On 07/19/2017 06:13 AM, Kevin Nowaczyk via Mailman-Users wrote: > ... dmarc_none_moderation_action is No. ... > After changing to "Munge From" it still has a DMARC fail. What are the > differences that I should be seeing after changing the > dmarc_moderation_action? Here is an authentication header of a message from a > gmail user to a gmail user.
gmail.com publishes DMARC p=none _dmarc.gmail.com. 399 IN TXT "v=DMARC1; p=none; rua=mailto:[email protected]"; Thus, you will see no differences in mail From: gmail.com unless you also set dmarc_none_moderation_action to Yes. (Note that this setting is not really recommended and is not available in Mailman 3's DMARC mitigations.) The underlying issue may be (speculating here) that Gmail doesn't like mail From: gmail.com with broken gmail.com DKIM signatures. If so, this is contrary to the recommendation of the DKIM standard RFC 6376. Section 6.3 of that RFC says in part: If the email cannot be verified, then it SHOULD be treated the same as all unverified email, regardless of whether or not it looks like it was signed. -- Mark Sapiro <[email protected]> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan ------------------------------------------------------ Mailman-Users mailing list [email protected] https://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://wiki.list.org/x/AgA3 Security Policy: http://wiki.list.org/x/QIA9 Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: https://mail.python.org/mailman/options/mailman-users/archive%40jab.org
