Re: [mailop] RoadRunner Help?

[John Levine]

In article <32db9480-1666-d007-4d83-976d891e2...@linuxmagic.com> you write:
>> It's not really wise to use non-obfuscated return paths when using
>> VERP. If it's easily decodable, a goofball could spin up fake ones to
>> try to get 'em logged as legitimate bounces and inhibit future
>> delivery of certain messages to certain recipients. Is it
>> common/likely?

That seems quite a stretch.  Has it ever happened in the history of the 
Internet?

If I wanted to harass someone by mail I can think of about a million
better ways to do it.  You'd need a lot of detailed knowledge about a
particular mailer to spoof bounce someone off their lists, and then
it'd just be that mailer, or as likely as not just one list.  If you
really thought that was a problem, you could put a two letter checksum
into the VERP along the lines of BATV.


>IMHO, using VERP for a confirmed double-optin mailing lists can be
>understandable, but in that case, the list itself is very specific.
>But even then, a non VERP MAIL FROM is much preferable..  
>(eg Return-Path:  )

Preferable for what?  VERP makes it much easier to figure out what
address is causing the bounces so if there's enough of them you know
who to remove.

R's,
John

___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Re: [mailop] RoadRunner Help?

[Michael Peddemors]

On 18-02-14 12:25 PM, Al Iverson wrote:

On Wed, Feb 14, 2018 at 3:06 PM, Michael Peddemors
 wrote:

Yes, stop using obfuscated MAIL FROM's 


It's not really wise to use non-obfuscated return paths when using
VERP. If it's easily decodable, a goofball could spin up fake ones to
try to get 'em logged as legitimate bounces and inhibit future
delivery of certain messages to certain recipients. Is it
common/likely? No, but I don't want to be the first to experience it.
It's yet another place you wouldn't want to intentionally expose PII.



Hi Al,

IMHO, using VERP for a confirmed double-optin mailing lists can be 
understandable, but in that case, the list itself is very specific.

But even then, a non VERP MAIL FROM is much preferable..
(eg Return-Path:  )

However many ESP's use VERP for all of their lists, with no 
differentiation at all.


(eg Return-Path: 

Re: [mailop] Another Nasty surprise leaking out Google Mail..

[Brandon Long via mailop]

Yay for DMARC avoidance having a field day with automatic address books ;)

Brandon


On Fri, Feb 16, 2018 at 1:30 PM Michael Peddemors 
wrote:

> {SORRY}
>
> That was meant to be offlist..
>
> On 18-02-16 01:11 PM, Michael Peddemors wrote:
> > Had a bunch of reports of this one slipping by our protections..
> > Judging by the volume of reports, you might want to see how this one
> > snuck out.. Our team is putting a rule specific for this one right away,
> > because the weekend is coming up. Looks like a new pattern/method..
> >
> > Have a great weekend..
> >
> > X-Google-Smtp-Source:
> >
> AH8x227XMYO2Gaym+5oZ365mrhZ0nYpOs2NMLbJ/22978FbowvXo13CRozzZulr5BKgSmhK4tnlt2rzrMLowlLgcNu8=
> >
> > X-Received: by 10.159.53.208 with SMTP id
> u16mr5227491uad.18.1518798124857;
> >   Fri, 16 Feb 2018 08:22:04 -0800 (PST)
> > MIME-Version: 1.0
> > Received: by 10.103.118.135 with HTTP; Fri, 16 Feb 2018 08:22:04 -0800
> > (PST)
> > From: American Express Update Services
> > 
> > Date: Fri, 16 Feb 2018 23:22:04 +0700
> > Message-ID:
> > 
> > Subject: REMINDER: Unable to process membership
> > To: undisclosed-recipients: ;
> >
> > Attachment name: LoginMembership365.pdf
> >
>
>
>
> --
> "Catch the Magic of Linux..."
> 
> Michael Peddemors, President/CEO LinuxMagic Inc.
> Visit us at http://www.linuxmagic.com @linuxmagic
> A Wizard IT Company - For More Info http://www.wizard.ca
> "LinuxMagic" a Registered TradeMark of Wizard Tower TechnoServices Ltd.
> 
> 604-682-0300 Beautiful British Columbia, Canada
>
> This email and any electronic data contained are confidential and intended
> solely for the use of the individual or entity to which they are addressed.
> Please note that any views or opinions presented in this email are solely
> those of the author and are not intended to represent those of the company.
>
> ___
> mailop mailing list
> mailop@mailop.org
> https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
>
___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Re: [mailop] Another Nasty surprise leaking out Google Mail..

[Michael Peddemors]

{SORRY}

That was meant to be offlist..

On 18-02-16 01:11 PM, Michael Peddemors wrote:

Had a bunch of reports of this one slipping by our protections..
Judging by the volume of reports, you might want to see how this one 
snuck out.. Our team is putting a rule specific for this one right away, 
because the weekend is coming up. Looks like a new pattern/method..


Have a great weekend..

X-Google-Smtp-Source: 
AH8x227XMYO2Gaym+5oZ365mrhZ0nYpOs2NMLbJ/22978FbowvXo13CRozzZulr5BKgSmhK4tnlt2rzrMLowlLgcNu8= 


X-Received: by 10.159.53.208 with SMTP id u16mr5227491uad.18.1518798124857;
  Fri, 16 Feb 2018 08:22:04 -0800 (PST)
MIME-Version: 1.0
Received: by 10.103.118.135 with HTTP; Fri, 16 Feb 2018 08:22:04 -0800 
(PST)
From: American Express Update Services 


Date: Fri, 16 Feb 2018 23:22:04 +0700
Message-ID: 


Subject: REMINDER: Unable to process membership
To: undisclosed-recipients: ;

Attachment name: LoginMembership365.pdf





--
"Catch the Magic of Linux..."

Michael Peddemors, President/CEO LinuxMagic Inc.
Visit us at http://www.linuxmagic.com @linuxmagic
A Wizard IT Company - For More Info http://www.wizard.ca
"LinuxMagic" a Registered TradeMark of Wizard Tower TechnoServices Ltd.

604-682-0300 Beautiful British Columbia, Canada

This email and any electronic data contained are confidential and intended
solely for the use of the individual or entity to which they are addressed.
Please note that any views or opinions presented in this email are solely
those of the author and are not intended to represent those of the company.

___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

[mailop] Another Nasty surprise leaking out Google Mail..

[Michael Peddemors]

Had a bunch of reports of this one slipping by our protections..
Judging by the volume of reports, you might want to see how this one 
snuck out.. Our team is putting a rule specific for this one right away, 
because the weekend is coming up. Looks like a new pattern/method..


Have a great weekend..

X-Google-Smtp-Source: 
AH8x227XMYO2Gaym+5oZ365mrhZ0nYpOs2NMLbJ/22978FbowvXo13CRozzZulr5BKgSmhK4tnlt2rzrMLowlLgcNu8=

X-Received: by 10.159.53.208 with SMTP id u16mr5227491uad.18.1518798124857;
 Fri, 16 Feb 2018 08:22:04 -0800 (PST)
MIME-Version: 1.0
Received: by 10.103.118.135 with HTTP; Fri, 16 Feb 2018 08:22:04 -0800 (PST)
From: American Express Update Services 


Date: Fri, 16 Feb 2018 23:22:04 +0700
Message-ID: 


Subject: REMINDER: Unable to process membership
To: undisclosed-recipients: ;

Attachment name: LoginMembership365.pdf

--
"Catch the Magic of Linux..."

Michael Peddemors, President/CEO LinuxMagic Inc.
Visit us at http://www.linuxmagic.com @linuxmagic
A Wizard IT Company - For More Info http://www.wizard.ca
"LinuxMagic" a Registered TradeMark of Wizard Tower TechnoServices Ltd.

604-682-0300 Beautiful British Columbia, Canada

This email and any electronic data contained are confidential and intended
solely for the use of the individual or entity to which they are addressed.
Please note that any views or opinions presented in this email are solely
those of the author and are not intended to represent those of the company.

___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Re: [mailop] Yahoo Mail Servers having new issues?

[Alexander Burch]

Oh jeez, you are right. Donk! Thank you

Thanks,
Alex


Alex Burch
ActiveCampaign / Deliverability Lead
(800) 357-0402
abu...@activecampaign.com
1 N. Dearborn St., Chicago , Il 60602, United States



___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Re: [mailop] Yahoo Mail Servers having new issues?

[Jeremy Harris]

On 16/02/18 15:50, Alexander Burch wrote:
> Essentially, Yahoo just quits the connection after EHLO. 

I don't think so:

> 2018-02-16 09:45:22 starting
> 2018-02-16 09:45:22 connecting from s1.asa1.acemsd4.com (192.92.97.137) to
> mta6.am0.yahoodns.net (98.136.101.117)
> 2018-02-16 09:45:22 connected from 192.92.97.137:47164
> 2018-02-16 09:45:22 >>> 220 mta4234.mail.gq1.yahoo.com ESMTP ready
> 2018-02-16 09:45:22 <<< EHLO s1.asa1.acemsd4.com

yahoo's banner, your EHLO...

[...]
> 2018-02-16 09:45:22 <<< QUIT

Your QUIT.

