Re: [mailop] DMARC on srs forwarding domains?

2024-02-13 Thread Matus UHLAR - fantomas via mailop
Matus UHLAR - fantomas via mailop skrev den 2024-02-13 16:00: I still think implementing SPF and SRS gives more value than ARC. On 13.02.24 16:17, Benny Pedersen via mailop wrote: oh dear, if you really need both spf and srs, your problem is more deep then linux OP stated they already do

Re: [mailop] DMARC on srs forwarding domains?

2024-02-13 Thread Benny Pedersen via mailop
Matus UHLAR - fantomas via mailop skrev den 2024-02-13 16:00: I still think implementing SPF and SRS gives more value than ARC. oh dear, if you really need both spf and srs, your problem is more deep then linux begin trust maillists domains in arc, get better stable results on spf dkim

Re: [mailop] DMARC on srs forwarding domains?

2024-02-13 Thread Matus UHLAR - fantomas via mailop
On 02.02.24 16:26, Kai Bojens via mailop wrote: Skip SRS and implement ARC for forwarded e-mails. This should solve all these problems. On 2024-02-04 23:02:31 (+0800), Matus UHLAR - fantomas via mailop wrote: Does anyone blindly trust ARC signatures from random domains? I find it a huge

Re: [mailop] DMARC on srs forwarding domains?

2024-02-04 Thread Philip Paeps via mailop
On 2024-02-04 23:02:31 (+0800), Matus UHLAR - fantomas via mailop wrote: Am 02.02.24 um 16:08 schrieb Mark E. Jeftovic via mailop: We're having a bit of a theological debate internally on whether to implement DMARC on our SRS forwarder domains. On 02.02.24 16:26, Kai Bojens via mailop wrote:

Re: [mailop] DMARC on srs forwarding domains?

2024-02-04 Thread Matus UHLAR - fantomas via mailop
Am 02.02.24 um 16:08 schrieb Mark E. Jeftovic via mailop: We're having a bit of a theological debate internally on whether to implement DMARC on our SRS forwarder domains. On 02.02.24 16:26, Kai Bojens via mailop wrote: Skip SRS and implement ARC for forwarded e-mails. This should solve all

Re: [mailop] DMARC on srs forwarding domains?

2024-02-04 Thread John Levine via mailop
It appears that Matus UHLAR - fantomas via mailop said: >>Am 02.02.24 um 16:08 schrieb Mark E. Jeftovic via mailop: >>>We're having a bit of a theological debate internally on whether to >>>implement DMARC on our SRS forwarder domains. > >On 02.02.24 16:26, Kai Bojens via mailop wrote: >>Skip

Re: [mailop] DMARC on srs forwarding domains?

2024-02-04 Thread Slavko via mailop
Ahoj, Dňa Sun, 4 Feb 2024 16:02:31 +0100 Matus UHLAR - fantomas via mailop napísal: > Does anyone blindly trust ARC signatures from random domains? How one can trust that, if one don't know how (or if at all) original was checked? If i will blindly trust to that, i don't need to check SPF,

Re: [mailop] DMARC on srs forwarding domains?

2024-02-04 Thread Matus UHLAR - fantomas via mailop
> Am 02.02.24 um 16:08 schrieb Mark E. Jeftovic via mailop: > > We're having a bit of a theological debate internally on whether to > > implement DMARC on our SRS forwarder domains. On 02.02.24 16:26, Kai Bojens via mailop wrote: > Skip SRS and implement ARC for forwarded e-mails. This should

Re: [mailop] DMARC on srs forwarding domains?

2024-02-04 Thread 황병희
Hellow Matus, On Sun, 2024-02-04 at 16:02 +0100, Matus UHLAR - fantomas via mailop wrote: > > Am 02.02.24 um 16:08 schrieb Mark E. Jeftovic via mailop: > > > We're having a bit of a theological debate internally on whether > > > to > > > implement DMARC on our SRS forwarder domains. > > On

Re: [mailop] DMARC on srs forwarding domains?

2024-02-04 Thread Matus UHLAR - fantomas via mailop
Am 02.02.24 um 16:08 schrieb Mark E. Jeftovic via mailop: We're having a bit of a theological debate internally on whether to implement DMARC on our SRS forwarder domains. On 02.02.24 16:26, Kai Bojens via mailop wrote: Skip SRS and implement ARC for forwarded e-mails. This should solve all

Re: [mailop] DMARC on srs forwarding domains?

2024-02-03 Thread Jaroslaw Rafa via mailop
Dnia 3.02.2024 o godz. 13:34:43 Philip Paeps via mailop pisze: > (There is something to be said for hard-enforcing specifically > "v=spf1 -all", but policies with anything between the v=spf1 and the > -all are overwhelmingly configuration errors, and should only count > for scoring.) I am glad

Re: [mailop] DMARC on srs forwarding domains?

2024-02-02 Thread Philip Paeps via mailop
On 2024-02-03 09:01:40 (+0800), Bill Cole via mailop wrote: On 2024-02-02 at 10:26:55 UTC-0500 (Fri, 2 Feb 2024 16:26:55 +0100) Kai Bojens via mailop is rumored to have said: Am 02.02.24 um 16:08 schrieb Mark E. Jeftovic via mailop: We're having a bit of a theological debate internally on

Re: [mailop] DMARC on srs forwarding domains?

2024-02-02 Thread Philip Paeps via mailop
On 2024-02-02 23:08:54 (+0800), Mark E. Jeftovic via mailop wrote: We're having a bit of a theological debate internally on whether to implement DMARC on our SRS forwarder domains. The team here says that DMARC means there will never be alignment on an SRS forwarder domain because the

Re: [mailop] DMARC on srs forwarding domains?

2024-02-02 Thread 황병희
Hellow Kai, On Fri, 2024-02-02 at 16:26 +0100, Kai Bojens via mailop wrote: > Am 02.02.24 um 16:08 schrieb Mark E. Jeftovic via mailop: > > > We're having a bit of a theological debate internally on whether to > > implement DMARC on our SRS forwarder domains. > > Skip SRS and implement ARC for

Re: [mailop] DMARC on srs forwarding domains?

2024-02-02 Thread Benny Pedersen via mailop
Bill Cole via mailop skrev den 2024-02-03 02:01: Telling the next hops that they need to parse ARC and trust your system instead of just checking SPF is a choice that one can make, yes. there is nothing to tell, its trustness or not maillist arc trustness: yes direct to mx trustness: no in

Re: [mailop] DMARC on srs forwarding domains?

2024-02-02 Thread Bill Cole via mailop
On 2024-02-02 at 10:26:55 UTC-0500 (Fri, 2 Feb 2024 16:26:55 +0100) Kai Bojens via mailop is rumored to have said: Am 02.02.24 um 16:08 schrieb Mark E. Jeftovic via mailop: We're having a bit of a theological debate internally on whether to implement DMARC on our SRS forwarder domains.

Re: [mailop] DMARC on srs forwarding domains?

2024-02-02 Thread Kai Bojens via mailop
Am 02.02.24 um 16:08 schrieb Mark E. Jeftovic via mailop: We're having a bit of a theological debate internally on whether to implement DMARC on our SRS forwarder domains. Skip SRS and implement ARC for forwarded e-mails. This should solve all these problems.

[mailop] DMARC on srs forwarding domains?

2024-02-02 Thread Mark E. Jeftovic via mailop
We're having a bit of a theological debate internally on whether to implement DMARC on our SRS forwarder domains. The team here says that DMARC means there will never be alignment on an SRS forwarder domain because the envelope-from /must /match the mail-from. What we're wondering is,