Re: [mailop] Problems with invoices.premierinn.de and postmas...@premierinn.de

2024-04-26 Thread Benny Pedersen via mailop
Jaroslaw Rafa via mailop skrev den 2024-04-26 11:25: Dnia 25.04.2024 o godz. 19:12:34 John Levine via mailop pisze: No, really it's not, and I should know. In any event, I can see how people might reject mail from a domain that has a TXT record but no A or MX, but it seems pretty marginal.

Re: [mailop] Problems with invoices.premierinn.de and postmas...@premierinn.de

2024-04-25 Thread Benny Pedersen via mailop
John Levine via mailop skrev den 2024-04-25 18:33: It appears that Andrew C Aitchison via mailop said: because the return path would not work. $ host invoices.premierinn.de It has an SPF record. What's the problem? spf have no rules to be enforced, while rfc 7505 is in all mta, spf

Re: [mailop] [External] Re: Off-Topic - VMWare ESXI 7.0

2024-04-16 Thread Benny Pedersen via mailop
Kevin A. McGrail via mailop skrev den 2024-04-16 16:06: As the original poster, I wanted to say thanks.  Based on the dozen or so replies so far, I clearly struck a nerve.  I'm reading all the replies with great interest. you are welcome to use linode.com for wm like i do, do dns not serve

Re: [mailop] Are there other comparable services like spamcop.net / spamhaus.org?

2024-04-03 Thread Benny Pedersen via mailop
Aban Dokht via mailop skrev den 2024-04-03 10:41: Hi list, are there other comparable services like spamcop.net or spamhaus.org worth submitting SPAM samples to? Currently we are reporting SPAM samples semi automated to those to services and would like to know, if the are other ones worth to

Re: [mailop] Anyone from Google - Sudden Gmail bounces??

2024-03-31 Thread Benny Pedersen via mailop
Odhiambo Washington via mailop skrev den 2024-03-31 21:16: Not sure I understand you. but 41.212.32.14 is a static IP. I don't thing the /24 has any dynamic segment. https://hetrixtools.com/blacklist-check/41.212.32.14 ___ mailop mailing list

Re: [mailop] Anyone from Google - Sudden Gmail bounces??

2024-03-31 Thread Benny Pedersen via mailop
Julian Bradfield via mailop skrev den 2024-03-31 17:35: It also thinks 41.212.32.14 has been very spammy in recent months. oh https://multirbl.valli.org/lookup/41.212.32.14.html dont send email from pbl listed ips OP should ask isp for a static ip

Re: [mailop] 172.245.92.88 (HostPapa / Colocrossing) phishing source - not correctly registered @ ARIN ?

2024-03-19 Thread Benny Pedersen via mailop
Benoit Panizzon via mailop skrev den 2024-03-19 09:03: In the meantime, it scores a decent number of spam points due to being in various blacklists: [172.245.92.88 listed in dnsrbl.swinog.ch] [172.245.92.88 ]

Re: [mailop] Google unsolicited mail rejected with 421

2024-03-17 Thread Benny Pedersen via mailop
Jaroslaw Rafa via mailop skrev den 2024-03-17 13:38: Dnia 16.03.2024 o godz. 13:08:52 Benny Pedersen via mailop pisze: bingo its why its tempfailed, gmail should redesign how to handle maillists where message-id can come to inbound on gmail, should not count on message-id abuse counts Well

Re: [mailop] Google unsolicited mail rejected with 421

2024-03-16 Thread Benny Pedersen via mailop
Marco Moock via mailop skrev den 2024-03-16 12:46: Am 14.03.2024 um 10:28:13 Uhr schrieb Julian Bradfield via mailop: Their latest daftness (latest in my noticing it, anyway) is rate-limiting on the basis of too many recipients for a single message-id, where "too many" varies from 6 to 30.

Re: [mailop] Love how people use SPF records.. Just for a chuckle..

2024-03-12 Thread Benny Pedersen via mailop
Michael Peddemors via mailop skrev den 2024-03-11 23:54: host -t TXT save.ca ... so.. basically hard block everything except 1/2 the internet.. the other half is "v=spf1 +all" ? :) if one likes no maintained ranges 225 netblocks are authorized 2,583,457 individual IPv4 addresses i did

Re: [mailop] PTR check mechanism / gmail

2024-03-03 Thread Benny Pedersen via mailop
Gareth Evans via mailop skrev den 2024-03-04 01:17: Received: from atlas.bondproducts.com (unknown [23.24.6.165]) by mx6.messagingengine.com (Postfix) with ESMTP id ... https://multirbl.valli.org/fcrdns-test/23.24.6.165.html one red means fails [...] Received: from

Re: [mailop] tiscali.it/tiscalinet.it reject RFC821 FROM domain as a CNAME because "domain does not have neither a valid MX or A record"

2024-02-29 Thread Benny Pedersen via mailop
Stefano Bagnara via mailop skrev den 2024-02-29 11:09: I think I wrote here too early: from further investigation seems like the issue has gone and now those emails are not refused anymore. https://totaluptime.com/kb/cname-and-mx-for-the-same-host-name/ dont use cname for email or even mx

Re: [mailop] Gmail.com SPF false negatives?

