I would dedicate an alias for the rua, in case there is a surge, it is easy to then put aside reports.
I would not use sp=none, but create a specific DMARC record for lists.blystone.net<http://lists.blystone.net>, because with sp=none, then any subdomain is not protected anymore, while you just want one... you can remove adkim=r; aspf=r; ri=86400 because that's the default values anyhow pct=50 I suppose you are transitionning to quarantine, get to 100 as soon as possible. if you run you own mailman, suggest you upgrade to 2.1.17 and consider enabling the DMARC option. I'm not sure where you are in DMARC, but may be you should have started with p=non, collect some reports, assess and then move to more stringent policy. Cheers On Dec 17, 2013, at 5:13 AM, Scott Blystone <[email protected]<mailto:[email protected]>> wrote: All, This is my first post to the list and I really hope that this message does not go into quarantine or worse. I've had SPF and DKIM enabled on this primary domain, blystone.net<http://blystone.net/>, for some time and have only recently decided to implement DMARC. The domain and this subdomain, lists.blystone.net<http://lists.blystone.net/>, are both hosted on Google Apps. I've been studying up on DMARC and am generally aware of the issues with mailman. I've also heard that there are some issues using Google Apps with DMARC but those references seem to bit hazy. Here's my current DMARC record: v=DMARC1; p=quarantine; rua=mailto:[email protected]<mailto:[email protected]>; adkim=r; aspf=r; pct=50; ri=86400; sp=none Is this going to work reasonable well within mailing lists or do any of you have any additional suggestions for me? Thanks! -- Scott Blystone Rochester, NY, US CAcert Assurer (see http://www.cacert.org<http://www.cacert.org/>) StartSSL Notary (see http://www.startssl.org<http://www.startssl.org/>) _______________________________________________ dmarc-discuss mailing list [email protected]<mailto:[email protected]> http://www.dmarc.org/mailman/listinfo/dmarc-discuss NOTE: Participating in this list means you agree to the DMARC Note Well terms (http://www.dmarc.org/note_well.html)
_______________________________________________ dmarc-discuss mailing list [email protected] http://www.dmarc.org/mailman/listinfo/dmarc-discuss NOTE: Participating in this list means you agree to the DMARC Note Well terms (http://www.dmarc.org/note_well.html)
