Re: [mailop] ItaliaOnLine (@libero.it, +) now interpreting DMARC p=none as p=quarantine

2019-11-28 Thread Stefano Bagnara via mailop
On Tue, 26 Nov 2019 at 14:30, Benjamin BILLON via mailop
 wrote:
> ItaliaOnline is rolling out new rules, including the necessity of having a 
> DMARC record (and also a valid DKIM signature), among other things.
> I believe those kind of delivery placement (on p=none) is a side effect of 
> what they're trying to do.

UPDATE: sounds like since yesterday everything came back to normal and
email are not marked as spam any more for a failed dmarc check with
p=none.
Now the DMARC header correctly says:
"X-IOL-DMARC: fail_monitor con il dominio msn.com"

So, I guess you were right and it was an unwanted side effect.

Thank you,
Stefano

___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


Re: [mailop] ItaliaOnLine (@libero.it, +) now interpreting DMARC p=none as p=quarantine

2019-11-26 Thread Stefano Bagnara via mailop
On Tue, 26 Nov 2019 at 14:13, Paul Smith via mailop  wrote:
> On 26/11/2019 12:41, Stefano Bagnara via mailop wrote:
> > I don't know if ItaliaOnLine postmaster follow this list and if they
> > consider this new behaviour a feature or a bug, but I wanted to share
> > this finding/news with you.
> >
> > What do you think about this? Do you know other providers making this
> > "deliberate guess"?
>
> It's bad for an ISP to do that. 'p=none' is often used for the case of
> "we've just started using DMARC and don't know if we've got it set up
> correctly yet", so treating it as p=quarantine is going to lead to lots
> of false positives.
>
> On the other hand, if this is JUST for mail from msn.com, they may have
> decided that that domain is established enough that hopefully the admins
> know what they're doing, so may have an exception to treat mail FROM
> THAT DOMAIN as p=quarantine (similarly with gmail.com, which also has
> p=none)

My test confirmed it happens also with one of my own domains where I
activated p=none as a test.

Stefano

___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


Re: [mailop] ItaliaOnLine (@libero.it, +) now interpreting DMARC p=none as p=quarantine

2019-11-26 Thread Benjamin BILLON via mailop
ItaliaOnline is rolling out new rules, including the necessity of having a 
DMARC record (and also a valid DKIM signature), among other things.
I believe those kind of delivery placement (on p=none) is a side effect of what 
they're trying to do.

--
Benjamin

-Original Message-
From: mailop  On Behalf Of Paul Smith via mailop
Sent: mardi 26 novembre 2019 14:03
To: mailop@mailop.org
Subject: Re: [mailop] ItaliaOnLine (@libero.it, +) now interpreting DMARC 
p=none as p=quarantine

On 26/11/2019 12:41, Stefano Bagnara via mailop wrote:
> I don't know if ItaliaOnLine postmaster follow this list and if they 
> consider this new behaviour a feature or a bug, but I wanted to share 
> this finding/news with you.
>
> What do you think about this? Do you know other providers making this 
> "deliberate guess"?

It's bad for an ISP to do that. 'p=none' is often used for the case of "we've 
just started using DMARC and don't know if we've got it set up correctly yet", 
so treating it as p=quarantine is going to lead to lots of false positives.


On the other hand, if this is JUST for mail from msn.com, they may have decided 
that that domain is established enough that hopefully the admins know what 
they're doing, so may have an exception to treat mail FROM THAT DOMAIN as 
p=quarantine (similarly with gmail.com, which also has
p=none)


-- 


Paul Smith Computer Services
Tel: 01484 855800
Vat No: GB 685 6987 53

Sign up for news & updates at http://www.pscs.co.uk/go/subscribe

___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


Re: [mailop] ItaliaOnLine (@libero.it, +) now interpreting DMARC p=none as p=quarantine

2019-11-26 Thread Paul Smith via mailop

On 26/11/2019 12:41, Stefano Bagnara via mailop wrote:

I don't know if ItaliaOnLine postmaster follow this list and if they
consider this new behaviour a feature or a bug, but I wanted to share
this finding/news with you.

What do you think about this? Do you know other providers making this
"deliberate guess"?


It's bad for an ISP to do that. 'p=none' is often used for the case of 
"we've just started using DMARC and don't know if we've got it set up 
correctly yet", so treating it as p=quarantine is going to lead to lots 
of false positives.



On the other hand, if this is JUST for mail from msn.com, they may have 
decided that that domain is established enough that hopefully the admins 
know what they're doing, so may have an exception to treat mail FROM 
THAT DOMAIN as p=quarantine (similarly with gmail.com, which also has 
p=none)



--


Paul Smith Computer Services
Tel: 01484 855800
Vat No: GB 685 6987 53

Sign up for news & updates at http://www.pscs.co.uk/go/subscribe

___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


[mailop] ItaliaOnLine (@libero.it, +) now interpreting DMARC p=none as p=quarantine

2019-11-26 Thread Stefano Bagnara via mailop
Hi all,

We noticed that since 3 days, ItaliaOnLine is delivering to Junk every
email failing a DMARC check, even when the sender domain publish a
p=none rule.

You can check the "reason" in the headers:
"X-IOL-DMARC: fail_quarantine con il dominio msn.com"

This is expected for p=quarantine rules, but unexpected for p=none
rules, but this is happening for msn.com, gmail.com and less common
domains using p=none, too, whenever the DMARC check is failed.

I don't know if ItaliaOnLine postmaster follow this list and if they
consider this new behaviour a feature or a bug, but I wanted to share
this finding/news with you.

What do you think about this? Do you know other providers making this
"deliberate guess"?

-- 
Stefano Bagnara
Apache James/jDKIM/jSPF
VOXmail/Mosaico.io/VoidLabs

___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop