Re: [mailop] booking.com dmarc

2019-06-04 Thread Carl Byington via mailop
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On Mon, 2019-06-03 at 16:10 -0700, Alan Hodgson via mailop wrote:
> You can sign with a sub-domain or parent domain as long as they share
> the same organizational domain.

My understanding was incorrect. Page 10 of RFC7489 says "In relaxed
mode, the Organizational Domains of both ... must be equal", so

from=a...@sub.sub.example.com -can be signed by example.com, or any
subdomain thereof including joe.example.com.

from=a...@example.com can also be signed by example.com, or any subdomain
thereof including joe.example.com.

Thank you for the correction.


-BEGIN PGP SIGNATURE-
Version: GnuPG v2.0.14 (GNU/Linux)

iEYEAREKAAYFAlz2ioUACgkQL6j7milTFsG8YgCfS5Ye4wkGSO5aqG/14YfPEN+Z
OXwAn3rruPZxXdkpa0aLW/JLPlXbTucV
=a9gC
-END PGP SIGNATURE-



___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


[mailop] Exim 4.87 - 4.91 possible remote exploit

2019-06-04 Thread Graeme Fowler via mailop
Just a heads-up - this was posted to the exim-users list yesterday:

http://exim.org/static/doc/security/CVE-2019-10149.txt

4.92 is not vulnerable, patch will be backported to affected versions.

Graeme

___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


[mailop] R: Forwarded messages stopped by Gmail as spam

2019-06-04 Thread Guarascio Francesco via mailop
Hi Brandon,
thank you very much for your answer.
It was really helpful because we have now found the conditions to reproduce the 
event: messages are rejected when our Virgilio.it webmail customers forward an 
email and they have set the webmail to forward them as eml attachment.
The weird side of it is that we have the same webmail, same OX version, for our 
main brand “Libero.it” and in the same conditions (user forwarding messages as 
eml attachments) messages are accepted by Gmail MTAs.
Comparing messages generated doing a forward by a “Libero.it” account and a 
“Virgilio.it” one, messages seems formatted in the same way, there is no 
evident anomaly in mime boundaries.
Is there any (online) automatic tool to check the validity of mime boundaries 
in a .eml file?

Thank you
Francesco

Da: Brandon Long [mailto:bl...@google.com]
Inviato: lunedì 3 giugno 2019 22:35
A: Guarascio Francesco 
Cc: mailop@mailop.org
Oggetto: Re: [mailop] Forwarded messages stopped by Gmail as spam

The specific message referenced there, and all from that IP that I checked (and 
all from the IP range, looking at it), should have been blocked regardless of 
where it was coming from.  They look like potential malware, or at least a 
poorly constructed MIME message that is similar to some malware types with 
broken/missing MIME boundaries or something similar.  Nothing to do with 
forwarding or new ranges or anything like that.

Brandon

On Mon, Jun 3, 2019 at 9:50 AM Guarascio Francesco via mailop 
mailto:mailop@mailop.org>> wrote:
Hi all,
we are upgrading our OX webmail and we noticed a strange behavior with our 
customer who were migrated to the new version (OX 7.10) for our domain 
Virgilio.it.
Many users who send a forwarded message to a Gmail address, see their messages 
rejected  with the following messages

"550-5.7.1 [213.209.9.32 12] Our system has detected that this message 
is\r\n550-5.7.1 likely unsolicited mail. To reduce the amount of spam sent to 
Gmail,\r\n550-5.7.1 this message has been blocked. Please visit\r\n550-5.7.1 
https://support.google.com/mail/?p=UnsolicitedMessageError\r\n550
 5.7.1 for more information. p11si2176337wma.27 - gsmtp

All messages go out by IPs in the range 213.209.9.X and the error lead to think 
about a kind of IP bad reputation.
On the other side, only a limited number of messages are blocked and all of our 
customers with this problem tell they are blocked only when they forward a 
message and not when they compose a new one (the outgoing IPs are the same in 
both cases).

Is anyone experiencing the same thing?
Is there someone of Gmail who can help me?

Francesco Guarascio (Italiaonline)




“Credo che avere la terra e non rovinarla sia la più bella forma d’arte che si 
possa desiderare”. Andy Warhol Rispetta l’ambiente. Non stampare questa mail se 
non è necessario

“I think having land and not ruining it is the most beautiful art that anybody 
could ever want”. Andy Warhol Please consider the environment. Do not print 
this email, unless necessary

This email and any files transmitted with it are confidential and intended 
solely for the use of the individual or entity to whom they are addressed. If 
you have received this email in error please notify 
postmas...@italiaonline.it
www.italiaonline.it
___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop