Re: [Mozilla Enterprise] ESR mailing list forwarding gives rise to DMARC "failures"

2019-07-14 Thread Paul Kosinski
Yes, I know that SPF, DKIM and DMARC can cause problems with mailing lists, but people have been working on it for years. I just thought that Mozilla was sophisticated enough to have implemented a workaround. The ISC BIND users mailing list, for example, uses Mailman and in their configuration the

Re: [Mozilla Enterprise] ESR mailing list forwarding gives rise to DMARC "failures"

2019-07-14 Thread Don Wright
Paul Kosinski wrote: >Here's another example of a DMARC "failure" when mail (from me) is >passed on to an ESR subscriber. DMARC is fundamentally broken[1] with regard to mailing lists as it only checks the From: and not the Sender: field. Mitigating DMARC-induced problems is a frequent topic on t

[Mozilla Enterprise] ESR mailing list forwarding gives rise to DMARC "failures"

2019-07-14 Thread Paul Kosinski
Here's another example of a DMARC "failure" when mail (from me) is passed on to an ESR subscriber. This time the text of the "failure" report includes more headers (see below). Note that our SPF and DKIN both pass (ARC-Authentication-Results) when they get to mx.google.com, but apparently antispam