Re: [dmarc-discuss] DMARC implementation

2013-09-10 Thread Andy Wilson
Hi Rodney As a first step, you can publish a DMARC record with p=none to collect feedback. You'll need access to the DNS of regions.com to setup the DNS record I highly recommend checking out https://dmarcian.com for a good overview of what DMARC is designed to do and how it can help you! On 1

[dmarc-discuss] DMARC implementation

2013-09-10 Thread Rodney Cameron
Can you tell me what will be needed for an implementation of DMARC? Rodney Cameron E-Messaging Server Administrator Regions Bank (205) 261-4089 ___ dmarc-discuss mailing list dmarc-discuss@dmarc.org http://www.dmarc.org/mailman/listinfo/dmarc-discuss

Re: [dmarc-discuss] DMARC implementation

2013-06-29 Thread Matt Simerson
On Jun 29, 2013, at 10:38 AM, Benny Pedersen wrote: > Matt Simerson skrev den 2013-06-25 08:23: > >>> - RUAs: >>> - a...@dmarc-qa.com >>> - b...@dmarc-qa.com > > if more then one is defined it sents to all, i see it used on multiple > domains that send copy to return-path and still get a copy

Re: [dmarc-discuss] DMARC implementation

2013-06-29 Thread Benny Pedersen
Matt Simerson skrev den 2013-06-25 08:23: - RUAs: - a...@dmarc-qa.com - b...@dmarc-qa.com if more then one is defined it sents to all, i see it used on multiple domains that send copy to return-path and still get a copy self -- senders that put my email into body content will deliver it to

Re: [dmarc-discuss] DMARC implementation

2013-06-24 Thread Matt Simerson
On Jun 24, 2013, at 11:18 AM, Franck Martin wrote: > There is an interoperability test suite at https://dmarcian.com/interop_qa/ > > You may want to try it too. I was unaware of this. I went through and added a bunch of the tests to my test suite. In the process, I found a bug in the test. T

Re: [dmarc-discuss] DMARC implementation

2013-06-24 Thread Franck Martin
Very cool You may want to ship them in gzip format now. For failure reports (aka forensic). I suggest you put this feature to add an email address where all the failure reports will be sent to (regardless of the ruf, or if you want to send failure reports). This allows a mail admin to know all

Re: [dmarc-discuss] DMARC implementation

2013-06-24 Thread Roman Prokhorov
Hello, I finally had implemented DMARC plugin for CommuniGate Pro mail server. It verifies incoming messages and sends aggregate reports in ZIP. The implementation is based on pure Perl and files without using external database engines. As a test you can email to rep...@test.mobileoffice.biz

Re: [dmarc-discuss] DMARC implementation

2013-05-07 Thread Matt Simerson
On May 7, 2013, at 7:55 PM, Roman Prokhorov wrote: > On 08.05.2013 4:36, Matt Simerson wrote: > >> We are both running DMARC in production but neither Davide's nor my >> modules have the reporting elements completed. I'm writing the report >> aggregation functions right now. > > I'm planning t

Re: [dmarc-discuss] DMARC implementation

2013-05-07 Thread Matt Simerson
On May 7, 2013, at 7:55 PM, Roman Prokhorov wrote: >>> The final result of the DMARC check can be either pass or fail >>> (when both SPF and DKIM failed, or when SPF passed but SPF >>> alignment failed, or DKIM passed but alignment failed), no neutral >>> result. Or what? >> >> https://datatrac

Re: [dmarc-discuss] DMARC implementation

2013-05-07 Thread Roman Prokhorov
On 08.05.2013 4:36, Matt Simerson wrote: There is this DMARC plugin that is a Qpsmtpd plugin, in perl: Thanks for the tips; will take a look at your code :-) We are both running DMARC in production but neither Davide's nor my modules have the reporting elements completed. I'm writing the rep

Re: [dmarc-discuss] DMARC implementation

2013-05-07 Thread Matt Simerson
On May 7, 2013, at 5:55 PM, Franck Martin wrote: > On May 7, 2013, at 5:36 PM, Matt Simerson wrote: > >>> When a message has non-existent/invalid/etc domain in From, should it be >>> treated as failed the DMARC test, or DMARC is not applicable here? >> >> https://datatracker.ietf.org/doc/dra

Re: [dmarc-discuss] DMARC implementation

2013-05-07 Thread John Levine
>This means DMARC can't be treated as a way to combat spam, ... Right, it's not an anti-spam tool, it's an anti-phishing tool. For domains that send all of their mail from a known set of places and that are subject to impersonation, DMARC can be a useful tool to tell the real mail from the fake.

Re: [dmarc-discuss] DMARC implementation

2013-05-07 Thread Franck Martin
On May 7, 2013, at 5:36 PM, Matt Simerson mailto:m...@tnpi.net>> wrote: When a message has non-existent/invalid/etc domain in From, should it be treated as failed the DMARC test, or DMARC is not applicable here? https://datatracker.ietf.org/doc/draft-kucherawy-dmarc-base/?include_text=1 Sec

Re: [dmarc-discuss] DMARC implementation

2013-05-07 Thread Matt Simerson
On May 7, 2013, at 5:01 PM, Roman Prokhorov wrote: > Hello, > > I'm new to this list; trying to implement DMARC in Perl as a plugin for > CommuniGate Pro mail server. There is this DMARC plugin that is a Qpsmtpd plugin, in perl: https://github.com/qpsmtpd-dev/qpsmtpd-dev/blob/master/plugins/

