Re: [mailop] Email System Testing Methodologies?

2022-06-16 Thread Jesse Hathaway via mailop 
On Wed, Jun 15, 2022 at 7:13 PM Ángel via mailop  wrote:
> On this line, there is the MECSA tool
> https://mecsa.jrc.ec.europa.eu/

Thanks, added it to my list
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] Email System Testing Methodologies?

2022-06-15 Thread Ángel via mailop 
On 2022-06-13 at 18:18 +0200, Slavko wrote:
> There is better tool from Vienna
> University, which reports SPF, DKIM (both rsa & ed), DMARC and ARC
> results in similar simple txt response:
> 
> e...@univie.ac.at
> 
> regards

On this line, there is the MECSA tool
https://mecsa.jrc.ec.europa.eu/

Regards


___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] Email System Testing Methodologies?

2022-06-14 Thread Jesse Hathaway via mailop 
Thanks everyone for the suggestions, here is my summary of responses:

Configuration Checkers:

  Web Based

1. mxtoolbox.com
2. gmail -> view source

  CLI

1. mailsec-check, https://github.com/foxcpp/mailsec-check

Email Echo Testers:

1. check-a...@verifier.port25.com
2. https://www.mail-tester.com
3. e...@univie.ac.at
4. p...@stamper.itconsult.co.uk

I was also hoping for some testing methodologies which could be used in
a private staging or development environment, but none of those
materialized.
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] Email System Testing Methodologies?

2022-06-13 Thread Slavko via mailop 
Ahoj,

Dňa Mon, 13 Jun 2022 14:36:24 +0100 Matthew Richardson via mailop
 napísal:

> Slavko:-
> >D?a 13. júna 2022 11:19:08 UTC používate? Matthew Richardson via
> >mailop  napísal:
> >  
> >>One item to be aware of is that the outgoing servers (which return
> >>the messages) do DANE validation, and thus will not deliver to any
> >>servers with failed DANE.  
> >
> >pleaee, is no DANE considered as failed DANE? (Only to be sure...)  
> 
> No (as Kurt observed), it will not send to servers which fail DANE
> but will send to servers without DANE.

Thanks to both ;-)

I just tried it. The ed25519 signature are not supported and wrongly
reported as permfail. Along with lack of DMARC result and questionable
DANE policy makes it not very useful. There is better tool from Vienna
University, which reports SPF, DKIM (both rsa & ed), DMARC and ARC
results in similar simple txt response:

e...@univie.ac.at

regards

-- 
Slavko
https://www.slavino.sk


pgp0BTem2hdn5.pgp
Description: Digitálny podpis OpenPGP
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] Email System Testing Methodologies?

2022-06-13 Thread Matthew Richardson via mailop 
Slavko:-
>D?a 13. júna 2022 11:19:08 UTC používate? Matthew Richardson via mailop 
> napísal:
>
>>One item to be aware of is that the outgoing servers (which return the
>>messages) do DANE validation, and thus will not deliver to any servers with
>>failed DANE.
>
>pleaee, is no DANE considered as failed DANE? (Only to be sure...)

No (as Kurt observed), it will not send to servers which fail DANE but will
send to servers without DANE.

For anyone interested, the relevant Postfix setting is:-
smtp_tls_security_level = dane

Also, the inbound servers have TLSA records published.

I have been wondering for a while whether a test server, running an address
like p...@stamper.itconsult.co.uk, but with deliberately failing DANE would
be useful for testing things.  If it gives a reply, then the DANE is not
being tested properly.

--
Best wishes,
Matthew
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] Email System Testing Methodologies?

2022-06-13 Thread Kurt Jaeger via mailop 
Hello,

> >One item to be aware of is that the outgoing servers (which return the
> >messages) do DANE validation, and thus will not deliver to any servers with
> >failed DANE.
> 
> pleaee, is no DANE considered as failed DANE? (Only to be sure...)

No -- I just tested and I have no DANE on my mailserver 8-}

-- 
p...@opsec.eu+49 171 3101372Now what ?
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] Email System Testing Methodologies?

2022-06-13 Thread Slavko via mailop 
Hi,

Dňa 13. júna 2022 11:19:08 UTC používateľ Matthew Richardson via mailop 
 napísal:

>One item to be aware of is that the outgoing servers (which return the
>messages) do DANE validation, and thus will not deliver to any servers with
>failed DANE.

pleaee, is no DANE considered as failed DANE? (Only to be sure...)

regards

Slavko
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] Email System Testing Methodologies?

2022-06-13 Thread Matthew Richardson via mailop 
Jesse Hathaway:-
>I am working on some architectural changes to our email systems at the
>Wikimedia Foundation[1] and I am a bit befuddled as to the best way to
>test changes to the current system. As you all are all aware email is a
>distrubted system which encompases a wide variety of protocols. Ideally
>I would like to know that our system behaves as expected with regards
>to: mail routing, spam detection, and spam avoidance (SPF, DKIM, ARC).
>Do folks have any suggestions on methods or systems to do this type of
>whole system testing? Yours kindly, Jesse Hathaway
>
>[1]: https://wikitech.wikimedia.org/wiki/Email_System_Revamp

Another gadget to test SPF/DKIM on outgoing messages is our
p...@stamper.itconsult.co.uk.  It replies with the headers it received,
which will include our system's checks of the incoming SPF & DKIM.  It will
work (and report) if either or both fail.  It does not (currently) do any
DMARC checking.

One item to be aware of is that the outgoing servers (which return the
messages) do DANE validation, and thus will not deliver to any servers with
failed DANE.
--
Best wishes,
Matthew
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] Email System Testing Methodologies?

2022-06-12 Thread Maarten Oelering via mailop 
We developed emailaudit.com  for this purpose. It 
checks compliancy, authentication, and technical best practices. It’s free with 
a limit of 3 audits per day.

Maarten Oelering
Postmastery

> On 10 Jun 2022, at 16:48, Jesse Hathaway via mailop  wrote:
> 
> I am working on some architectural changes to our email systems at the
> Wikimedia Foundation[1] and I am a bit befuddled as to the best way to
> test changes to the current system. As you all are all aware email is a
> distrubted system which encompases a wide variety of protocols. Ideally
> I would like to know that our system behaves as expected with regards
> to: mail routing, spam detection, and spam avoidance (SPF, DKIM, ARC).
> Do folks have any suggestions on methods or systems to do this type of
> whole system testing? Yours kindly, Jesse Hathaway
> 
> [1]: https://wikitech.wikimedia.org/wiki/Email_System_Revamp
> ___
> mailop mailing list
> mailop@mailop.org
> https://list.mailop.org/listinfo/mailop

___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] Email System Testing Methodologies?

2022-06-10 Thread Leato, Gary via mailop 
Along these same lines, my favorite quick and dirty way to check spf, dkim, and 
dmarc all at once is to just send to a gmail account and click the view source 
option on the message. It has pass/fail info for all 3 right at the top of that 
screen.

From: mailop  on behalf of Louis Laureys via mailop 

Date: Friday, June 10, 2022 at 12:28 PM
To: mailop@mailop.org 
Subject: Re: [mailop] Email System Testing Methodologies?
I quite like using this to test outgoing, SPF, DKIM, and recieving all
at once:
https://www.port25.com/authentication-checker%20/

Louis

On 2022-06-10 16:48, Jesse Hathaway via mailop wrote:
> I am working on some architectural changes to our email systems at the
> Wikimedia Foundation[1] and I am a bit befuddled as to the best way to
> test changes to the current system. As you all are all aware email is a
> distrubted system which encompases a wide variety of protocols. Ideally
> I would like to know that our system behaves as expected with regards
> to: mail routing, spam detection, and spam avoidance (SPF, DKIM, ARC).
> Do folks have any suggestions on methods or systems to do this type of
> whole system testing? Yours kindly, Jesse Hathaway
>
> [1]: https://wikitech.wikimedia.org/wiki/Email_System_Revamp
> ___
> mailop mailing list
> mailop@mailop.org
> https://list.mailop.org/listinfo/mailop
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop


The risk of trading futures and options can be substantial. All information, 
publications, and material used and distributed by Advance Trading Inc. shall 
be construed as a solicitation. ATI does not maintain an independent research 
department as defined in CFTC Regulation 1.71. Information obtained from 
third-party sources is believed to be reliable, but its accuracy is not 
guaranteed by Advance Trading Inc. Past performance is not necessarily 
indicative of future results.
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] Email System Testing Methodologies?

2022-06-10 Thread Louis Laureys via mailop 
I quite like using this to test outgoing, SPF, DKIM, and recieving all 
at once:

https://www.port25.com/authentication-checker%20/

Louis

On 2022-06-10 16:48, Jesse Hathaway via mailop wrote:

I am working on some architectural changes to our email systems at the
Wikimedia Foundation[1] and I am a bit befuddled as to the best way to
test changes to the current system. As you all are all aware email is a
distrubted system which encompases a wide variety of protocols. Ideally
I would like to know that our system behaves as expected with regards
to: mail routing, spam detection, and spam avoidance (SPF, DKIM, ARC).
Do folks have any suggestions on methods or systems to do this type of
whole system testing? Yours kindly, Jesse Hathaway

[1]: https://wikitech.wikimedia.org/wiki/Email_System_Revamp
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] Email System Testing Methodologies?

2022-06-10 Thread Francesco Gennai via mailop 
This link

https://mxtoolbox.com 

would be helpful.

/f

> Il giorno 10 giu 2022, alle ore 16:59, Jesse Hathaway via mailop 
>  ha scritto:
> 
> I am working on some architectural changes to our email systems at the
> Wikimedia Foundation[1] and I am a bit befuddled as to the best way to
> test changes to the current system. As you all are all aware email is a
> distrubted system which encompases a wide variety of protocols. Ideally
> I would like to know that our system behaves as expected with regards
> to: mail routing, spam detection, and spam avoidance (SPF, DKIM, ARC).
> Do folks have any suggestions on methods or systems to do this type of
> whole system testing? Yours kindly, Jesse Hathaway
> 
> [1]: https://wikitech.wikimedia.org/wiki/Email_System_Revamp
> ___
> mailop mailing list
> mailop@mailop.org
> https://list.mailop.org/listinfo/mailop
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

[mailop] Email System Testing Methodologies?

2022-06-10 Thread Jesse Hathaway via mailop 
I am working on some architectural changes to our email systems at the
Wikimedia Foundation[1] and I am a bit befuddled as to the best way to
test changes to the current system. As you all are all aware email is a
distrubted system which encompases a wide variety of protocols. Ideally
I would like to know that our system behaves as expected with regards
to: mail routing, spam detection, and spam avoidance (SPF, DKIM, ARC).
Do folks have any suggestions on methods or systems to do this type of
whole system testing? Yours kindly, Jesse Hathaway

[1]: https://wikitech.wikimedia.org/wiki/Email_System_Revamp
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop