On 11/3/24 10:39, Hoover Chan via Mailman-Users wrote:
Is it simply some combination of SPF, DMARC and DKIM? Maybe a particular way to set these up? Or something else? (The MTA? DNS?)
Your server needs to identify itself with your domain name (`myhostname` in Postfix). That domain needs an A record in DNS with the server's IP and the IP needs a PTR back to the domain name. All outgoing mail should be DKIM signed and you should publish and appropriate SPF. It is also said that publishing a DMARC record, even with `p=none` can help too.
Mailman must also apply DMARC mitigations. This is tricky because gmail publishes a DMARC policy on `none`, but if mail to a gmail address is From: a gmail address, gmail wants it to pass DMARC, so you either have to apply DMARC mitigations to all mail (DMARC Mitigate unconditionally = Yes) or add `^.*@gmail\.com$` to DMARC Addresses.
-- Mark Sapiro <m...@msapiro.net> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan ------------------------------------------------------ Mailman-Users mailing list -- mailman-users@python.org To unsubscribe send an email to mailman-users-le...@python.org https://mail.python.org/mailman3/lists/mailman-users.python.org/ Mailman FAQ: http://wiki.list.org/x/AgA3 Security Policy: http://wiki.list.org/x/QIA9 Searchable Archives: https://www.mail-archive.com/mailman-users@python.org/ https://mail.python.org/archives/list/mailman-users@python.org/ Member address: arch...@jab.org