[dmarc-discuss] DMARC implementation

2013-05-07 Thread Roman Prokhorov
Hello, I'm new to this list; trying to implement DMARC in Perl as a plugin for CommuniGate Pro mail server. So far so good, I have already implemented the "authentication" part; will share the sources when I get all the nuances sorted out. Have been checking emails we receive (mostly spam) a

Re: [dmarc-discuss] dmarc implementation

2013-04-28 Thread Matt Simerson
On Apr 28, 2013, at 12:11 PM, Douglas Otis wrote: > On Apr 26, 2013, at 8:52 PM, Matt Simerson wrote: > >> I presume this is the ATPS you are referring to? >> http://www.ietf.org/rfc/rfc6541.txt > > Dear Matt, > > Sorry for the delayed response. For some reason, our entire conversation is

Re: [dmarc-discuss] dmarc implementation

2013-04-28 Thread Douglas Otis
On Apr 26, 2013, at 8:52 PM, Matt Simerson wrote: > > On Apr 26, 2013, at 6:28 PM, Douglas Otis wrote: > >> On Apr 25, 2013, at 11:51 PM, Matt Simerson wrote: >> >>> I noticed there's a dearth of DMARC implementations. I wanted to try DMARC >>> so I wrote my own. Mostly. I haven't complete

Re: [dmarc-discuss] dmarc implementation

2013-04-27 Thread Douglas Otis
On Apr 27, 2013, at 12:38 AM, Franck Martin wrote: > > On Apr 27, 2013, at 12:17 AM, Matt Simerson wrote: > >> >> On Apr 26, 2013, at 6:28 PM, Douglas Otis wrote: >> >>> To really get DMARC to work as advertised, DKIM needs to be repaired. >>> >>> See: >>> http://www.bungi.com/Dom-v6.pdf

Re: [dmarc-discuss] dmarc implementation

2013-04-27 Thread Davide Migliavacca
> http://sourceforge.net/projects/opendmarc > > That's the one I maintain. It includes a plugin for milter-aware MTAs > (currently sendmail, postfix, Mailstream Manager, and whatever the Oracle > one is called) and a C library for adding DMARC support to applications > which like that interface. >

Re: [dmarc-discuss] dmarc implementation

2013-04-27 Thread Franck Martin
On Apr 27, 2013, at 12:17 AM, Matt Simerson mailto:m...@tnpi.net>> wrote: On Apr 26, 2013, at 6:28 PM, Douglas Otis mailto:doug.mtv...@gmail.com>> wrote: To really get DMARC to work as advertised, DKIM needs to be repaired. See: http://www.bungi.com/Dom-v6.pdf >From the aforementioned PDF:

Re: [dmarc-discuss] dmarc implementation

2013-04-27 Thread Matt Simerson
On Apr 26, 2013, at 6:28 PM, Douglas Otis wrote: > To really get DMARC to work as advertised, DKIM needs to be repaired. > > See: > http://www.bungi.com/Dom-v6.pdf From the aforementioned PDF: A convincing, albeit fake, header field can be prepended onto DKIM messages displayed to users inst

Re: [dmarc-discuss] dmarc implementation

2013-04-26 Thread John Levine
>I haven't read the entire RFC but I get the gist that DKIM and mailing lists >is somehow >broken. I haven't seen that issue yet except on this list. Opinions, to put it mildly, vary. See the archives for more than you wanted to know on the topic. R's, John _

Re: [dmarc-discuss] dmarc implementation

2013-04-26 Thread Matt Simerson
On Apr 26, 2013, at 6:28 PM, Douglas Otis wrote: > On Apr 25, 2013, at 11:51 PM, Matt Simerson wrote: > >> I noticed there's a dearth of DMARC implementations. I wanted to try DMARC >> so I wrote my own. Mostly. I haven't completed the reporting feature. > > Dear Matt, > > Murray rightfull

Re: [dmarc-discuss] dmarc implementation

2013-04-26 Thread Douglas Otis
On Apr 25, 2013, at 11:51 PM, Matt Simerson wrote: > > I noticed there's a dearth of DMARC implementations. I wanted to try DMARC so > I wrote my own. Mostly. I haven't completed the reporting feature. Yet. The > code is here: > > https://github.com/qpsmtpd-dev/qpsmtpd-dev/blob/master/plugi

Re: [dmarc-discuss] dmarc implementation

2013-04-26 Thread John Levine
I have an implementation for mailfront, a somewhat popular modular SMTP daemon, same idea as qpsmtpd but written in C. It does all of the checking and generates an Authentication-Results header, can optionally reject on p=reject and can put failing messages in a reporting queue (poorly tested) and

Re: [dmarc-discuss] dmarc implementation

2013-04-26 Thread Murray Kucherawy
On 4/25/13 11:51 PM, "Matt Simerson" wrote: >I noticed there's a dearth of DMARC implementations. I wanted to try >DMARC so I wrote my own. Mostly. I haven't completed the reporting >feature. Yet. The code is here: There are several implementations, though only a couple of them are open source.

[dmarc-discuss] dmarc implementation

2013-04-25 Thread Matt Simerson
I noticed there's a dearth of DMARC implementations. I wanted to try DMARC so I wrote my own. Mostly. I haven't completed the reporting feature. Yet. The code is here: https://github.com/qpsmtpd-dev/qpsmtpd-dev/blob/master/plugins/dmarc The implementation is a plugin for qpsmtpd, a MTA with a