On Mar 29, 2013, at 1:14 PM, J. Gomez wrote:

> I think this means that DMARC when using a "reject" policy breaks mailing 
> lists. And that is ugly.

Yes, DMARC p=reject will not allow you to send mail to mailing lists reliably. 
p=reject is a suitable setting for transactional mail for your brand, which is 
not a situation in which mailing lists generally interfere.

If you wish to set p=reject on a domain which contains people who send to 
mailing lists, you have at least four options:

1) Decide that the domain does not actually send transactional domain for a 
brand that needs protection from forged mail. Reconsider the p=reject decision.
2) Decide that you do not care what happens to the mail that goes to mailing 
lists or is forwarded, or actively disapprove of it, and the mail that is saved 
either intentionally by people trying to exempt mailing lists or accidentally 
by people not enforcing DMARC is good enough. Set p=reject without doing 
anything else except warning pe
3) Move the individuals to another sending domain. Set this one to p=reject.
4) Move the transactional mail to another sending domain, which is set to 
p=reject.

All of these options are popular. Sadly, so is 
5) Set p=reject without taking this advice into account and then be shocked and 
horrified that mail you wanted to deliver is rejected.

Admittedly 5 does happen in situations where it is under documented -- but I 
have also seen 5 happen in response to mail that explicitly said "Do not do 
this on a domain containing end users or you will be sorry."

        Elizabeth
_______________________________________________
dmarc-discuss mailing list
[email protected]
http://www.dmarc.org/mailman/listinfo/dmarc-discuss

NOTE: Participating in this list means you agree to the DMARC Note Well terms 
(http://www.dmarc.org/note_well.html)

Reply via email to