Re: Dadamail Bridge and DMARC

 
From: "Moshe Katz" <moshe@PROTECTED>
Date: April 9th 2014
Even better, not only did Yahoo "break the Internet", they apparently even broke their own Yahoo Groups service!

Moshe

--
Moshe Katz
-- moshe@PROTECTED
-- +1(301)867-3732


On Tue, Apr 8, 2014 at 10:23 PM, Justin J <justin@PROTECTED> wrote:

Yeah, Yahoo just basically broke the Internet,

        http://www.itworld.com/security/413581/yahoo-email-anti-spoofing-policy-breaks-mailing-lists

        http://www.ietf.org/mail-archive/web/ietf/current/msg87153.html

Hopefully, they'll figure out how foolish they are.

You may want to think about using, "p.p. mode" in Bridge - came out around v6.8. It was initially put in, so that you could run a mailing list with Amazon SES - you need to authenticate all mail senders w/SES, which is unrealistic for a discussion mailing list.

It may work in your case as well, since your member's yahoo addresses won't be in the From: header at all, so the DMARC stuff shouldn't be triggered.

--

Justin J: Lead Dadaist.
url:         http://dadamailproject.com
email:    justin@PROTECTED
twitter:  @dadamail
skype:   leaddadaist

Dada Mail Announcements:
http://dadamailproject.com/cgi-bin/dada/mail.cgi/list/dada_announce/






On Apr 8, 2014, at 8:07 PM, OCO Admin <oco_admin@PROTECTED> wrote:

>
> Hello,
>
> I am using Dadmail to run a small mailing list for a community
> orchestra. I am using the Bridge plugin so that all members can
> communicate quickly with the entire orchestra. This has been working
> well, but I recently ran into a problem that I am not sure how to solve.
>
> One of the subscribed members used his yahoo.com email address to send
> an email to the discussion list. The list had about 25 subscribers and
> the list admin (me) received bounce backs from all the subscribers with
> @gmail.com, @yahoo.com, @sympatico.com or @hotmail.com addresses. Each
> bounce back said the same thing: the email from the original sender
> @yahoo.com did not originate from yahoo and Yahoo has a DMARC policy to
> reject all emails that do not originate from yahoo.com domain.
>
> It took a few hours to figure out what was going on. My domain does have
> SPF and DKIM setup, but the problem is that the domain in the From:
> field was yahoo.com and not ottawachamberorchestra.com.
>
> So I started looking at options to rewrite the From: field. I am using
> Dadamail 6.5.2 and only the Announce-Only List Options would allow me to
> rewrite the From: header. Would it make sense to add this option to the
> Bridge Plugin? The header rewrite could look something like "original
> sender via domain" <list@domain> as suggested by
> http://dmarc.org/faq.html#s_22
>
> So does this make sense? Has anyone else had problems like this? Is
> there another solution that allows my subscribers to use their yahoo.com
> email addresses that I missed?
>
> Thank you
>
> Konrad
>
>
> --
>
> * Post:              mailto:dadadev@PROTECTED
> * Unsubscribe: http://dadamailproject.com/cgi-bin/dada/mail.cgi/t/REMOVED/



--

* Post:              mailto:dadadev@PROTECTED
* Unsubscribe: http://dadamailproject.com/cgi-bin/dada/mail.cgi/t/REMOVED/=

Post: mailto:dadadev@PROTECTED

Unsubscribe »

  • This mailing list is a public mailing list - anyone may join or leave, at any time.
  • This mailing list is a group discussion list (unmoderated)
  • Start a new thread, email: dadadev@dadamailproject.com

This is the developer discussion mailing list for Dada Mail.

If you are just looking for support Dada Mail, consult the message boards at:

https://forum.dadamailproject.com

Documentation for Dada Mail:

https://dadamailproject.com/d

Specifically, see the Error FAQ:

https://dadamailproject.com/d/FAQ-errors.pod.html

To post to this list, send a message to:

mailto:dadadev@dadamailproject.com

All subscribers of this list may post to the list itself.

Topics that are welcome:

  • Constructive critiques on the program (I like, "x", but, "y" needs some work - here's an idea on how to make this better...)
  • Bug/Error reports
  • Bug fixes
  • Request For Comments on any changes to the program
  • Help customizing Dada Mail for your own needs
  • Patches
  • Language Translations
  • Support Documentation/Doc editing, FAQ's, etc.
  • Discussion of any changes that you would like to be committed to the next version of Dada Mail -

Dada Mail is on Github:

https://github.com/justingit/dada-mail/

If you would like to fork, branch, send over PRs, open up issues, etc.

Privacy Policy:

This Privacy Policy is for this mailing list, and this mailing list only.

Email addresses collection through this mailing list are used explicitly to work within this email discussion list.

We only collect email addresses through our Closed-Loop Opt-In system.

We don't use your email address for any other purpose.

We won't be sharing your email address with any other entity.

Unsubscription can be done at any time. Please contact us at: justin@dadamailproject.com for any help regarding your subscription, including removal from the mailing list.

All mailing list messages sent from us will include a subscription removal link, which will allow you to remove yourself from this mailing list automatically, and permanently.

All consent to use your email address for any other purpose stated at the time of the mailing list subscription will also be revoked upon mailing list removal.