-- 
Cheers,
  Jeremy

___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

[mailop] Bigpond Postmaster Contact

[Mohammed Ahmed]

I am trying to find some Postmaster from Bigpond.com. ab...@bigpond.com
accepting mail but not getting any response.  I tried
tm-postmas...@online.telstra.com.au but to no avail.  Please contact me
off-list.

Thanks,

-- 

Mohammed Ahmed
Director, Deliverability
Phone # 1-877-AWeber-1 ext 813

*https://www.aweber.com/email-automation.htm?utm_source=awemail_medium=email_campaign=awteam_content=awteamsign_automations
*
___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

[mailop] Telefonica Postmaster contact

[Udeme Ukutt]

Please if there's a Telefonica Postmaster, kindly contact me off-list.

TIA,

Udeme
Postmaster at Wish
___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

[mailop] Yahoo Mail Servers having new issues?

[Alexander Burch]

This is an old thread but seems to be an ever present issue, at least for
us.

Essentially, Yahoo just quits the connection after EHLO. This happens very
often on certain IPs. The basic dialogue is below. Has anyone ever
determined why Yahoo does this? Is it a reputation issue? Opening too many
connections or sending to fast? It seems like historically Yahoo support
has not been able to help with this if I'm reading correctly. What to do
then?

2018-02-16 09:45:22 starting
2018-02-16 09:45:22 connecting from s1.asa1.acemsd4.com (192.92.97.137) to
mta6.am0.yahoodns.net (98.136.101.117)
2018-02-16 09:45:22 connected from 192.92.97.137:47164
2018-02-16 09:45:22 >>> 220 mta4234.mail.gq1.yahoo.com ESMTP ready
2018-02-16 09:45:22 <<< EHLO s1.asa1.acemsd4.com
2018-02-16 09:45:22 >>> 250-mta4234.mail.gq1.yahoo.com
2018-02-16 09:45:22 >>> 250-PIPELINING
2018-02-16 09:45:22 >>> 250-SIZE 41943040
2018-02-16 09:45:22 >>> 250-8BITMIME
2018-02-16 09:45:22 >>> 250 STARTTLS
2018-02-16 09:45:22 <<< STARTTLS
2018-02-16 09:45:22 >>> 220 2.0.0 Start TLS
2018-02-16 09:45:22 tls:TLS*HA256
2018-02-16 09:45:22 tls:Cert: /C=U***Cert SH***d=no
2018-02-16 09:45:22 <<< EHLO s1.asa1.acemsd4.com
2018-02-16 09:45:22 >>> 250-mta4234.mail.gq1.yahoo.com
2018-02-16 09:45:22 >>> 250-PIPELINING
2018-02-16 09:45:22 >>> 250-SIZE 41943040
2018-02-16 09:45:22 >>> 250 8BITMIME
2018-02-16 09:45:22 <<< QUIT
2018-02-16 09:45:22 >>> 221 2.0.0 Bye
2018-02-16 09:45:22 closed mta6.am0.yahoodns.net (98.136.101.117) in=256
out=68
2018-02-16 09:45:22 done


Thanks,
Alex


Alex Burch
ActiveCampaign / Deliverability Lead
(800) 357-0402
abu...@activecampaign.com
1 N. Dearborn St., Chicago , Il 60602, United States



___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Re: [mailop] Issues With the way Google Groups unsubscribe is used in headers..

[Rich Kulawiec]

On Fri, Feb 09, 2018 at 03:01:41PM +0100, Philip Paeps wrote:
> It would be nice if the Google Groups would "confirm opt-in" like other
> mailing lists.

It's been a best practice since before Google (and many of its employees)
existed, so: yes.  Having run all kinds of mailing lists of all sizes
for all kinds of populations over several decades, I know that there is
absolutely no problem of any kind with it.  Yes, some people struggle
with the concept, but nearly all of them are educable -- and that's
part of the responsibility of running a mailing list.  (And the few
that aren't?   Experience, long bitter experience, shows that they're
probably not people you want on your mailing list anyway.  But if you
must, then just grit your teeth and make it work.  It's part of the job.)

Running a mailing list is work.  It means dealing with issues, monitoring
the logs, making sure RFC 2142 role addresses are working and paying
attention to what shows up there, maintaining archives, updating software,
suppressing abuse, and so on.  It's not an accident that there's a
high correlation between the best-run lists and the most useful ones --
and between the worst-run lists and chronic sources/conduits of abuse.

There can be some debate about the best methods for handling some of
these things: and there is.  But there's a baseline that nobody should be
below, and mandatory confirmed-in is part of it.  It is irresponsible,
unprofessional, ignorant, and abusive to run any mailing list of any
kind without it.

---rsk

___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop