[mailop] Merry Christmas from Google?

2023-12-16 Thread Jarland Donnell via mailop

Hey friends,

I just noticed that on November 22nd, Google started returning new 
errors:


421-4.7.28 Gmail has detected an unusual rate of unsolicited mail 
originating from your SPF domain [userdomain.tld 15]. To protect our 
users from spam, mail sent from your domain has been temporarily rate 
limited. For more information, go to 
https://support.google.com/mail/?p=UnsolicitedRateLimitError to review 
our Bulk Email Senders Guidelines. 
o13-20020a056870200d00b002033c710f0asi2122725oab.109 - gsmtp


And a little of this:

421-4.7.28 Gmail has detected an unusual rate of unsolicited mail 
originating from your DKIM domain [ 15]. To protect our users from spam, 
mail sent from your domain has been temporarily rate limited. Please 
visit https://support.google.com/mail/?p=UnsolicitedRateLimitError to 
review our Bulk Email Senders Guidelines. 
y5-20020a056808130500b003b3eaa2eb4esi890433oiv.53 - gsmtp


And of course, the more generic:

421-4.7.28 Gmail has detected an unusual rate of unsolicited mail. To 
protect our users from spam, mail has been temporarily rate limited. 
Please visit 
https://support.google.com/mail/?p=UnsolicitedRateLimitError to review 
our Bulk Email Senders Guidelines. 
i1-20020a9d68c100b006d47c518673si38890oto.150 - gsmtp


It seems like Google is no longer just rate limiting IP addresses for 
this, but getting down into finer detail when rate limiting. Perhaps it 
was always there and the messaging has just been clarified. Either way, 
a welcome change, and good news for anyone who didn't know about it.


Obligatory: We don't intend to send any email their way that could be 
perceived as unsolicited, but our users do use forwarders and we'll 
never completely match their filters.

___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop


Re: [mailop] Merry Christmas from Google?

2023-12-17 Thread Marco Moock via mailop
Am 16.12.2023 um 16:07:19 Uhr schrieb Jarland Donnell via mailop:

> Obligatory: We don't intend to send any email their way that could be 
> perceived as unsolicited, but our users do use forwarders and we'll 
> never completely match their filters.

If they use forwarders, SPF will fail in the case the envelope sender
isn't rewritten. Check your logs for that.
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop


Re: [mailop] Merry Christmas from Google?

2023-12-17 Thread Andrew C Aitchison via mailop

On Sun, 17 Dec 2023, Marco Moock via mailop wrote:


Am 16.12.2023 um 16:07:19 Uhr schrieb Jarland Donnell via mailop:


Obligatory: We don't intend to send any email their way that could be
perceived as unsolicited, but our users do use forwarders and we'll
never completely match their filters.


If they use forwarders, SPF will fail in the case the envelope sender
isn't rewritten. Check your logs for that.


I think Jarland meant that his system allows users to forward
received messages (to Google).

--
Andrew C. Aitchison  Kendal, UK
   and...@aitchison.me.uk
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop


Re: [mailop] Merry Christmas from Google?

2023-12-17 Thread Marco Moock via mailop
Am 17.12.2023 um 09:28:16 Uhr schrieb Andrew C Aitchison via mailop:

> On Sun, 17 Dec 2023, Marco Moock via mailop wrote:
> 
> > Am 16.12.2023 um 16:07:19 Uhr schrieb Jarland Donnell via mailop:
> >  
> >> Obligatory: We don't intend to send any email their way that could
> >> be perceived as unsolicited, but our users do use forwarders and
> >> we'll never completely match their filters.  
> >
> > If they use forwarders, SPF will fail in the case the envelope
> > sender isn't rewritten. Check your logs for that.  
> 
> I think Jarland meant that his system allows users to forward
> received messages (to Google).

That is exactly what I mean.
Depending on the configuration of the forwarder, the MAIL FROM stays
the same as the incoming message and that means that SPF will fail when
that message is being sent to a server that checks SPF (Google does).
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop


Re: [mailop] Merry Christmas from Google?

2023-12-17 Thread Benny Pedersen via mailop

Marco Moock via mailop skrev den 2023-12-17 09:00:

Am 16.12.2023 um 16:07:19 Uhr schrieb Jarland Donnell via mailop:


Obligatory: We don't intend to send any email their way that could be
perceived as unsolicited, but our users do use forwarders and we'll
never completely match their filters.


If they use forwarders, SPF will fail in the case the envelope sender
isn't rewritten. Check your logs for that.


false, every forwarder changes envelope sender, so if spf should keep 
pass, its the new forwarding host job to ensure this new envelope sender 
have spf working


problem is that it breaks dmarc aligment, but non aligned mails is still 
fine for maillists


hopefully mailman will ARC-Sign / ARC-seal before it breaks dkim

let the experts do there work

___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop


Re: [mailop] Merry Christmas from Google?

2023-12-17 Thread Marco Moock via mailop
Am 17.12.2023 um 10:45:04 Uhr schrieb Benny Pedersen via mailop:

> false, every forwarder changes envelope sender, so if spf should keep 
> pass, its the new forwarding host job to ensure this new envelope
> sender have spf working

That depends on the setting of the forwarder. Some organizations use
aliases for forwarding, Envelope-Sender won't change in that case
unless other rulesets change it.

The sieve forwarding in Cyrus also doesn't rewrite it, at least in the
version that is in use in our organization.
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop


Re: [mailop] Merry Christmas from Google?