2024-02-28 Thread Benny Pedersen via mailop
Kai Bojens via mailop skrev den 2024-02-28 08:35: Am 27.02.24 um 23:30 schrieb Rob Nagler via mailop: $ dig +short txt nagler.me "v=spf1 a mx ip4:139.177.203.52 include:_spf.google.com -all" A TTL of just 300 seconds is way too short IMHO. If

Re: [mailop] Gmail.com SPF false negatives?

2024-02-28 Thread Benny Pedersen via mailop
Matt Palmer via mailop skrev den 2024-02-27 23:59: Any chance of a transient/intermittent DNS failure on nagler.me? On occasion I've seen spurious SPF/DKIM failures when there's been a flaky DNS server in the mix. first fix spf to be valid for the sender domain in question, as it is now

Re: [mailop] Gmail.com SPF false negatives?

2024-02-28 Thread Benny Pedersen via mailop
Jarland Donnell via mailop skrev den 2024-02-27 23:54: Is it plausible that Google had a temporary issue reaching your DNS servers? impossible is possible ? ___ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop

Re: [mailop] Gmail.com SPF false negatives?

2024-02-28 Thread Benny Pedersen via mailop
L. Mark Stone via mailop skrev den 2024-02-27 23:52: I believe you need a DMARC record... does this fix spf fails ? ___ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop

Re: [mailop] Gmail.com SPF false negatives?

2024-02-28 Thread Benny Pedersen via mailop
Rob Nagler via mailop skrev den 2024-02-27 23:30: gmail.com [1] started failing messages from domains which are correctly setup for SPF (and have been for some years): 550-5.7.26 Gmail requires all senders to authenticate with either SPF or DKIM. 550-5.7.26 550-5.7.26 Authentication

Re: [mailop] One click unsubscribe in mailing list messages

2024-02-25 Thread Benny Pedersen via mailop
Ken O'Driscoll via mailop skrev den 2024-02-25 21:38: Outlook has supported list-unsubscribe for at least a year, if not longer. But, it's an add-on you need to proactively install so... waiting for roundcube, since squirrelmail have had this as a plugin, just not roundcube, hmp :=)

Re: [mailop] Anybody having trouble with gmail not recognizing valid SPF records?

2024-02-15 Thread Benny Pedersen via mailop
Eric J Esslinger via mailop skrev den 2024-02-15 19:17: My SPF records have been valid for... oh 10 years or so, and haven't changed, but the last two days I'm getting intermittent bounces sending to gmail.com addresses from our customer domain. I've sent a couple of emails to

Re: [mailop] Is forwarding to Gmail basically dead?

2024-02-14 Thread Benny Pedersen via mailop
Byunghee HWANG via mailop skrev den 2024-02-14 05:45: spf is not designed for forwarding, stop forwarding, problem solved Yes, you are right! good then :=) And if Google stops email service, i will also stop forwarding. https://wiki.debian.org/PostfixAndSASL see section SASL

Re: [mailop] Is forwarding to Gmail basically dead?

2024-02-13 Thread Benny Pedersen via mailop
Byunghee HWANG via mailop skrev den 2024-02-14 01:00: I really strongly agree with this opinion. That's why I wish people in the world didn't use SPF. SPF is a serious obstacle when forwarding. spf is not designed for forwarding, stop forwarding, problem solved dmarc need spf to find

Re: [mailop] DMARC on srs forwarding domains?

2024-02-13 Thread Benny Pedersen via mailop
Matus UHLAR - fantomas via mailop skrev den 2024-02-13 16:00: I still think implementing SPF and SRS gives more value than ARC. oh dear, if you really need both spf and srs, your problem is more deep then linux begin trust maillists domains in arc, get better stable results on spf dkim

Re: [mailop] Is forwarding to Gmail basically dead?

2024-02-12 Thread Benny Pedersen via mailop
Jaroslaw Rafa via mailop skrev den 2024-02-12 11:34: Dnia 12.02.2024 o godz. 01:36:09 Benny Pedersen via mailop pisze: if spf should be pr email addresses, thay could add ipv6 pr sender email :=) and have ipv4 with nullMX or simply remove ipv4 in mx, will it ever happen ? Yeah, use only IPv6

Re: [mailop] Is forwarding to Gmail basically dead?

2024-02-11 Thread Benny Pedersen via mailop
Sebastian Nielsen via mailop skrev den 2024-02-11 18:33: It’s a matter of a simple configuration. checked spf for big domains: gmail.com 328,960 individual IPv4 addresses outlook.com 506,999 individual IPv4 addresses (65.55.238.128/26 listed twice in spf) hotmail.com 148,087 individual IPv4

Re: [mailop] Is forwarding to Gmail basically dead?

2024-02-10 Thread Benny Pedersen via mailop
John Levine via mailop skrev den 2024-02-10 05:25: PS: Perhaps this list needs a FAQ of Well Known Bad Ideas so we can stop having this argument over and over. or make mailman patch that stops mailman from breaking dkim ___ mailop mailing list

Re: [mailop] Is forwarding to Gmail basically dead?

2024-02-10 Thread Benny Pedersen via mailop
John Levine via mailop skrev den 2024-02-10 05:22: It appears that Sebastian Nielsen via mailop said: just because SPF and DMARC are so badly designed that they can't handle it doesnt make it "forging" anything. It isn't badly designed. Forwarding a email, is the equvalient of, when you

Re: [mailop] Is forwarding to Gmail basically dead?

2024-02-10 Thread Benny Pedersen via mailop
Sebastian Nielsen via mailop skrev den 2024-02-10 05:11: And also as a side note, this list server (mailop) also does sender rewriting to From: mailop@mailop.org to prevent SPF and DMARC from tripping on list mail. So its obvious it’s the right way to do it. Same have the list "Exim-Users"

Re: [mailop] Is forwarding to Gmail basically dead?

2024-02-09 Thread Benny Pedersen via mailop
Philip Paeps via mailop skrev den 2024-02-09 10:56: You are not wrong. +1, maybe #metoo But you should treat ARC signatures in exactly the same way you treat DKIM signatures no not at all unless world like to step on own foots : as one signal. what ever this means Blindly trusting

Re: [mailop] DMARC on srs forwarding domains?

2024-02-02 Thread Benny Pedersen via mailop
Bill Cole via mailop skrev den 2024-02-03 02:01: Telling the next hops that they need to parse ARC and trust your system instead of just checking SPF is a choice that one can make, yes. there is nothing to tell, its trustness or not maillist arc trustness: yes direct to mx trustness: no in

Re: [mailop] Spamhaus contact?

2024-01-19 Thread Benny Pedersen via mailop
Atro Tossavainen via mailop skrev den 2024-01-19 10:48: Since most RBLs exchange data, Source? sign up to dnswl.org, in that stage blacklists are checked, if accepted, blacklists is then ignored :) i dont know if others doing this, i really dont care

Re: [mailop] BIMI and multiple hops

2024-01-13 Thread Benny Pedersen via mailop
Andrew C Aitchison via mailop skrev den 2024-01-13 07:16: [ Wearing an MTA developer's hat. ] +1 I see that an MTA is supposed to remove existing Authentication-Results and BIMI-Indicator headers, and that generally an MUA may use these headers if present. where is this dokumented ? I

Re: [mailop] BIMI boycott? Lookup tool, why we publish BIMI anyway, and intellectual property law considerations

2024-01-11 Thread Benny Pedersen via mailop
Randolf Richardson, Postmaster via mailop skrev den 2024-01-11 19:52: I might have missed something, but wouldn't that be a phisher's wet dream? Indeed, and because the BIMI record references a URI to load the logo from, so the scammers (spammers, phishers, malware/virus distributors,

Re: [mailop] ECDSA DKIM validation?

2023-12-21 Thread Benny Pedersen via mailop
John R Levine via mailop skrev den 2023-12-21 11:44: As I've said several times, unless there is a cryptographic problem with RSA, there is no reason to *use* any other kind of signature. analogy to no need to have ipv6 when ipv4 works :) ___

Re: [mailop] o365 outbound senders.. Strange Failures sending .. widespread reports

2023-12-18 Thread Benny Pedersen via mailop
Michael Peddemors via mailop skrev den 2023-12-18 23:54: Maybe my original posting wasn't clear.. +1 You would see these in your inbound logs, coming from o365 via port 25/TLS... i have no logs of this here, so it can be differing on diff servers Just real strange widespread occurrence

Re: [mailop] o365 outbound senders.. Strange Failures sending .. widespread reports

2023-12-18 Thread Benny Pedersen via mailop
Michael Peddemors via mailop skrev den 2023-12-18 22:45: Strange rewriting mechanism, but this kind of volume should be restricted from the o365 side, no? What about the usage of non-existant FQDN name in the MAIL FROM? what mta ? what port is used ? i use postfix with postscreen on port

Re: [mailop] Merry Christmas from Google?

2023-12-17 Thread Benny Pedersen via mailop
Marco Moock via mailop skrev den 2023-12-17 09:00: Am 16.12.2023 um 16:07:19 Uhr schrieb Jarland Donnell via mailop: Obligatory: We don't intend to send any email their way that could be perceived as unsolicited, but our users do use forwarders and we'll never completely match their filters.

Re: [mailop] Hotmail complains about their own mail

2023-12-16 Thread Benny Pedersen via mailop
Thomas Walter via mailop skrev den 2023-12-16 19:56: Dec 15 20:46:06 speedy postfix/smtpd[64567]: ACC2D1FF9B: client=mail-westus2azolkn19012032.outbound.protection.outlook.com[52.103.10.32] Dec 15 20:46:06 speedy postfix/cleanup[64616]: ACC2D1FF9B: message-id= Dec 15 20:46:08 speedy

Re: [mailop] Orange ISP - New outbound IP ranges

2023-12-01 Thread Benny Pedersen via mailop
Jeremy Jarry via mailop skrev den 2023-12-01 09:48: Hello all, Just to inform that we will warm up these new outbound IP ranges starting next Monday: where nothing works :=) 80.12.242.64/27, 193.252.23.208, 193.252.23.209, 193.252.23.216, 193.252.23.217, 193.252.23.218, 193.252.23.219,

Re: [mailop] Reaching out to GMAIL

2023-11-21 Thread Benny Pedersen via mailop
Ralf Hildebrandt via mailop skrev den 2023-11-21 12:44: And since it's the postfix-users mailinglist, we're dead sure it's not spam we're sending! only one From: header now, so sure its sys4.de now back to cloud9 solves it, where dkim was not breaked /me hiddes

Re: [mailop] fastmail and sender score snafu

2023-10-09 Thread Benny Pedersen via mailop
Bill Cole via mailop skrev den 2023-10-09 14:45: On 2023-10-09 at 03:46:08 UTC-0400 (Mon, 9 Oct 2023 07:46:08 +) Gellner, Oliver via mailop is rumored to have said: Postfix default of the maximum queue lifetime is 5 days: https://www.postfix.org/postconf.5.html#maximal_queue_lifetime One

Re: [mailop] Noticeable increase of spam emanating from Colocrossing?

2023-10-02 Thread Benny Pedersen via mailop
Jarosław Rafa via mailop skrev den 2023-10-02 11:38: Nobody takes UCEProtect seriously. Actually, it takes only a few spamming IPs in a wide IP range to get listed there. Many ISPs that are absolutely OK are listed in UCEProtect level 3. just use dnswl and abusic welcome-list before

Re: [mailop] Can someone at ptd.net and rcn.com please contact me

2023-09-09 Thread Benny Pedersen via mailop
Ken Robinson via mailop skrev den 2023-09-09 19:37: There is no spam content in the messages. MxToolbox shows that my mail server is not on any blacklists. to be unfair, dnsbl is not content :) proff of content checks is after-data test /me hiddes

Re: [mailop] hotmail.com SPF forgot IPv6

2023-08-19 Thread Benny Pedersen via mailop
Taavi Eomäe via mailop skrev den 2023-08-19 19:13: On 19/08/2023 13:16, Benny Pedersen via mailop wrote: if it was hardfails, lets not ignore domain owners, ever An SPF hardfail isn't sufficient for a reject or mark as spam either though. As previously mentioned, DKIM can be and should

Re: [mailop] hotmail.com SPF forgot IPv6

2023-08-19 Thread Benny Pedersen via mailop
John Levine via mailop skrev den 2023-08-18 23:37: Ah! Even better. We are pretty much on the same page then I expect. There's a whole lot of perfectly normal sending situations that SPF can't describe. (They mostly incude the words "relay" or "forward".) So if you reject on -all you'll aways

Re: [mailop] authentication hacks, I Need someone from AOL and/or Yahoo to contact me

2023-07-26 Thread Benny Pedersen via mailop
John Levine via mailop skrev den 2023-07-26 06:44: This is a very old idea. See https://en.wikipedia.org/wiki/POP_before_SMTP It's not clear who originally invented it. It may have been me. maybe before ipv4 nat was implemented where a single ipv4 could have millions of users in just one

Re: [mailop] SPF +all considered harmful

2023-07-11 Thread Benny Pedersen via mailop
Bill Cole via mailop skrev den 2023-07-11 19:01: On 2023-07-11 at 11:08:23 UTC-0400 (Tue, 11 Jul 2023 17:08:23 +0200) Benny Pedersen via mailop is rumored to have said: direct to mx will have spf pass without +all, on next hub envelope sender changes, so new spf problem when next hub forwards

Re: [mailop] SPF +all considered harmful

2023-07-11 Thread Benny Pedersen via mailop
Brandon Long via mailop skrev den 2023-07-11 18:50: I assumed most people had already tuned their systems to ignore +all or overly broad IP ranges, spammers abused that like a decade ago. so why did gmail.com add 30+ ipv4 when it could be simple as +all ? :) i did not count ipv6 on

Re: [mailop] SPF +all considered harmful

2023-07-11 Thread Benny Pedersen via mailop
Alessandro Vesely via mailop skrev den 2023-07-11 11:12: You need +all if you're after dmarc=pass. no not at all, direct to mx will have spf pass without +all, on next hub envelope sender changes, so new spf problem when next hub forwards mails, it does not need to be a maillist btw if

Re: [mailop] Listed on Polspam.pl - how to delist?

2023-06-26 Thread Benny Pedersen via mailop
Sebastian Nielsen via mailop skrev den 2023-06-26 10:39: It seems I have got listed on polspam.pl for some reason. I cannot find why, if there is some email that I sent that triggered something, or if someone accidentially pressed "Spam" instead of "Delete" which happens regularly. Theres no

Re: [mailop] [EXT] - Dkim fails, success on same email?

2023-06-20 Thread Benny Pedersen via mailop
Mark Alley via mailop skrev den 2023-06-20 19:05: You'll need to add the DKIM selector (and key) Sophos generated for you to your external DNS provider so that other receivers can resolve the key, which enables them to validate messages signed by your email filter. if sophos like to change

Re: [mailop] [EXTERNAL] Re: Strange mail delivery from microsoft

2023-06-20 Thread Benny Pedersen via mailop
Jay Hennigan via mailop skrev den 2023-06-20 17:46: On 6/19/23 13:55, Michael Wise via mailop wrote: If you're using GreyListing, know that a given email will not be coming from the same IP address twice. The outgoing IP address is randomized for ... reasons. Because if you reuse the same

Re: [mailop] Strange mail delivery from microsoft

2023-06-18 Thread Benny Pedersen via mailop
Klaus Ethgen via mailop skrev den 2023-06-18 18:53: I have tighten my firewall a bit and seen many attacks from Microsoft (40.92.0.0/16). They contact once from a IP and then never again. If I greylist them, the will try to deliver from a different address which gets greylisted again and so on.

Re: [mailop] Port 25 Pingback?

2023-06-16 Thread Benny Pedersen via mailop
Mike Hillyer via mailop skrev den 2023-06-16 19:48: Sources or hosts? I don’t expect a given host to answer on port 25 just because it sends, but the domain in the return path should be accepting mail properly. If they can’t be bothered to receive their DSNs then they are not likely a

Re: [mailop] When Will Outlook Rollout SRS for All of Their Email Servers? (For the sake of bimi)

2023-06-06 Thread Benny Pedersen via mailop
John Levine via mailop skrev den 2023-06-06 11:45: It appears that Al Iverson via mailop said: How long until Google, Yahoo, others stop accepting that forwarded mail from Microsoft, is another way to frame that. The problem is that you can't tell it's forwarded, since it comes from the same

Re: [mailop] When Will Outlook Rollout SRS for All of Their Email Servers? (For the sake of bimi)

2023-06-05 Thread Benny Pedersen via mailop
Mark Alley via mailop skrev den 2023-06-06 02:17: Last time it was reported to Microsoft, IIRC the individual got the response, "it's working as expected" as to the vulnerability that allows aligned SPF mail to be forwarded without SRS from any tenant. Realistically, DMARC and BIMI are working

Re: [mailop] Google Toolbox broken?

2023-06-02 Thread Benny Pedersen via mailop
John Levine via mailop skrev den 2023-06-03 00:34: If you mean the DKIM record, which one? It has quite a few. Authentication-Results mx.junc.eu (amavisd-new); dkim=fail (2048-bit key) reason="fail (message has been altered)" header.d=iecc.com header.b="paysHkcv"; dkim=fail (2048-bit key)

Re: [mailop] Google Toolbox broken?

2023-06-02 Thread Benny Pedersen via mailop
Taavi Eomäe via mailop skrev den 2023-06-02 10:23: Your DKIM TXT record seems valid, but does not specify the key type, looking at the length it should probably contain "k=rsa". Or they might not like you specifying acceptable hash algorithms. this is only needed if defaults is not ok, so it

Re: [mailop] Google Toolbox broken?

2023-06-02 Thread Benny Pedersen via mailop
Gellner, Oliver via mailop skrev den 2023-06-02 09:45: Hello, the Google admin toolbox claims our DKIM keys and MTA-STS entries are invalid. Example: https://toolbox.googleapps.com/apps/checkmx/check?domain=dm.de_selector=dmglobal4 reports "Invalid format of DKIM record" what errors

Re: [mailop] Noticed Google now suggests changing envelope sender for forwarding

2023-06-01 Thread Benny Pedersen via mailop
Robert L Mathews via mailop skrev den 2023-06-01 17:45: Maybe other people have noticed and discussed this and I'm just behind the times, but for more than a decade, Google specifically said: "Avoid changing the envelope sender when forwarding email to Gmail." lets use forged original sender,

Re: [mailop] Microsoft Office365 not rejecting emails when instructed so by SPF recored?

2023-05-24 Thread Benny Pedersen via mailop
John Levine via mailop skrev den 2023-05-24 19:50: same thing I checked with the guy who wrote the Null MX RFC and he is quite sure they're not the same thing. xpoint@tux ~ $ dig example.org txt ;; ANSWER SECTION: example.org.86400 IN TXT

Re: [mailop] Microsoft Office365 not rejecting emails when instructed so by SPF recored?

2023-05-24 Thread Benny Pedersen via mailop
Laura Atkins via mailop skrev den 2023-05-24 10:03: nullMX means the domain doesn’t receive mail. v=spf1 -all means the domain doesn’t send mail. When I’m working with clients who are setting up domains for not-email I recommend both as they address the issue from different directions. end

Re: [mailop] Microsoft Office365 not rejecting emails when instructed so by SPF recored?

2023-05-23 Thread Benny Pedersen via mailop
John Levine via mailop skrev den 2023-05-24 01:58: domains with this spf would possible know that spf is more weak then then rfc 7505 (nullMX) ? No, not at all. SPF -all says a domain doesn't sent mail. +1 if recipient check sender domain, its imho same thing if recipent do not check

Re: [mailop] Microsoft Office365 not rejecting emails when instructed so by SPF recored?

