Re: [swinog] Handling of UCE / RBL while minor misconfigurations

2020-10-27 Diskussionsfäden Jeroen Massar
On 2020-10-27 13:15, Gert Doering wrote: Hi, On Tue, Oct 27, 2020 at 01:00:59PM +0100, Jeroen Massar wrote: Making sure one only egress mail that one is supposed to send (SPF/DKIM/DMARC/ARC) is the only way to do that and would mean being a good citizen on the Internet, Much easier said than

Re: [swinog] Handling of UCE / RBL while minor misconfigurations

2020-10-27 Diskussionsfäden Jeroen Massar
On 2020-10-27 09:04, Gert Doering wrote: Hi, On Tue, Oct 27, 2020 at 08:40:39AM +0100, Jeroen Massar wrote: Mail server admin can do a SPF check (or have a list of allowed source email domains) before outbound and reject forwarding these emails. I read this and I wonder "which of the MTAs

Re: [swinog] Handling of UCE / RBL while minor misconfigurations

2020-10-27 Diskussionsfäden Gert Doering
Hi, On Tue, Oct 27, 2020 at 01:00:59PM +0100, Jeroen Massar wrote: > Making sure one only egress mail that one is supposed to send > (SPF/DKIM/DMARC/ARC) is the only way to do that and would mean being a > good citizen on the Internet, Much easier said than done... > which is why lists like

Re: [swinog] Handling of UCE / RBL while minor misconfigurations

2020-10-27 Diskussionsfäden Jeroen Massar
On 2020-10-27 08:01, Silvan M. Gebhardt wrote: I assume this swiss provider has never allowed any customer to leave. Every customer who changes DNS providers becuase their marketing decides on a new website and not telling anyone and then their marketing department hijacking the DNS, and

Re: [swinog] Handling of UCE / RBL while minor misconfigurations

2020-10-27 Diskussionsfäden Jeroen Massar
On 2020-10-27 00:01, Mueller Urs SBB CFF FFS wrote: Thank you guys well, technically, they (UCEProtect) are correct. If an IP sends a mail with the From: header indicating a domain for which an SPF record exists, and the sending IP is not supposed to send it, then it is a misconfiguration

Re: [swinog] Handling of UCE / RBL while minor misconfigurations

2020-10-27 Diskussionsfäden Markus Wild
> well, technically, they (UCEProtect) are correct. Sure, if I shoehorn my own rules, I can almost guarantee that _I_ will be compliant. That doesn't make them any more relevant though. > If an IP sends a mail with the From: header indicating a domain for > which an SPF record exists, and

Re: [swinog] Handling of UCE / RBL while minor misconfigurations

2020-10-27 Diskussionsfäden Markus Ritzmann
> Mail server admin can do a SPF check (or have a list of allowed source > email domains) before outbound and reject forwarding these emails. You can check this before you allow the domain to be sent. However, I don't know of any mail server/MTA that can do this out-of-the-box. And note also:

Re: [swinog] Handling of UCE / RBL while minor misconfigurations

2020-10-27 Diskussionsfäden Gert Doering
Hi, On Tue, Oct 27, 2020 at 08:40:39AM +0100, Jeroen Massar wrote: > Mail server admin can do a SPF check (or have a list of allowed source > email domains) before outbound and reject forwarding these emails. I read this and I wonder "which of the MTAs out there can do that" - that is, check

Re: [swinog] Handling of UCE / RBL while minor misconfigurations

2020-10-27 Diskussionsfäden Silvan M. Gebhardt
I assume this swiss provider has never allowed any customer to leave. Every customer who changes DNS providers becuase their marketing decides on a new website and not telling anyone and then their marketing department hijacking the DNS, and forgetting that they run some mailing via some