Re: [mailop] zen.spamhaus.org

2024-02-07 Thread Bjoern Franke via mailop
Hi, Hmm. How do I check that? Running nslookup defaults to my local resolver instance. you can run host whoami.akamai.net which responds with IP of the used resolver. Regards Bjoern ___ mailop mailing list mailop@mailop.org

Re: [mailop] zen.spamhaus.org

2024-02-07 Thread Atro Tossavainen via mailop
> Hmm. How do I check that? > Running nslookup defaults to my local resolver instance. If it happens silently at the ISP's end, you can't check it - except indirectly. What are the return codes that you get from your Spamhaus Zen queries? -- Atro Tossavainen, Chairman of the Board Infinite Mho

Re: [mailop] zen.spamhaus.org

2024-02-07 Thread Slavko via mailop
Dňa 7. 2. o 7:29 Odhiambo Washington via mailop napísal(a): I have my local instance of unbound resolver. It can be not enough. Some time ago i noticed, taht my ISP intercepts (and redirects) all my DNS requests. Check carefully... regards -- Slavko

Re: [mailop] zen.spamhaus.org

2024-02-07 Thread Odhiambo Washington via mailop
On Wed, Feb 7, 2024 at 12:40 PM Bjoern Franke via mailop wrote: > Hi, > > > > > Hmm. How do I check that? > > Running nslookup defaults to my local resolver instance. > > you can run > > host whoami.akamai.net > > which responds with IP of the used resolver. > Perfecto! It returns the IP of my

Re: [mailop] zen.spamhaus.org

2024-02-07 Thread Odhiambo Washington via mailop
On Wed, Feb 7, 2024 at 11:32 AM Slavko via mailop wrote: > Dňa 7. 2. o 7:29 Odhiambo Washington via mailop napísal(a): > > > I have my local instance of unbound resolver. > > It can be not enough. Some time ago i noticed, taht my ISP intercepts > (and redirects) all my DNS requests. Check

Re: [mailop] Spamhaus SBL listing fonts.googleapis.com

2024-02-07 Thread Lichtinger, Bernhard via mailop
> > The IP addresses for "fonts.googleapis.com" are: > 142.250.217.106 > 2607:f8b0:400a:800::200a The IPs of "fonts.googleapis.com" got listed on SBL because these IPs are also used to serve "firebasestorage.googleapis.com". Last time i checked the IPs with https://check.spamhaus.org/ it told

Re: [mailop] zen.spamhaus.org

2024-02-07 Thread Matus UHLAR - fantomas via mailop
Dňa 7. 2. o 7:29 Odhiambo Washington via mailop napísal(a): > I have my local instance of unbound resolver. On Wed, Feb 7, 2024 at 11:32 AM Slavko via mailop wrote: It can be not enough. Some time ago i noticed, taht my ISP intercepts (and redirects) all my DNS requests. Check carefully...

Re: [mailop] problem setting up open-dmarc

2024-02-07 Thread Jaroslaw Rafa via mailop
Dnia 6.02.2024 o godz. 15:13:47 Michael Peddemors via mailop pisze: > Some days.. it's like F* DMARC.. hehehe.. > > Anything that created a multi-million dollar industry of consultants > on how to set up DMARC, well.. email should NOT be that difficult.. > > I still remember when email

Re: [mailop] problem setting up open-dmarc

2024-02-07 Thread Andreas S. Kerber via mailop
Am Wed, Feb 07, 2024 at 02:20:25PM +0100 schrieb Jaroslaw Rafa via mailop: > For outgoing, Google requires that you have DMARC record set up. So if you > are sending anything to Google, you need that. This only applies if your sending more than 5000 messages per day. Most smaller senders are

Re: [mailop] problem setting up open-dmarc

2024-02-07 Thread John Covici via mailop
Thanks a lot, I am using sendmail as my mta. On Wed, 07 Feb 2024 00:39:41 -0500, Randolf Richardson, Postmaster via mailop wrote: > > Which mail server software and OS are you using? Are you receiving > some error messages (e.g., in syslog)? > > I'm using Postfix on Debian, and

Re: [mailop] Support contact for Shaw.ca

2024-02-07 Thread Jaroslaw Rafa via mailop
Dnia 6.02.2024 o godz. 15:26:33 Aric Archebelle-Smith via mailop pisze: > Beginning in late January, we received user reports that mail was not > being delivered to Shaw.ca addresses. Users did not receive a > non-delivery notification, but our logs show the following rejection: > `status=sent

Re: [mailop] problem setting up open-dmarc

2024-02-07 Thread John Covici via mailop
OK, thanks. I did this all because of problems sending to some places managed by Google. On Tue, 06 Feb 2024 18:12:14 -0500, Alan Hodgson via mailop wrote: > > [1 ] > [1.1 ] > On Tue, 2024-02-06 at 17:46 -0500, John Covici via mailop wrote: > > Hi.  I am trying to make sure my mail server is

Re: [mailop] problem setting up open-dmarc

2024-02-07 Thread Taavi Eomäe via mailop
Anything that created a multi-million dollar industry of consultants on how to set up DMARC, well.. email should NOT be that difficult.. If you use even a relatively modern email stack then it's quite trivial through rspamd for example. Some have it (and more) even built-in, like Stalwart or

Re: [mailop] zen.spamhaus.org

2024-02-07 Thread Slavko via mailop
Dňa 7. februára 2024 9:27:50 UTC používateľ Bjoern Franke via mailop napísal: >host whoami.akamai.net There are multiple services doing that, some even IPv6 capable, but if you know any IP which doesn't run DNS server (or blocks it), you can do connect/syn scan to its port 53/tcp too, if

Re: [mailop] problem setting up open-dmarc

2024-02-07 Thread Thomas Walter via mailop
On 07.02.24 14:20, Jaroslaw Rafa via mailop wrote: For outgoing, Google requires that you have DMARC record set up. So if you are sending anything to Google, you need that. "If you send 5,000 messages a day or more..." Regards, Thomas Walter -- Thomas Walter Datenverarbeitungszentrale FH

Re: [mailop] problem setting up open-dmarc

2024-02-07 Thread Jaroslaw Rafa via mailop
Dnia 7.02.2024 o godz. 14:41:02 Andreas S. Kerber via mailop pisze: > > This only applies if your sending more than 5000 messages per day. That is a "MUST" in RFC sense ;), because otherwise they reject mails from you. But if you read their sender guidelines, they say since long ago (long

Re: [mailop] Spamhaus SBL listing fonts.googleapis.com

2024-02-07 Thread Andreas Schamanek via mailop
On Wed, 7 Feb 2024, at 08:32, Lichtinger, Bernhard via mailop wrote: The IP addresses for "fonts.googleapis.com" are: 142.250.217.106 2607:f8b0:400a:800::200a The IPs of "fonts.googleapis.com" got listed on SBL because these IPs are also used to serve "firebasestorage.googleapis.com". Last

Re: [mailop] zen.spamhaus.org

2024-02-07 Thread Mark Milhollan via mailop
On Tue, 6 Feb 2024, Odhiambo Washington wrote: On Wed, Feb 7, 2024 at 12:53 AM Mark Milhollan wrote: On Tue, 6 Feb 2024, Odhiambo Washington wrote: Today morning I woke up to all emails being rejected as I was using zen.spamhaus.org in my dnslists. Are you using your own resolver (like

Re: [mailop] zen.spamhaus.org

2024-02-07 Thread Odhiambo Washington via mailop
On Wed, Feb 7, 2024 at 6:05 PM Mark Milhollan wrote: > On Tue, 6 Feb 2024, Odhiambo Washington wrote: > >On Wed, Feb 7, 2024 at 12:53 AM Mark Milhollan < > lists-mai...@milhollan.com> wrote: > >>On Tue, 6 Feb 2024, Odhiambo Washington wrote: > > >>>Today morning I woke up to all emails being

Re: [mailop] problem setting up open-dmarc

2024-02-07 Thread Bill Cole via mailop
On 2024-02-07 at 05:40:50 UTC-0500 (Wed, 7 Feb 2024 12:40:50 +0200) Taavi Eomäe via mailop is rumored to have said: [Snip. Quoting Michael P.] >> Unless you are a big budget email sender, don't stress to much.  Maybe >> tomorrow we will need something like DMARC, but thankfully not yet today. >

Re: [mailop] problem setting up open-dmarc

2024-02-07 Thread Royce Williams via mailop
On Wed, Feb 7, 2024, 4:55 AM Andreas S. Kerber via mailop wrote: > Am Wed, Feb 07, 2024 at 02:20:25PM +0100 schrieb Jaroslaw Rafa via mailop: > > For outgoing, Google requires that you have DMARC record set up. So if > you > > are sending anything to Google, you need that. > > This only applies

Re: [mailop] zen.spamhaus.org

2024-02-07 Thread Al Iverson via mailop
Doesn't matter how small your server is, or isn't. Spamhaus blocks public queries, but does it a bit imperfectly, so it's the kind of thing where you can get away with it for a while, then something changes, and they find a new way to lock it down a bit better. Look at the response code. Sign up

Re: [mailop] [E] Re: problem setting up open-dmarc

2024-02-07 Thread Marcel Becker via mailop
On Wed, Feb 7, 2024 at 7:46 AM Royce Williams via mailop wrote: > This only applies if your sending more than 5000 messages per day. >> Most smaller senders are still fine using only "SPF *or* DKIM" and do not >> *need* a DMARC record: >> >> https://support.google.com/a/answer/81126 >>

Re: [mailop] Support contact for Shaw.ca

2024-02-07 Thread Scott Undercofler via mailop
I never was good at goodbye. > On Feb 7, 2024, at 6:10 AM, Jaroslaw Rafa via mailop > wrote: > > Dnia 6.02.2024 o godz. 15:26:33 Aric Archebelle-Smith via mailop pisze: >> Beginning in late January, we received user reports that mail was not >> being delivered to Shaw.ca addresses. Users

Re: [mailop] problem setting up open-dmarc

2024-02-07 Thread Andreas S. Kerber via mailop
Am Wed, Feb 07, 2024 at 06:41:48AM -0900 schrieb Royce Williams via mailop: > There are multiple reports on Reddit and other places of people getting the > explicit "authentication required" SMTP response at much lower volumes. > I've also experienced it directly myself, on domains that I directly

Re: [mailop] problem setting up open-dmarc

2024-02-07 Thread John Levine via mailop
According to Bill Cole via mailop : >-=-=-=-=-=- >-=-=-=-=-=- > >On 2024-02-07 at 05:40:50 UTC-0500 (Wed, 7 Feb 2024 12:40:50 +0200) >Taavi Eomäe via mailop >is rumored to have said: > >[Snip. Quoting Michael P.] >>> Unless you are a big budget email sender, don't stress to much.  Maybe >>>

Re: [mailop] problem setting up open-dmarc

2024-02-07 Thread John Levine via mailop
It appears that Royce Williams via mailop said: >Unfortunately, this is not correct, despite the official documentation. >There are multiple reports on Reddit and other places of people getting the >explicit "authentication required" SMTP response at much lower volumes. You definitely will if

Re: [mailop] problem setting up open-dmarc

2024-02-07 Thread Randolf Richardson, Postmaster via mailop
What's in the configuration file now? If you could share what the settings are (with comments stripped out and any sensitive information removed -- you'll need to manually inspect for any passwords, etc., that you don't want to reveal and redact them). Do you have the milter

Re: [mailop] problem setting up open-dmarc

2024-02-07 Thread Randolf Richardson, Postmaster via mailop
> On Wed, Feb 7, 2024, 4:55AM Andreas S. Kerber via mailop > wrote: > > > Am Wed, Feb 07, 2024 at 02:20:25PM +0100 schrieb Jaroslaw Rafa via mailop: > > > For outgoing, Google requires that you have DMARC record set up. So if > > you > > > are sending anything to Google, you need that. > > > >

[mailop] Is forwarding to Gmail basically dead?

2024-02-07 Thread Jarland Donnell via mailop
Aside from the question in the subject, because I see this brought up a lot on the mailing list in relation to email forwarding, would passing ARC signatures even matter when the problem is that Google is increasingly rejecting forwarded emails due to the DMARC policy of the original sender

Re: [mailop] zen.spamhaus.org

2024-02-07 Thread Atro Tossavainen via mailop
> ... but that does mean trusting 8.8.8.8 with your private secret. From Spamhaus documentation: "access to public mirrors requires the use of a non-public, non-shared DNS resolver (therefore excluding services like Google Public DNS), while DQS can use any DNS channel"

Re: [mailop] zen.spamhaus.org

2024-02-07 Thread Atro Tossavainen via mailop
> Otherwise you need to stop using Spamhaus -- even if you sign-up, > perhaps because of the query volume, you still must query them > directly not via a public resolver. This is not true. One of the main points of DQS is that the DNS service you use no longer matters. They don't need to block

Re: [mailop] zen.spamhaus.org

2024-02-07 Thread Andrew C Aitchison via mailop
On Wed, 7 Feb 2024, Atro Tossavainen via mailop wrote: Otherwise you need to stop using Spamhaus -- even if you sign-up, perhaps because of the query volume, you still must query them directly not via a public resolver. This is not true. One of the main points of DQS is that the DNS service

Re: [mailop] Is forwarding to Gmail basically dead?

2024-02-07 Thread 황병희
Hellow Jarland, 2-07 at 20:51 -0600, Jarland Donnell via mailop wrote: > (...) > Is it time to throw in the towel on email forwarding? Nearly 100% of > users who forward email do so because they want it in Gmail. (...) How about this?

Re: [mailop] Is forwarding to Gmail basically dead?

2024-02-07 Thread Marco Moock via mailop
Am Wed, 07 Feb 2024 20:51:15 -0600 schrieb Jarland Donnell via mailop : > Is it time to throw in the towel on email forwarding? I think so. Every mechanism has its own disadvantages. > Nearly 100% of users who forward email do so because they want it in > Gmail. Which type of users? Due to

Re: [mailop] zen.spamhaus.org

2024-02-07 Thread Slavko via mailop
Dňa 7. februára 2024 22:09:18 UTC používateľ Atro Tossavainen via mailop napísal: >Now if that was a problem and this private secret got out because of >a query that was just done through Google a few minutes ago, we'd >find out in no time at all because Spamhaus would shut this private >secret

Re: [mailop] [E] Re: problem setting up open-dmarc

2024-02-07 Thread Royce Williams via mailop
On Wed, Feb 7, 2024 at 7:14 AM Marcel Becker via mailop wrote: > On Wed, Feb 7, 2024 at 7:46 AM Royce Williams via mailop < > mailop@mailop.org> wrote: > >> This only applies if your sending more than 5000 messages per day. >>> Most smaller senders are still fine using only "SPF *or* DKIM" and