2023-05-23 Thread Benny Pedersen via mailop
Todd Herr via mailop skrev den 2023-05-23 20:54: Indeed, an email will only be rejected if it has DMARC setup as reject. There should be one exception to the rule of waiting till after DATA to check for a DMARC policy, and that's in the case of the following SPF record: "v=spf1 -all" It

Re: [mailop] Mailing lists, Apple and failing DKIM signatures

2023-05-22 Thread Benny Pedersen via mailop
Jim Popovitch via mailop skrev den 2023-05-22 23:12: You are the sole carrier of that "debate", and, despite many many previous attempts at correcting you, your assertions that the way Mailman replaces the From address somehow breaks *your* DKIM setup, is a hill that we all know you will die

Re: [mailop] Mailing lists, Apple and failing DKIM signatures

2023-05-22 Thread Benny Pedersen via mailop
Simon Arlott via mailop skrev den 2023-05-22 20:20: If you're running a mailing list that retains the original DKIM signatures [that will fail because the message subject and body have been modified] you might want to strip/hide them because it can cause Apple iCloud Mail to increment the spam

Re: [mailop] Mailing lists, Apple and failing DKIM signatures

2023-05-22 Thread Benny Pedersen via mailop
Jim Popovitch via mailop skrev den 2023-05-22 20:49: DO use Mailman's built-in DMARC mitigations for re-writing From for DMARC identified domains, including p=none. fine tool to break dkim, it would not help repeat why not break dkim, there would be endless debate why keep the problem, old

Re: [mailop] emailage.com ?

2023-04-24 Thread Benny Pedersen via mailop
Jasper Spaans via mailop skrev den 2023-04-24 10:44: Hello, We're seeing quite some postfix PREGREET errors in incoming smtp traffic from hosts claiming to be emailage.com (by lexisnexis). Does anyone know whether this is just a dressed up list washing service, or would it be worthwhile for our

Re: [mailop] gmail have missing ipv6 in spf

2023-04-01 Thread Benny Pedersen via mailop
Benny Pedersen via mailop skrev den 2023-04-01 12:15: are google staff here ?, in case 2a00:1450:4864:20:0:0:0:52a is giveing spf fail how to contact google with this ? note to self, remmember to check spamassassin is using Mail::SPF not just forged header results, ups gmail is ok mx

[mailop] gmail have missing ipv6 in spf

2023-04-01 Thread Benny Pedersen via mailop
are google staff here ?, in case 2a00:1450:4864:20:0:0:0:52a is giveing spf fail how to contact google with this ? ___ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop

Re: [mailop] Unbound configuration for DNSBL ?

2023-03-30 Thread Benny Pedersen via mailop
Slavko via mailop skrev den 2023-03-30 12:52: Dňa 30. marca 2023 10:11:32 UTC používateľ Benny Pedersen via mailop napísal: Cyril - ImprovMX via mailop skrev den 2023-03-30 09:30: I removed the usage of OpenDNS, and let Spamhaus know about this. I've also enabled qname-minimisation, we'll

Re: [mailop] Unbound configuration for DNSBL ?

2023-03-30 Thread Benny Pedersen via mailop
Raymond Dijkxhoorn via mailop skrev den 2023-03-30 12:30: Benny, I removed the usage of OpenDNS, and let Spamhaus know about this. I've also enabled qname-minimisation, we'll see if that helps. rbldnsd have no support for qname no one like to solve it Its not even that. +1 Most

Re: [mailop] Unbound configuration for DNSBL ?

2023-03-30 Thread Benny Pedersen via mailop
Cyril - ImprovMX via mailop skrev den 2023-03-30 09:30: I removed the usage of OpenDNS, and let Spamhaus know about this. I've also enabled qname-minimisation, we'll see if that helps. rbldnsd have no support for qname no one like to solve it

Re: [mailop] sender domain reputation

2023-03-22 Thread Benny Pedersen via mailop
John Levine via mailop skrev den 2023-03-22 16:53: He means the .pw TLD he was using. Oh, no wonder. I block it too. so you have none ham mail now from pw tld ? :) with is funny so you can still say pw is spam only ! ___ mailop mailing list

Re: [mailop] Not out of the office yet, quick heads up... High Russian Traffic..

2023-03-17 Thread Benny Pedersen via mailop
Michael Peddemors via mailop skrev den 2023-03-17 17:25: Oh, and a little blip from Linode ;) 66.228.47.53 1 66-228-47-53.ip.linodeusercontent.com 66.228.47.240 1 66-228-47-240.ip.linodeusercontent.com 143.42.167.1111

Re: [mailop] Contact Mimecast.com Postmaster - Sending Problems

2023-03-16 Thread Benny Pedersen via mailop
Nikolas Bauer via mailop skrev den 2023-03-16 11:32: SMTP error from remote server for RCPT TO command, host: au-smtp-inbound-2.mimecast.com (124.47.150.26) reason: 550 Administrative prohibition - envelope blocked - https://community.mimecast.com/docs/DOC-1369#550 [1]

Re: [mailop] warming up IPs, Microsoft?

