On Sun, 1 Mar 2026 21:32:40 +0000 (GMT) Julian Bradfield via mailop <[email protected]> wrote:
> Tonight I got bounces in my mailing lists with gmail.com refusing to > accept messages relayed from virginmedia.com senders virginmedia.com has a "reject" DMARC policy. How do you operate a mailing list that is compliant with modern e-mail standards and keep the sender domain for a mail from a sender with such a policy? I don't think that's possible. I suggest you check if you fulfill all of Google's requirements here: https://support.google.com/a/answer/81126?hl=en You'll likely find out that you're in violation of some of them. Either you're changing the message, which means you break their DKIM signature. Given you also cannot align SPF, DMARC fails. Or you're not changing the message. But then you cannot support One-Click unsubscribe (as that needs to be covered by the DKIM signature), and thus are in violation again. I believe that the only way to run a mailing list compliant with all modern mail standards is to rewrite the from address (like this mailing list does now also, as you can see this mail will have "[email protected]" in its from). I also recently explained this in a thread on Mastodon: https://mastodon.social/@hanno/116035147128128509 -- Hanno Böck - Independent security researcher https://itsec.hboeck.de/ https://badkeys.info/ _______________________________________________ mailop mailing list [email protected] https://list.mailop.org/listinfo/mailop
