On Sat, Apr 26, 2014 at 2:24 AM, Stephen J. Turnbull <step...@xemacs.org> wrote: > Jim Popovitch writes: > > > TBH, I'm not sure what else there is to look for. :-) GMail, every so > > often, is telling my Mailman that it needs to Auth in order to reflect > > From:gmail to other gmail customers. It's like DMARC without > > following the DMARC standard (GMail has a p=none policy). > > Is it possible that those users are using their GMail address from a > non-Google host? That would explain the intermittent nature of the > challenge -- it doesn't have the GMail DKIM signature that identifies > GMail-from-GMail messages. And it would also explain why it "looks > like" DMARC, since DKIM is one of the underlying protocols used to > implement DMARC.
I strip any existing inbound sigs. The GMail senders were using GMail web interface. This looks more and more like a lazy DNS issue, as the MX for GMail has flip-flopped over the past ~24 hours. I honestly think that GMail rotated in a wrong server...the only other possibility is that powerdns cached a record beyond it's TTL. -Jim P. ------------------------------------------------------ Mailman-Users mailing list Mailman-Users@python.org https://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://wiki.list.org/x/AgA3 Security Policy: http://wiki.list.org/x/QIA9 Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: https://mail.python.org/mailman/options/mailman-users/archive%40jab.org