2023-03-06 Thread Benny Pedersen via mailop
John R Levine via mailop skrev den 2023-03-06 18:55: Linode has a bunch of different IP address blocks and I would expect recipients to block the ones that send annoying amounts of spam. That's what I do. So as likely as not, you're just lucky that you don't have annoying neighbors. linode

Re: [mailop] h-email.net

2023-03-05 Thread Benny Pedersen via mailop
Jaroslaw Rafa via mailop skrev den 2023-03-05 20:45: It's obvious to check MX for *recipient* domain, but not for sender... reject_mumble_sender is very hard ?, you have it as recipient, hmmp :) tip dont accept mail for unknown domains, rfc 7505 does create this, but keeps domain valid for

Re: [mailop] Intuit directly spaming

2023-03-04 Thread Benny Pedersen via mailop
John Levine via mailop skrev den 2023-03-05 03:22: $ host -t txt 1.1.89.167.asn.routeviews.org 1.1.89.167.asn.routeviews.org descriptive text "11377" "167.89.0.0" "18" or free as in free, with ip2location sqlitedb created with a single php code loader, then anorher php to find results for

Re: [mailop] h-email.net

2023-03-04 Thread Benny Pedersen via mailop
Jaroslaw Rafa via mailop skrev den 2023-03-04 20:00: Dnia 3.03.2023 o godz. 22:21:28 John Levine via mailop pisze: Why isn't it just "v=spf1 -all" then? That's the most common way of indicating that a domain should never send mail... it would be more weak then rfc 7505 anyway, since not all

Re: [mailop] h-email.net

2023-03-04 Thread Benny Pedersen via mailop
Raymond Dijkxhoorn via mailop skrev den 2023-03-04 00:51: $ host -t txt h-email.net h-email.net descriptive text "v=spf1 ip6:fd96:1c8a:43ad::/48 -all" Disposable email services. 10minutemail[.]pro 10minutesmail[.]net And so on ... fd96: is bogus aswell, as in i like to see an email from

Re: [mailop] New member, trying to bring our mail server inline.

2023-03-03 Thread Benny Pedersen via mailop
Laura Atkins via mailop skrev den 2023-03-03 18:55: The message he sent to mailop had the selector I used and is also failing DKIM. mailop.org domain does not provide any dkim signed msgs, thats on propose from them imho, but spamassassin still see my signing an claims take over from header

Re: [mailop] Does gmail accept unicode character in From domain? I don't think so

2023-03-03 Thread Benny Pedersen via mailop
Alex Burch via mailop skrev den 2023-03-03 17:22: If John Jetmore is here, please merge that sucker! as in posting to public maillist with big html signature ? ___ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop

Re: [mailop] Does gmail accept unicode character in From domain? I don't think so

2023-03-02 Thread Benny Pedersen via mailop
Alex Burch via mailop skrev den 2023-03-03 00:38: I am using unicode in the From: not the MAIL FROM. Do you have to specify it SMTPUTF8 in the MAIL FROM to use it in the From header? I don't see anything about that here: https://www.rfc-editor.org/rfc/rfc6531 I was under the impression that if

Re: [mailop] Gmail blocking of good customer

2023-02-25 Thread Benny Pedersen via mailop
Luke via mailop skrev den 2023-02-26 04:15: I can assure you sendgrid retries 4xx. We also don't retry 4xx. We also retry 5xx. We also don't retry 5xx. How is it 2023 and people still think 4xx means retry and 5xx means don't retry? what books do you read ? maybe rfc 7505 is soon or later for

Re: [mailop] Gmail blocking of good customer

2023-02-25 Thread Benny Pedersen via mailop
Matt Palmer via mailop skrev den 2023-02-25 01:01: [Fixed TOFU] On Fri, Feb 24, 2023 at 03:57:00PM -0500, Christine Borgia via mailop wrote: On Fri, Feb 24, 2023 at 1:09 PM Benny Pedersen via mailop wrote: > Christine Borgia via mailop skrev den 2023-02-24 17:17: > > >

Re: [mailop] Gmail blocking of good customer

2023-02-25 Thread Benny Pedersen via mailop
Simon Greenwood via mailop skrev den 2023-02-24 22:09: This (which I didn't know) adds a whole different aspect to the issue - much has been said about how email is now centralised and is almost impractical to run as a small operator level, but if a company like Shopify and indeed Sendgrid

Re: [mailop] Gmail blocking of good customer

2023-02-25 Thread Benny Pedersen via mailop
Christine Borgia via mailop skrev den 2023-02-24 21:57: It is transient, but they are blocks and are not retried. Weird, right? proff from logs is ? others say this ip is not google but sendgrid simple "mailq" will show it ___ mailop mailing list

