Re: [mailop] DMARC in education

2015-06-18 Thread John Levine
>A good forwarder should preserve DKIM (and therefore DMARC test should pass). >My best guess is that >about 3% of mails is forwarded, maybe more for .edu. As Franck noted, there are a lot of bad forwarders, particularly in software from Redmond WA. There is also mailing list traffic, which peop

Re: [mailop] DMARC in education

2015-06-18 Thread John Levine
>> collecting statistics is fine, publishing a policy will make your users hate >> you, and you will deserve it. >Well, DMARC is like a lock on a door: It will keep valid users out too. You >must hand everyone a key >and they must use it (and never lose it). Even the neighbor that feeds the >cat

Re: [mailop] Large DoS from protection.outlook.com servers.

2015-06-18 Thread Michael Wise
Replied off-list. Aloha, Michael. -- Sent from my Windows Phone From: Jason J. W. Williams Sent: ‎6/‎18/‎2015 7:26 AM To: mailop@mailop.org Subject: [mailop] Large DoS from protection.outlook.com servers. ?

Re: [mailop] DMARC in education

2015-06-18 Thread Franck Martin
On Thu, Jun 18, 2015 at 1:36 AM, Kurt Andersen (b) wrote: > Matthew, > > I would suggest talking to the folks at Agari and Dmarcian (both are > linked from dmarc.org/resources). I intentionally kept the presentation > away from endorsing any particular vendors - partly because they change > over

[mailop] Large DoS from protection.outlook.com servers.

2015-06-18 Thread Jason J. W. Williams
?Is there someone from Microsoft mail ops that could contact me off list regarding a large DoS we're currently receiving from their *.protection.outlook.com servers? (rate of 5/sec) -Jason ?208.343.8520 x205 ___ mailop mailing list mailop@mailop.o

Re: [mailop] DMARC in education

2015-06-18 Thread David Hofstee
Hi, A good forwarder should preserve DKIM (and therefore DMARC test should pass). My best guess is that about 3% of mails is forwarded, maybe more for .edu. Besides that: Any security mechanism has its drawbacks. All spamfilters have false positives (I hear nobody rant about that problem here).

[mailop] Paging postmaster at gmx.net/gmx.de et.al.

2015-06-18 Thread Rich Kulawiec
I've noticed that one of my servers has been unable to establish port 25 connections to hosts such as mx00.emig.gmx.net for over a week...and I'm entirely puzzled as to why, since it only sends a trickle of traffic to a handful of users @gmx.net/@gmx.de etc. (They're on a couple of small, low-volu

Re: [mailop] DMARC in education

2015-06-18 Thread Kurt Andersen (b)
Matthew, I would suggest talking to the folks at Agari and Dmarcian (both are linked from dmarc.org/resources). I intentionally kept the presentation away from endorsing any particular vendors - partly because they change over time and partly because I think that's the right thing to do at a gener

Re: [mailop] weird envelope sender

2015-06-18 Thread David Hofstee
Hi, I have seen this before, once: Received: from P94965F3E.sigplc.co.uk ([10.254.4.17]) (envelope-sender <#@[]>) by 10.254.4.160 with ESMTP for ; Sat, 26 Jul 2014 19:17:55 +0100 Received: From SIG-MAIL01.central.sigplc.co.uk ([10.254.4.6]) by P94

Re: [mailop] DMARC in education

2015-06-18 Thread Mike Cardwell
* on the Thu, Jun 18, 2015 at 09:25:42AM +0200, David Hofstee wrote: > Hi, >> collecting statistics is fine, publishing a policy will make your users hate >> you, and you will deserve it. > Well, DMARC is like a lock on a door: It will keep valid users out too. You > must hand everyone a key and

Re: [mailop] DMARC in education

2015-06-18 Thread David Hofstee
Hi, > collecting statistics is fine, publishing a policy will make your users hate > you, and you will deserve it. Well, DMARC is like a lock on a door: It will keep valid users out too. You must hand everyone a key and they must use it (and never lose it). Even the neighbor that feeds the cat.