On 22.04.24 10:00, Marco Moock via mailop wrote:
Google makes forwarding really hard. They want you to set up ARC.
https://support.google.com/a/answer/13198639?sjid=6036584522181943107-EU
I know this is nasty, but this are Google's rules.
Forwarded mails will always have an SPF failure, DKIM will be valid.
On 22.04.24 10:39, Matus UHLAR - fantomas via mailop wrote:
The (ugly but working) possibility is to rewrite From: address to one
@uni-potsdam.de and dkim-sign that one.
It's the same mechanism this mailing list uses to deliver mail.
On 22.04.24 11:03, Laurent S. via mailop wrote:
Implementing ARC is the best long term solution, but I understand it's hard.
@Matus, rewriting From and DKIM is only necessary if you change anything
to the mail that would make the original DKIM fail (changing subject or
adding a disclaimer in the body). If you don't, then leaving DKIM and
header From intact is probably better.
It's also necessary if the From: domain nas no DKIM signature and DMARC
policy is set to quarantine/reject, or the recipient enforces similar
restrictions (e.g. gmail)
... and this seems to be OP's problem, since the DKIM did not pass.
What I would rather recommend to change is the envelope MAIL FROM. If you
switch it to a @uni-potsdam.de including some SRS magic, that should cover
most issues.
But In this case, envelope sender domain is different from domain in header
From: and then SPF checks don't apply to DMARC.
So, if you want to have proper DKIM, you must set From: to your domain and
DKIM-sign it.
It's an ugly solution but it may work, at least I made it work already.
But then again, ARC is better longer term.
I'm afraid this is very long term solution - the recipient needs to
trust your ARC signatures.
Yes, it's worth trying.
You can still combine both and try once in a while if the ARC is enough.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Fighting for peace is like fucking for virginity...
_______________________________________________
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop
