Re: [Mailman-Users] New Problems with AOL & DMARC

2018-01-05 Thread Richard Damon

On 1/5/18 11:19 PM, Mark Sapiro wrote:

On 01/05/2018 08:09 PM, Richard Damon wrote:

Sounds like its off to the host provider and see if they did something
recently.


I suspect some problem with the dnspython package. If you can run Python
in a shell, you can try

import dns.resolver

If that works, then the issue is something else, but if it fails, it
doesn't necessarily mean that the Python instance that Mailman uses
can't do it.

The host can check Mailman's logs for the things I mentioned.

Unfortunately, they run Mailman on dedicated machines separate from the 
web hosting machines, so I can't run the test on that machine. I have 
forwarded your notes in a trouble ticket.


--
Richard Damon

--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org


Re: [Mailman-Users] New Problems with AOL & DMARC

2018-01-05 Thread Mark Sapiro
On 01/05/2018 08:09 PM, Richard Damon wrote:
> 
> Sounds like its off to the host provider and see if they did something
> recently.


I suspect some problem with the dnspython package. If you can run Python
in a shell, you can try

import dns.resolver

If that works, then the issue is something else, but if it fails, it
doesn't necessarily mean that the Python instance that Mailman uses
can't do it.

The host can check Mailman's logs for the things I mentioned.

-- 
Mark Sapiro The highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan
--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org


Re: [Mailman-Users] New Problems with AOL & DMARC

2018-01-05 Thread Richard Damon

On 1/5/18 10:55 PM, Mark Sapiro wrote:

On 01/05/2018 07:31 PM, Richard Damon wrote:

I use Mailman versioon 2.1.25 on a shared host, and in the past couple
of days, something seems to have changed, as posts from AOL users are no
longer getting their from address munged like they were a week ago, and
I am getting massive bounces for DMARC rejection when a poster from AOL
posts.

Has something changed with their settings, and is their anything I can
do about it?

$ dig txt _dmarc.aol.com
...
;; ANSWER SECTION:
_dmarc.aol.com. 3600IN  TXT "v=DMARC1; p=reject; pct=100;
rua=mailto:d...@rua.agari.com; ruf=mailto:d...@ruf.agari.com;";

So, they are still publishing p=reject, and in any case if their policy
changed so dmarc_moderation_action wasn't being applied, the mail
wouldn't bounce for DMARC either.


First, ensure that the list's Privacy options... -> Sender filters ->
dmarc_moderation_action is Mung From.

Assuming it is, if you have access to Mailman's logs, check the 'error'
log for messages like 'DNS lookup for dmarc_moderation_action for list
 not available' which means that

import dns.resolver
from dns.exception import DNSException

(from the dnspython package) failed. Also look for messages containing
DNSException or DMARC.

Check the 'vette' log for messages like

': DMARC lookup for u...@aol.com (_dmarc.yahoo.com) found
p=reject in _dmarc.yahoo.com. = v=DMARC1; p=reject; pct=100;
rua=mailto:dmarc_y_...@yahoo.com;'

which would indicate that the lookups are being done.

Just a user on a shared host, so no access to logs or the like, thought 
I would check here before raising issue with Host in case it was a know 
issue.


Haven't touched these settings in a long time:

dmarc_moderation_action is Munge From, which had been working just a few 
days ago, and stopped.



Sounds like its off to the host provider and see if they did something 
recently.


--
Richard Damon

--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org


Re: [Mailman-Users] New Problems with AOL & DMARC

2018-01-05 Thread Mark Sapiro
On 01/05/2018 07:31 PM, Richard Damon wrote:
> I use Mailman versioon 2.1.25 on a shared host, and in the past couple
> of days, something seems to have changed, as posts from AOL users are no
> longer getting their from address munged like they were a week ago, and
> I am getting massive bounces for DMARC rejection when a poster from AOL
> posts.
> 
> Has something changed with their settings, and is their anything I can
> do about it?

$ dig txt _dmarc.aol.com
...
;; ANSWER SECTION:
_dmarc.aol.com. 3600IN  TXT "v=DMARC1; p=reject; pct=100;
rua=mailto:d...@rua.agari.com; ruf=mailto:d...@ruf.agari.com;";

So, they are still publishing p=reject, and in any case if their policy
changed so dmarc_moderation_action wasn't being applied, the mail
wouldn't bounce for DMARC either.


First, ensure that the list's Privacy options... -> Sender filters ->
dmarc_moderation_action is Mung From.

Assuming it is, if you have access to Mailman's logs, check the 'error'
log for messages like 'DNS lookup for dmarc_moderation_action for list
 not available' which means that

import dns.resolver
from dns.exception import DNSException

(from the dnspython package) failed. Also look for messages containing
DNSException or DMARC.

Check the 'vette' log for messages like

': DMARC lookup for u...@aol.com (_dmarc.yahoo.com) found
p=reject in _dmarc.yahoo.com. = v=DMARC1; p=reject; pct=100;
rua=mailto:dmarc_y_...@yahoo.com;'

which would indicate that the lookups are being done.

-- 
Mark Sapiro The highway is for gamblers,
San Francisco Bay Area, Californiabetter use your sense - B. Dylan
--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org


[Mailman-Users] New Problems with AOL & DMARC

2018-01-05 Thread Richard Damon
I use Mailman versioon 2.1.25 on a shared host, and in the past couple 
of days, something seems to have changed, as posts from AOL users are no 
longer getting their from address munged like they were a week ago, and 
I am getting massive bounces for DMARC rejection when a poster from AOL 
posts.


Has something changed with their settings, and is their anything I can 
do about it?


--
Richard Damon

--
Mailman-Users mailing list Mailman-Users@python.org
https://mail.python.org/mailman/listinfo/mailman-users
Mailman FAQ: http://wiki.list.org/x/AgA3
Security Policy: http://wiki.list.org/x/QIA9
Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/
Unsubscribe: 
https://mail.python.org/mailman/options/mailman-users/archive%40jab.org