2023-12-17 Thread Alessandro Vesely via mailop

On 17/12/2023 10:45, Benny Pedersen via mailop wrote:

hopefully mailman will ARC-Sign / ARC-seal before it breaks dkim



That's not the correct way to do it.  Authentication results have to be 
collected on entry, before passing the message to Mailman.  The seal, 
and A-Rs conversion to AAR are to be done later, after Mailman hands the 
message out.



Best
Ale
--





___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop


Re: [mailop] Merry Christmas from Google?

2023-12-17 Thread Andy Smith via mailop
Hello,

On Sun, Dec 17, 2023 at 10:45:04AM +0100, Benny Pedersen via mailop wrote:
> Marco Moock via mailop skrev den 2023-12-17 09:00:
> > If they use forwarders, SPF will fail in the case the envelope sender
> > isn't rewritten. Check your logs for that.
> 
> false, every forwarder changes envelope sender, so if spf should keep pass,

Numerous customers of ours who think an entry in /etc/aliases will
let their email to go their gmail would disagree with you (once they
understand what is going on).

(I'm not saying they SHOULD expect it to work. That ship has sailed.
But the expectation is there.)

Thanks,
Andy

-- 
https://bitfolk.com/ -- No-nonsense VPS hosting
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop


Re: [mailop] Merry Christmas from Google?

2023-12-17 Thread Jarland Donnell via mailop
Indeed. We use SRS though and Google seems to like it fine enough, I 
just mean to say that I’ll never filter 1:1 what Google considers to be 
spam from email forwarding. It’s not all even spam really, but like any 
of us they have their own challenges.


I also noticed our list friend Al made a blog post about the new 
messages they return:  
https://www.spamresource.com/2023/11/gmail-new-spam-related-rejections-and.html?m=1


I “think” these new messages represent a clarification on the reasons 
more than a change of the internal reasons. I’ve long suspected their IP 
rate limit message of only sometimes being an actual IP based rate 
limit. I just never sat down long enough to prove it.


On 2023-12-17 02:00, Marco Moock via mailop wrote:

Am 16.12.2023 um 16:07:19 Uhr schrieb Jarland Donnell via mailop:


Obligatory: We don't intend to send any email their way that could be
perceived as unsolicited, but our users do use forwarders and we'll
never completely match their filters.


If they use forwarders, SPF will fail in the case the envelope sender
isn't rewritten. Check your logs for that.
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop


Re: [mailop] Merry Christmas from Google?

2023-12-17 Thread Simon Arlott via mailop
On 17/12/2023 15:01, Jarland Donnell via mailop wrote:
> I “think” these new messages represent a clarification on the reasons 
> more than a change of the internal reasons. I’ve long suspected their IP 
> rate limit message of only sometimes being an actual IP based rate 
> limit. I just never sat down long enough to prove it.

No, I think this is something new.

Total email to Google this month, by outgoing server (email to multiple
recipients counted multiple times):

G   P   Y
2023-12-01  1   2   8
2023-12-02  1   2   0
2023-12-03  0   0   1
2023-12-04  0   0   2
2023-12-07  1   0   1
2023-12-08  1   0   0
2023-12-09  0   1   2
2023-12-11  1   0   1
2023-12-13  2   0   0
2023-12-14  2   0   3

Today I'm getting "Gmail has detected an unusual rate of unsolicited
mail originating from your IP Netblock [78.47.120.45  15]".


The last time I got an "Our system has detected an unusual rate of
unsolicited mail originating from your IP address" was 2019-07-15 and
it was successfully delivered through one of Google's other incoming
servers before it ran out of MX records to attempt delivery to.

-- 
Simon Arlott

___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop


Re: [mailop] Merry Christmas from Google?

2023-12-17 Thread Bill Cole via mailop

On 2023-12-17 at 04:45:04 UTC-0500 (Sun, 17 Dec 2023 10:45:04 +0100)
Benny Pedersen via mailop 
is rumored to have said:


false, every forwarder changes envelope sender,


No matter how many times you say this, it remains a dangerously 
misleading lie.


If, on a Unix-like system running Postfix or Sendmail in their most 
common configurations, you place a file in a user's home directory named 
".forward," then the MTA will not deliver messages locally but will 
relay them via SMTP to the address in  the .forward file using the same 
envelope sender as the message used in its arrival. Addresses which are 
directed via the /etc/aliases or other 'aliasing' mechanisms ALSO are 
relayed using the original envelope sender.


That FACT is the entire reason the SRS mechanism (and tools like 
postsrsd) exist. Traditional forwarding breaks SPF. Everyone involved 
knew this from the earliest discussions that resulted in SPF.


--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop


Re: [mailop] Merry Christmas from Google?

2023-12-17 Thread Jaroslaw Rafa via mailop
Dnia 17.12.2023 o godz. 10:45:04 Benny Pedersen via mailop pisze:
> >If they use forwarders, SPF will fail in the case the envelope sender
> >isn't rewritten. Check your logs for that.
> 
> false, every forwarder changes envelope sender

Definitely not.

Simple forwarding, as done by default by .forward file, or /etc/aliases,
does not change the enevelope sender.

And this method of forwarding is still the default, so it should be
always considered as reference.
-- 
Regards,
   Jaroslaw Rafa
   r...@rafa.eu.org
--
"In a million years, when kids go to school, they're gonna know: once there
was a Hushpuppy, and she lived with her daddy in the Bathtub."
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop


Re: [mailop] Merry Christmas from Google?

2023-12-18 Thread Byung-Hee HWANG via mailop
> That depends on the setting of the forwarder. Some organizations use
> aliases for forwarding, Envelope-Sender won't change in that case
> unless other rulesets change it.

Yes, that is true:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1043539#88


Sincerely, Byung-Hee
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop