Herron has submitted this change and it was merged. ( 
https://gerrit.wikimedia.org/r/361501 )

Change subject: Change lists.wikimedia.org SPF record to soft fail (~all)
......................................................................


Change lists.wikimedia.org SPF record to soft fail (~all)

The current lists.wikimedia.org SPF record is neutral (?all).  This is
interpreted similarly to not having a SPF record defined.

Soft fail suggests that messages originating from unlisted systems are
suspect without rejecting them outright.  Mail systems should accept but
flag these messages, improving detection of emails sent with a
lists.wikimedia.org envelope-from address through an unlisted mail relay.
A common attribute of spam and phishing emails.

Including mx[1,2]001 in the lists.wikimedia.org SPF record to err on the
side of caution.

Bug: T167703
Change-Id: Id37cd449173281dd23cd204a3ec07903ad205c1f
---
M templates/wikimedia.org
1 file changed, 1 insertion(+), 1 deletion(-)

Approvals:
  Reedy: Looks good to me, but someone else must approve
  Herron: Looks good to me, approved
  Alexandros Kosiaris: Looks good to me, but someone else must approve
  jenkins-bot: Verified



diff --git a/templates/wikimedia.org b/templates/wikimedia.org
index b7de47e..1ffa43c 100644
--- a/templates/wikimedia.org
+++ b/templates/wikimedia.org
@@ -67,7 +67,7 @@
 lists           5M  IN A    208.80.154.21
 lists           5M  IN AAAA 2620:0:861:1:208:80:154:21
 lists           1H  IN MX   10 lists
-lists           1H  IN TXT  "v=spf1 mx ?all"
+lists           1H  IN TXT  "v=spf1 mx a:mx1001.wikimedia.org 
a:mx2001.wikimedia.org ~all"
 
 wiki-mail       1H  IN CNAME    mx1001    ; used by Jenkins and possibly others
 

-- 
To view, visit https://gerrit.wikimedia.org/r/361501
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings

Gerrit-MessageType: merged
Gerrit-Change-Id: Id37cd449173281dd23cd204a3ec07903ad205c1f
Gerrit-PatchSet: 2
Gerrit-Project: operations/dns
Gerrit-Branch: master
Gerrit-Owner: Herron <[email protected]>
Gerrit-Reviewer: Alexandros Kosiaris <[email protected]>
Gerrit-Reviewer: BBlack <[email protected]>
Gerrit-Reviewer: Faidon Liambotis <[email protected]>
Gerrit-Reviewer: Herron <[email protected]>
Gerrit-Reviewer: Reedy <[email protected]>
Gerrit-Reviewer: jenkins-bot <>

_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits

Reply via email to