Richard Clayton writes: > ... but I believe it be commonly accepted that the forwarder will not > use the MAIL FROM which was used to send the message to it but will > instead ensure that an SPF lookup on the domain part of the MAIL FROM > that it is using will get a "pass" > > Note that this will not be an "aligned pass" so it will not help you > with DMARC ... it's only useful when talking to receivers who insist on > any kind of SPF pass
I think most of the forwarders ignore SPF, and just forward the email without any modifications including the MAIL FROM. This is what happens if you just put .forward or add alias to your system. To use SRS you have to do something special, which means most of those who set up those things do not know what they would need to do to get this undefined SRS. Also if you just forward the email without modifications the DKIM signature will still be valid, thus DMARC will be valid and everything works. All DMARC implementations are required to check DKIM too, so whether SPF passes or not does not matter. Yes, there used to be much more environments which only did SPF, and only checked SPF, but what I have been seeing lately even they have moved to check DKIM. Unfortunately some very large organizations have moved to check BOTH SPF and DKIM, which means forwarding do gets broken again... > >The claim that forwarding is negligible by volume mistakes what > >forwarding is. It is not a class of sender that appears as a line > >on a dashboard > > I assure you that it is at $DAYJOB$ ... and quite a long way down... As the people in M3AAWG pointed out earlier, the forwarding is low volume, but high value emails. I.e., when someone connect and alumni address of the someone in the university who has written some paper that got published, that email might be very important for the recipient and sender. > Also when customers report that forwarding is failing (either to our > system or away from our system) we strongly encourage them to use IMAP > to collect their email from their <n> accounts (something modern > software does out-of-the-box) rather than forward email through one or > more systems to one central location. That is impossible. Universities do not want to provide mailboxes for every alumni who has ever been there. This would be huge adminstrative load and quite costly. On the other hand providing forwarding address for alumni is very cheap for them, one line on the /etc/mail/aliases and thats it. -- [email protected] _______________________________________________ Ietf-dkim mailing list -- [email protected] To unsubscribe send an email to [email protected]
