to say: I will avoid restaurants using OpenTable, whether while visiting destinations or at home. If they cannot choose a service provider that is respectful of my choices,

Re: [mailop] Antivirus/anti-phish email scanning

2023-07-31 Thread Andrew C Aitchison via mailop
On Mon, 31 Jul 2023, Mike Hillyer via mailop wrote: From: mailop On Behalf Of Taavi Eomäe via mailop Does anyone here have any familiarity with antivirus/anti-phish vendors that can or are meant to be used with email? I've checked the rspamd external services page

Re: [mailop] Guide for setting up a mail server ?

2023-07-13 Thread Andrew C Aitchison via mailop
On Wed, 12 Jul 2023, Michael Peddemors via mailop wrote: And yes, email forwarding will break.. but email forwarding remotely should be killed off anyways.. everyone can log into two accounts. Universities would like to allow the world to contact staff who have recently left. We forward

Re: [mailop] Please don't Cc: me, use only the list for replies

2023-07-12 Thread Andrew C Aitchison via mailop
On Wed, 12 Jul 2023, ml+mailop--- via mailop wrote: On Wed, Jul 12, 2023, Andrew C Aitchison via mailop wrote: Please could you indicate who you are and, Why? Sorry, I meant to ask for a name or an alias. Why ? Because I don't believe that "the paranoid curmudgeon from esmtp.org&quo

Re: [mailop] Please don't Cc: me, use only the list for replies

2023-07-12 Thread Andrew C Aitchison via mailop
Please don't Cc: me, use only the list for replies, even if the mailing list software screws up the Reply-To header. ___ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop Please could you indicate who you are and, if

Re: [mailop] SendGrid is deleting your mail

2023-06-23 Thread Andrew C Aitchison via mailop
On Fri, 23 Jun 2023, Carsten Schiefner via mailop wrote: Hi, Luke (& all) - how about elaborating a bit further on the whats and whys of your setup? Because at first sight it is indeed a bit hard to understand why SendGrid may not be in a position to follow the RFCs and the thereof derived

Re: [mailop] DMARC and subdomains

2023-06-18 Thread Andrew C Aitchison via mailop
On Sun, 18 Jun 2023, Alessandro Vesely via mailop wrote: On Fri 16/Jun/2023 22:41:39 +0200 Gellner, Oliver via mailop wrote: On 16.06.2023 at 16:13 Jaroslaw Rafa via mailop wrote: [...] So at least one (and important one, given the size of this mail service) implementation of DMARC does not

Re: [mailop] DMARC check case sensitive domains

2023-06-13 Thread Andrew C Aitchison via mailop
On Tue, 13 Jun 2023, Sander Smeenk via mailop wrote: Long time lurker here. Ran into an issue where one of my customers is sending mail with the sender- and header-from domain capitalized: foou...@example.tld. This seems to break DMARC checks on certain receivers. The domain has all the bells

Re: [mailop] SPF: Does include: a host without TXT entry invalidate the whole SPF entry?

2023-06-12 Thread Andrew C Aitchison via mailop
On Fri, 9 Jun 2023, Gellner, Oliver via mailop wrote: On 09.06.2023 at 09:36 Alessandro Vesely via mailop wrote: RFC 6652 provides for setting ra= and rr= tags, which are themselves flagged as errors by most SPF checking sites... Does someone use those SPF tags or has any practical

Re: [mailop] SPF: Does include: a host without TXT entry invalidate the whole SPF entry?

2023-06-09 Thread Andrew C Aitchison via mailop
On Fri, 9 Jun 2023, Alessandro Vesely via mailop wrote: On Fri 09/Jun/2023 07:37:06 +0200 Benoît Panizzon via mailop wrote: If you don't care enough to publish a valid SPF record, why should we think you care whether we deliver your mail? The customer in question used an ESP to send

Re: [mailop] Microsoft Office365 not rejecting emails when instructed so by SPF recored?

2023-05-27 Thread Andrew C Aitchison via mailop
On Fri, 26 May 2023, Scott Mutter via mailop wrote: If you ask me - a better solution would be to do away with forwarding completely and incorporate POP checks, like Gmail does. This alleviates all of the issues with forwarding mail in relation to SPF and DKIM. What happens when I send a

Re: [mailop] Official traffic shaping rule sources?

2023-05-08 Thread Andrew C Aitchison via mailop
On Mon, 8 May 2023, Michael Rathbun via mailop wrote: As a deliverability dude as well as an administrator of a small receiving system, I normally urge 1 message per session. I can see that that could be good advice to a sender, but as an administrator of a small receiving system I don't see

Re: [mailop] SPF behavior on email forwarding

2023-04-14 Thread Andrew C Aitchison via mailop
On Fri, 14 Apr 2023, John Levine via mailop wrote: SRS never made it into the IETF standards, by the way, because the problem it was supposed to solve (forwarding delayed bounces) did not actually exist. Since today is Friday ... I was just re-reading

Re: [mailop] SPF behavior on email forwarding

2023-04-14 Thread Andrew C Aitchison via mailop
On Fri, 14 Apr 2023, Cyril - ImprovMX via mailop wrote: Hi! What is the best approach when you receive an email that doesn't respect the SPF (with a hard fail)? I'm asking because we've been running ImprovMX for a few years now and the decision we took was that if you send us an email with a

Re: [mailop] linodeusercontent.com/googleusercontent.com, I'm so done with you

2023-04-04 Thread Andrew C Aitchison via mailop
On Tue, 4 Apr 2023, Hans-Martin Mosner via mailop wrote: Those two cloud providers are currently providing 99% of the incoming spam at one site. googleusercontent.com sends a never-ending flood of DHL phishing mails. linodeusercontent.com sends unsolicited ad crap using a domain

Re: [mailop] mailgun anybody? (variable sender address) time

2023-03-26 Thread Andrew C Aitchison via mailop
On Sat, 25 Mar 2023, Slavko via mailop wrote: Dňa 25. marca 2023 17:11:48 UTC používateľ Andrew C Aitchison via mailop napísal: On Sat, 25 Mar 2023, Grant Taylor via mailop wrote: I never understood different envelope senders for each attempt of a given message. -- I can see different

Re: [mailop] mailgun anybody? (variable sender address) time

2023-03-25 Thread Andrew C Aitchison via mailop
On Sat, 25 Mar 2023, Grant Taylor via mailop wrote: I never understood different envelope senders for each attempt of a given message. -- I can see different envelope senders per message, a la. VERP. But I would naively expect each message to have a fixed envelope sender and recipient from

[mailop] SMTP equivalent of HTTP 30x redirect ? - was Re: O365 throttling email forwards

2023-02-28 Thread Andrew C Aitchison via mailop
On Tue, 28 Feb 2023, Michael Peddemors via mailop wrote: On 2023-02-28 08:00, Mark E. Jeftovic via mailop wrote: Hey all, Looks like customers trying to forward email from their own domains here, to their O365 mailboxes are getting throttled with: Stop 'remote forwarding'... simple..

Re: [mailop] Gmail blocking of good customer

2023-02-24 Thread Andrew C Aitchison via mailop
On Fri, 24 Feb 2023, Alessandro Vesely via mailop wrote: On Fri 24/Feb/2023 18:41:34 +0100 Christine Borgia via mailop wrote: I also should have mentioned we use shared IPs so there is no issue with volume from our servers, however volume from the domain is definitely spikey. They only send

Re: [mailop] Compromised email account trends

2023-02-22 Thread Andrew C Aitchison via mailop
On 2/22/23 12:32, Jaroslaw Rafa via mailop wrote: I have also one more idea. Remember the old "POP-before-SMTP" approach from the times there was no SMTP AUTH yet? I have observed that the password-cracking bots are heavily attacking submission services, while relatively very rarely trying to

[mailop] Outgoing filtering Re: Cyren

2023-02-03 Thread Andrew C Aitchison via mailop
On Fri, 3 Feb 2023, Ken Simpson via mailop wrote: To help Cyren customers, MailChannels is offering free access to the MailChannels content filter API, which accurately filters billions of messages for tens of millions of users and millions of domains within our transactional email service. 43%

Re: [mailop] [External] Re: verizon email-to-text gateway mail deferred evening and night

2023-01-08 Thread Andrew C Aitchison via mailop
On Sun, 8 Jan 2023, Andrew C Aitchison via mailop wrote: On Sun, 7 Jan 2023, John Levine via mailop wrote: But more to the point, why do you care? The number of phones these days that can get SMS but not email rounds to zero, so if someone wants to send you mail, they can send you mail

Re: [mailop] [External] Re: verizon email-to-text gateway mail deferred evening and night

2023-01-08 Thread Andrew C Aitchison via mailop
On Sun, 7 Jan 2023, John Levine via mailop wrote: But more to the point, why do you care? The number of phones these days that can get SMS but not email rounds to zero, so if someone wants to send you mail, they can send you mail and don't need to fool around with a flaky gateway. At least

Re: [mailop] verizon email-to-text gateway mail deferred evening and night

2023-01-07 Thread Andrew C Aitchison via mailop
On Sat, 6 Jan 2023, John Levine via mailop wrote: If it's not worth 1c to get your messages out, perhaps this would be a good time to reconsider why exactly you're sending them in the first place. If only we could say that to spammers. -- Andrew C. Aitchison Kendal, UK

Re: [mailop] IBM: [to unsubscribe] please enter your first, last name, email and country

2022-12-07 Thread Andrew C Aitchison via mailop
On Wed, 7 Dec 2022, Jaroslaw Rafa via mailop wrote: Obviously it is done this way only to discourage people from unsubscribing. They know the address they sent mail to, so they could easily generate a personalized unsubscribe link that is connected with this particular address and allows to

Re: [mailop] SPF (and other email security protocols) Survey

2022-11-24 Thread Andrew C Aitchison via mailop
On Wed, 23 Nov 2022, Tobias Fiebig via mailop wrote: We can have an awful lot of discussions about this, and there is a lot going on; Besides the obvious 'is it good or not' and 'is this really science?', we essentially deal with 'science' with all its incentives (publish or perish); This means

Re: [mailop] Google Translate provide spammer and phishing reputation

2022-11-10 Thread Andrew C Aitchison via mailop
On Thu, 10 Nov 2022, MRob via mailop wrote: Recent I saw a link in a spam which wanted to phish credential: https://translate.google.com/translate?sl=auto=en=en=ipfs.io/ipfs//index.html?submit=@=webapp Google translate shows a live page the user can input data into so effectively google is

[mailop] SPFBL - was Re: Recommendations for host with good IP reputation or use external SMTP?

2022-10-31 Thread Andrew C Aitchison via mailop
On Mon, 31 Oct 2022, Grant Taylor via mailop wrote: Aside: Check out SPFBL's allow list service. I spent the one-time $3 per IP to list my two VPSs. I consider the price low enough that it's reasonable for me as an individual to be able to do. Read: It's within my reach. I don't like

Re: [mailop] blocking t-online.de in OpenSMTPD

2022-10-23 Thread Andrew C Aitchison via mailop
On Sun, 23 Oct 2022, Lyndon Nerenberg (VE7TFX/VE6BBM) via mailop wrote: If you're running OpenSMTPD (such as an OpenBSD system), here's how to return the favour to t-online. In smtpd.conf, before any of your 'listen' statements, add: filter dtag phase mail-from match rdns regex

Re: [mailop] T-Online is now really blocking messages from non-commercial and simliar senders

2022-10-20 Thread Andrew C Aitchison via mailop
On Wed, 19 Oct 2022, Jaroslaw Rafa via mailop wrote: Dnia 19.10.2022 o godz. 18:55:29 Kai 'wusel' Siering via mailop pisze: It would be less of an issue if t-online.de would take care _not_ to send to domains they don't take the replies from; but they happily sent emails to any MX in the

Re: [mailop] Gmail as well as Google Worskapce refuse all email from my domain

2022-10-02 Thread Andrew C Aitchison via mailop
On Sun, 2 Oct 2022, Arek Patyk via mailop wrote: Hi, I have my company domain hycom dot pl hosted on microsoft o365 exchange online for 7 years. Last week google servers stopped accepting our mails. During last few days I got: 550 5.7.350 Remote server returned message detected as spam -> 550

Re: [mailop] gmail: Benefit of a generic SPF-record?

2022-09-30 Thread Andrew C Aitchison via mailop
On Fri, 30 Sep 2022, Jaroslaw Rafa via mailop wrote: Dnia 29.09.2022 o godz. 15:39:49 Brandon Long via mailop pisze: But exactly because TLS is a TLD, which means both bad and good actors can register under it, you should not treat a whole TLD (any TLD) as a spam source. You should conside

Re: [mailop] two openssl (in OpenDKIM) questions for the masses

2022-09-20 Thread Andrew C Aitchison via mailop
On Thu, 15 Sep 2022, Dan Mahoney (Gushi) via mailop wrote: All, I'm attempting to get a point release of OpenDKIM out that should include ecc key support (it's been in our develop branch for a while). In doing the cleanup, I also have had to modernize it to play nice with modern versions

[mailop] Exchange (and GSuite?) versus open source - was Re: The oligopoly has won.

2022-09-14 Thread Andrew C Aitchison via mailop
On Wed, 14 Sep 2022, Matthias Leisi via mailop wrote: The open source eco-system has failed to produce useful alternatives to Outlook/Exchange(Online) or GSuite. Never having had to use either in anger, or had the perspective of an SMB, what is missing from the open source offerings ? As far

Re: [mailop] The oligopoly has won.

2022-09-13 Thread Andrew C Aitchison via mailop
On Mon, 12 Sep 2022, Brandon Long via mailop wrote: On Mon, Sep 12, 2022 at 3:11 PM Jay Hennigan via mailop wrote: Why has Google recently made so painfully difficult for the rest of the Internet to make them aware of Gmail-originated spam? Why do you think this is recent? AFAIK Google

Re: [mailop] SMTP noise from *.bouncer.cloud

2022-09-05 Thread Andrew C Aitchison via mailop
On Mon, 5 Sep 2022, Atro Tossavainen via mailop wrote: Regarding the above, I have the following question: What do you (and maybe other people on the list) think about such email verification method ("abusing RCPT TO") used as part of: a) mail receiving process - I'm thinking here for example

Re: [mailop] SMTP noise from *.bouncer.cloud

2022-09-04 Thread Andrew C Aitchison via mailop
On Sun, 4 Sep 2022, Radek Kaczynski via mailop wrote: Thanks to members of this group I learned that we still have a homework to be done if it comes to transparency, and making it easier to folks like you to easily identify us. I hate the fact that this topic has stolen so much time and

Re: [mailop] Microsoft Office365 blocking non Oauth2 authentication on IMAP and SMTP.

2022-08-19 Thread Andrew C Aitchison via mailop
On Fri, 19 Aug 2022, Christopher Hawker via mailop wrote: Hello Benoit, What mail client is being used, that doesn't support Oauth2? Benoit seems to be talking about "tools" more than "programs" or "apps", so I am not sure that his problem is just mail clients, but likely also includes

Re: [mailop] Disabling TLS 1.0 and 1.1 for MTA to MTA communication

2022-08-04 Thread Andrew C Aitchison via mailop
On Wed, 3 Aug 2022, Hans-Martin Mosner via mailop wrote: Disabling support for less secure transport encryption protocols doesn't increase security if the senders can then switch to unencrypted transport as a fallback. We seem to be assuming that this is about protecting the current message.

Re: [mailop] Disabling TLS 1.0 and 1.1 for MTA to MTA communication

2022-08-03 Thread Andrew C Aitchison via mailop
On Wed, 3 Aug 2022, Grant Taylor via mailop wrote: On 8/3/22 6:26 AM, Taavi Eomäe via mailop wrote: Lastly, RFC8314 (re)defines port 465 as implicit TLS SMTP submission port. Implicit TLS is considered a significantly better approach than upgrading connections. Do you support that? There

Re: [mailop] Disabling TLS 1.0 and 1.1 for MTA to MTA communication

2022-08-03 Thread Andrew C Aitchison via mailop
On Wed, 3 Aug 2022, Sidsel Jensen via mailop wrote: Hi MailOps We were having a discussion on the possibility to disable TLS 1.0 and 1.1 for MTA to MTA communication, and based on the numbers we've seen so far, it doesn't look that far fetched. What's the common consensus in the mail

Re: [mailop] HR 8160 and SB 4409: The "You're not allowed to run political campaign email through your spam filter" act

2022-07-30 Thread Andrew C Aitchison via mailop
On Fri, 29 Jul 2022, Justin Scott via mailop wrote: Interestingly any email "operator" with fewer than 500 employees or less than $5 billion in annual revenue is exempt, so clearly targeted at the major providers and not self-hosted operators or small hosting companies, thankfully. Yes, but

Re: [mailop] Weirdly formatted messages from AOL Webmail or Yahoo

2022-07-26 Thread Andrew C Aitchison via mailop
On Mon, 25 Jul 2022, WIlliam Fisher via mailop wrote: I'm tracking an issue where it looks like either AOL or Yahoo is inserting an extra line break in the middle of the headers and throwing off some client parsing. Has anyone else seen similar? How long was the line which got split ?

Re: [mailop] So, Sendgrid / Zoom, planning on actually doing anything about webinar spams?

2022-07-21 Thread Andrew C Aitchison via mailop
On Sun, 9 Jan 2022, Atro Tossavainen via mailop wrote: The basic problem is allowing an ESP customer to import a list that existed before the customer became a customer of this ESP. I can't think of an ESP that would not allow that. I saw this again as someone replied to it. Sadly, there is

Re: [mailop] Google's Request to the FEC about Allowing Political Email to Bypass Spam Filtering

2022-07-10 Thread Andrew C Aitchison via mailop
On Sun, 10 Jul 2022, Anne Mitchell via mailop wrote: On Jul 9, 2022, at 8:15 PM, Brett Schenker via mailop wrote: Just put it all in quarantine. It only requires reporting on how much is going to spam. Reporting 0 would technically be correct since quarantine is different. Or a 'Political'

Re: [mailop] opendkim replacement

2022-07-04 Thread Andrew C Aitchison via mailop
On Mon, 4 Jul 2022, Edwardo Garcia via mailop wrote: Halo, What are we using this days in replace opendkim which is long broken abandonware? For anyone using Exim, there is builtin support (in and out) which does not use opendkim. -- Andrew C. Aitchison Kendal, UK

Re: [mailop] Interesting question from a team member, MX chaining, list-manage.com

2022-07-01 Thread Andrew C Aitchison via mailop
On Fri, 1 Jul 2022, Jaroslaw Rafa via mailop wrote: Dnia 1.07.2022 o godz. 10:00:00 Paul Smith via mailop pisze: If you don't want to accept mail for a domain, usually, you'd accomplish that by simply not having an MX record. Not having a MX record AND not having an A record as well.

[mailop] NULL MX - was Re: Interesting question from a team member, MX chaining, list-manage.com

2022-07-01 Thread Andrew C Aitchison via mailop
On Fri, 1 Jul 2022, Paul Smith via mailop wrote: If you don't want to accept mail for a domain, usually, you'd accomplish that by simply not having an MX record. Having an MX record which points nowhere is odd, but not illegal - it just means that mail is undeliverable. RFC7505 (still at

Re: [mailop] gmail changes today?

2022-06-11 Thread Andrew C Aitchison via mailop
On Thu, 9 Jun 2022, Brandon Long via mailop wrote: On Thu, Jun 9, 2022 at 8:55 AM Michael Peddemors via mailop < mailop@mailop.org> wrote: Yeah, when legit operators have to obfuscate their URL's, you know something isn't working right.. We saw something similar, we send monthly payment

Re: [mailop] How to contact ClamAVNet support

2022-06-03 Thread Andrew C Aitchison via mailop
On Fri, 3 Jun 2022, Carlota Iglesias Martinez via mailop wrote: Hi all, Hope you are well. Does anyone here works or know how to contact ClamAVNet? I have opened several tickets through their website but I am not getting any response. You could try clamav-us...@lists.clamav.net

Re: [mailop] Talking DOXING of spammers on this mailing list..

2022-06-02 Thread Andrew C Aitchison via mailop
On Wed, 1 Jun 2022, Anne Mitchell via mailop wrote: I *really* want to see the original email to which MDR is replying, https://list.mailop.org/private/mailop/2022-June/08.html Only available to members of the list, which includes you, but suggests that you may need to remember your

Re: [mailop] How "more secure" is actually less secure (regarding Gmail)

2022-05-30 Thread Andrew C Aitchison via mailop
On Mon, 30 May 2022, Jarland Donnell via mailop wrote: For what it’s worth you are now the only person I can personally point to and say “This person types their password every time their email client refreshes instead of storing it in the app.” That’s a painful process, especially for

Re: [mailop] forwarding to gmail - problem

2022-05-08 Thread Andrew C Aitchison via mailop
On Sun, 8 May 2022, Hans-Martin Mosner via mailop wrote: Am 08.05.22 um 15:27 schrieb Scott Mutter via mailop: If you forward your mail to Google then Google is going to get your email. If you give Google your POP password to retrieve mail, then Google is going to get your email. What more

Re: [mailop] forwarding to gmail - problem

2022-05-06 Thread Andrew C Aitchison via mailop
On Fri, May 6, 2022 at 8:52 PM John Levine via mailop wrote: Until then, I tell people who ask me to forward mail to Gmail that if they actually want to get the mail, I'll put it in a local mailbox and they can tell Gmail to poll it with POP. That works quite well. Yes, if you are happy to

Re: [mailop] forwarding to gmail - problem

2022-05-06 Thread Andrew C Aitchison via mailop
On Fri, 6 May 2022, Grant Taylor via mailop wrote: On 5/6/22 9:14 AM, Luis E. Muñoz via mailop wrote: I think the response to those issues are in part the cause for the loop you cleverly explained before. Indeed. These are the very issues that caused me to be disinclined to stand my ARC

Re: [mailop] forwarding to gmail - problem

2022-04-29 Thread Andrew C Aitchison via mailop
On Fri, 29 Apr 2022, Jaroslaw Rafa via mailop wrote: Dnia 29.04.2022 o godz. 12:08:13 Andrew C Aitchison via mailop pisze: You wouldn't want to give anybody - be it Google or anybody else - login credentials to your email account, would you? In many organisations it is worse than

Re: [mailop] forwarding to gmail - problem

2022-04-29 Thread Andrew C Aitchison via mailop
On Fri, 29 Apr 2022, Jaroslaw Rafa via mailop wrote: Dnia 28.04.2022 o godz. 14:14:02 Dan Mahoney via mailop pisze: I've told any of my users to not forward to gmail instead, but rather to just use their pop-fetcher. You wouldn't want to give anybody - be it Google or anybody else - login

Re: [mailop] is caniuseapurchasedemaillist.com down?

2022-04-27 Thread Andrew C Aitchison via mailop
On Wed, 27 Apr 2022, Simon Luger via mailop wrote: Hi i need this page from time to time. caniuseapurchasedemaillist.com # ping caniuseapurchasedemaillist.com PING caniuseapurchasedemaillist.com (104.131.184.82) 56(84) bytes of data. ^C --- caniuseapurchasedemaillist.com ping statistics ---

Re: [mailop] [E] $GOOG

2022-04-17 Thread Andrew C Aitchison via mailop
On Sun, 17 Apr 2022, Bill Cole via mailop wrote: On 2022-04-16 at 23:12:19 UTC-0400 (Sun, 17 Apr 2022 05:12:19 +0200) Paul Vixie via mailop is rumored to have said: > Bill Cole via mailop wrote on 2022-04-15 17:47: > > Don't try to send mail to shabby mail operators with a domain that > >

Re: [mailop] Best mailbox provider for personal domain?

2022-04-10 Thread Andrew C Aitchison via mailop
On Sun, 10 Apr 2022, Byron Lunz via mailop wrote: I don't recall seeing any discussion in this thread about how to migrate old email messages from a Google Workspace account to a different host. Anyone have advice or suggestions on how to do that? I haven't needed to do it myself but I

Re: [mailop] Best mailbox provider for personal domain?

2022-04-08 Thread Andrew C Aitchison via mailop
On Fri, 8 Apr 2022, Tara Natanson via mailop wrote: A while back there was a thread about the best place to host small biz domain email but I'm looking for something even smaller. I've got my personal domain hosted on gmail. It's been there for more than 10 years and was grandfathered into

  1   2   >