We use mailman for some (most? all?) of the Debian lists, it has ways of solving these problems.
https://mail.python.org/pipermail/mailman-users/2011-October/072304.html First use "REMOVE_DKIM_HEADERS = Yes" in mm_cfg.py to remove the DKIM headers, this deals with systems that have signatures but no ADSP or DMARC. Then use the from_is_list setting to have a From: field that has the email address of the list server, this deals with ADSP and DMARC systems. For some lists that deal with automated mail (EG bug reports) this could require changes to scripts that automatically process mail. But the setting is applied on a per-list basis. Also it would be good if we could do DKIM checks on inbound mail (so that forged mail for ADSP/DMARC domains can't be sent through Debian servers) and then apply a DKIM signature to outbound mail. -- My Main Blog http://etbe.coker.com.au/ My Documents Blog http://doc.coker.com.au/
