Herron has uploaded a new change for review. ( https://gerrit.wikimedia.org/r/361501 )
Change subject: Change lists.wikimedia.org SPF record to soft fail (~all) ...................................................................... Change lists.wikimedia.org SPF record to soft fail (~all) The current lists.wikimedia.org SPF record is neutral (?all). This is interpreted similarly to not having a SPF record defined. Soft fail suggests that messages originating from unlisted systems are suspect without rejecting them outright. Mail systems should accept but flag these messages, improving detection of emails sent with a lists.wikimedia.org envelope-from address through an unlisted mail relay. A common attribute of spam and phishing emails. Including mx[1,2]001 in the lists.wikimedia.org SPF record to err on the side of caution. Bug: T167703 Change-Id: Id37cd449173281dd23cd204a3ec07903ad205c1f --- M templates/wikimedia.org 1 file changed, 1 insertion(+), 1 deletion(-) git pull ssh://gerrit.wikimedia.org:29418/operations/dns refs/changes/01/361501/1 diff --git a/templates/wikimedia.org b/templates/wikimedia.org index ec3d11d..5f886c3 100644 --- a/templates/wikimedia.org +++ b/templates/wikimedia.org @@ -60,7 +60,7 @@ lists 1H IN A 208.80.154.75 lists 1H IN AAAA 2620:0:861:3::2 lists 1H IN MX 10 lists -lists 1H IN TXT "v=spf1 mx ?all" +lists 1H IN TXT "v=spf1 mx a:mx1001.wikimedia.org a:mx2001.wikimedia.org ~all" wiki-mail 1H IN CNAME mx1001 ; used by Jenkins and possibly others -- To view, visit https://gerrit.wikimedia.org/r/361501 To unsubscribe, visit https://gerrit.wikimedia.org/r/settings Gerrit-MessageType: newchange Gerrit-Change-Id: Id37cd449173281dd23cd204a3ec07903ad205c1f Gerrit-PatchSet: 1 Gerrit-Project: operations/dns Gerrit-Branch: master Gerrit-Owner: Herron <[email protected]> _______________________________________________ MediaWiki-commits mailing list [email protected] https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
