On 11/3/24 10:39, Hoover Chan via Mailman-Users wrote:

Is it simply some combination of SPF, DMARC and DKIM? Maybe a
particular way to set these up? Or something else? (The MTA? DNS?)

Your server needs to identify itself with your domain name (`myhostname` in Postfix). That domain needs an A record in DNS with the server's IP and the IP needs a PTR back to the domain name. All outgoing mail should be DKIM signed and you should publish and appropriate SPF. It is also said that publishing a DMARC record, even with `p=none` can help too.

Mailman must also apply DMARC mitigations. This is tricky because gmail publishes a DMARC policy on `none`, but if mail to a gmail address is From: a gmail address, gmail wants it to pass DMARC, so you either have to apply DMARC mitigations to all mail (DMARC Mitigate unconditionally = Yes) or add `^.*@gmail\.com$` to DMARC Addresses.

--
Mark Sapiro <m...@msapiro.net>        The highway is for gamblers,
San Francisco Bay Area, California    better use your sense - B. Dylan

------------------------------------------------------
Mailman-Users mailing list -- mailman-users@python.org
To unsubscribe send an email to mailman-users-le...@python.org
https://mail.python.org/mailman3/lists/mailman-users.python.org/
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/
   https://mail.python.org/archives/list/mailman-users@python.org/
Member address: arch...@jab.org

Reply via email to