On 04/29/2014 06:46 PM, Robert Heller wrote: > > Actually probably not. I think the giveaway is the presense of the various > list specific headers (X-Mailman-Version:, List-Id:, List-Unsubscribe:, > List-Archive:, List-Post:, List-Help:, and List-Subscribe:). In other words, > they are using a *smart* filtering program, and not some dumb clueless test.
Actually, I tested with a list message with a yahoo.com from with no RFC 2369 List-* headers added and it still went through to a gmail recipient, even though a non-list message from the same server with a yahoo.com from was rejected for DMARC policy by gmail. And think about it. If it were based on the presence of various headers, how long to you think it would take the black hats to figure out what they were and just put those headers into their phishing mails? -- Mark Sapiro <m...@msapiro.net> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan ------------------------------------------------------ Mailman-Users mailing list Mailman-Users@python.org https://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://wiki.list.org/x/AgA3 Security Policy: http://wiki.list.org/x/QIA9 Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: https://mail.python.org/mailman/options/mailman-users/archive%40jab.org