Re: [mailop] Gmail blocking of good customer

2023-02-24 Thread Benny Pedersen via mailop
Christine Borgia via mailop skrev den 2023-02-24 17:17: 421 4.7.0 [149.72.90.158 15] Our system has detected that this If someone could reach out to me, I'd greatly appreciate it. I'm not sure what to advise this customer except to say that email may not work for their business model. note

Re: [mailop] Should mailing list messages be DKIM signed? (ARC / DKIM)

2023-02-20 Thread Benny Pedersen via mailop
Alessandro Vesely via mailop skrev den 2023-02-20 08:47: The point of ARC is to report authentication results. A post having only spf=pass becomes unauthenticated after the first hop. inccorect, nexthop can use spf aswell, or not Right. Ditto for DMARC rejects/ quarantine, which I don't

Re: [mailop] Should mailing list messages be DKIM signed? (ARC / DKIM)

2023-02-18 Thread Benny Pedersen via mailop
Alessandro Vesely via mailop skrev den 2023-02-18 13:49: Mailman cannot verify SPF. envelope sender changes on nexthop, no ? so why is it important ? if you meant not to accept spf fail posters, this is still in mta stage to be enforced if wanted not to accept it

Re: [mailop] Should mailing list messages be DKIM signed? (ARC / DKIM)

2023-02-17 Thread Benny Pedersen via mailop
Tobias Herkula via mailop skrev den 2023-02-17 17:56: Only adding ARC without your own DKIM will make it harder for a lot of people, that are not yet ready to process ARC signatures. in ARC terms it always ORIGINATE on nexthub, but this rule is not for nexthub with DKIM sadly so many

Re: [mailop] Should mailing list messages be DKIM signed? (ARC / DKIM)

2023-02-17 Thread Benny Pedersen via mailop
Patrick Ben Koetter via mailop skrev den 2023-02-17 17:07: Greetings, I'm about to setup a new mailing list server. It will use Mailman 3, which is able to add ARC signatures to incoming messages. The lists will also rewrite the From:-header and to match the lists name and domain. I'm unsure

Re: [mailop] How to get Google to set a null MX for gmail.co ?

2023-02-16 Thread Benny Pedersen via mailop
Alex Irimia via mailop skrev den 2023-02-16 21:05: If your MTA allows you to, maybe you could overwrite gmail.co [2] to gmail.com [1] and actually reach the intended recipient of the fat-fingered sender? small fingers can do errors aswell please dont suggest this

Re: [mailop] How to get Google to set a null MX for gmail.co ?

2023-02-16 Thread Benny Pedersen via mailop
Tom Perrine via mailop skrev den 2023-02-16 20:21: Perfect, thanks! I bet they have an entire slew of those sorts of domains. I guess I’m not the only person who thinks it’s a good idea and I’m not a complete moron today (as opposed to other days!)

Re: [mailop] How to get Google to set a null MX for gmail.co ?

2023-02-16 Thread Benny Pedersen via mailop
Matthew Pounsett via mailop skrev den 2023-02-16 20:03: On Thu, Feb 16, 2023 at 12:03 PM Tom Perrine via mailop wrote: Any idea who/how to suggest to Google that a null MX would be appreciated? I spoke to someone who may be able to get it done at the DNS-OARC workshop, which is going on

Re: [mailop] DKIM record IONOS

2023-02-10 Thread Benny Pedersen via mailop
H via mailop skrev den 2023-02-10 01:41: If anyone could set me straight, it would be greatly appreciated. never use cname for content that is to be dnssec, even if your domain is not dnssec yet, it should not be used, opendkim use dnssec, but many testers seem to not do the validate

Re: [mailop] [External] Re: Question of SPF record

2023-02-05 Thread Benny Pedersen via mailop
Kevin A. McGrail via mailop skrev den 2023-02-06 02:34: To add onto this, rarely will you want to divine the IP addresses of your service providers. Contact them for their include record. From searching the interweb, it seems these are likely what you want: _ _include:_spf.perfora.net

Re: [mailop] Question of SPF record

2023-02-05 Thread Benny Pedersen via mailop
H via mailop skrev den 2023-02-06 01:13: I have a domain with multiple email addresses hosted by Ionos. I have found that outgoing emails can come from a range of Ionos email IPs. I have created a TXT record for my domain containing one IP4 address but outgoing emails seem to be sent from

Re: [mailop] Anyone from Spamhaus?

2023-01-19 Thread Benny Pedersen via mailop
Mark Fletcher via mailop skrev den 2023-01-20 05:20: Hi All, Over the past couple of days, the two servers that send email for groups.io [1], 66.175.222.12 and 66.175.222.108, have been listed on the Spamhaus CSS blacklist a couple times each. We're an email groups hosting service, like Google

Re: [mailop] gmail putting most messages into Spam

2023-01-18 Thread Benny Pedersen via mailop
John Levine via mailop skrev den 2023-01-18 23:00: It appears that Jaroslaw Rafa via mailop said: Dnia 18.01.2023 o godz. 07:39:48 Mark Alley via mailop pisze: Woops, sorry, wrong link pasted. That's the sender guidelines - while still helpful, was not what I was trying to send. The eu.org

  1   2   >