Re: [mailop] Facebook/Twitter, advice/anyone here?

2016-08-15 Thread Benoit Panizzon
Hi Michelle > Have a similar (though substantially smaller numbers) with Apple > iCloud accounts... main problem there is people sending receipts for > their purchases... you'd think they (the consumers) might be worried > about a third-party getting all their (valid) credit card details, > but I

Re: [mailop] Gmail SRS Problem: low reputation of sending domain

2016-08-15 Thread John Levine
>And they WANT to be able to choose whether to get spam mails tagged and >have them delivered to their account where they can process them with >their own filter rules and maybe report them. Then you should deliver them to local mailboxes from which they pull the messages using POP or IMAP. Any s

Re: [mailop] Dealing with a DKIM replay attack

2016-08-15 Thread Steve Atkins
> On Aug 15, 2016, at 5:01 PM, Robert Mueller wrote: > >> We're definitely seeing dkim replay attacks and of course doing our best to >> catch them. >> > > Out of curiosity, one thing I thought might be a strong sign of a replay > attack is lots of emails with the same b= value in the DKIM-S

Re: [mailop] Dealing with a DKIM replay attack

2016-08-15 Thread Robert Mueller
> We're definitely seeing dkim replay attacks and of course doing our > best to catch them. Out of curiosity, one thing I thought might be a strong sign of a replay attack is lots of emails with the same b= value in the DKIM-Signature. Obviously mass mailings might trigger this as well, but I'm w

Re: [mailop] Facebook/Twitter, advice/anyone here?

2016-08-15 Thread Michelle Sullivan
Franck Martin wrote: Thanks, As with Apple, they used to remember your email address associated with your credit card, now, likely due to privacy/security concerns, when you want the receipt to be emailed to you, you need to type your email address each time. Now, many people do not know thei

Re: [mailop] Facebook/Twitter, advice/anyone here?

2016-08-15 Thread Franck Martin via mailop
Thanks, As with Apple, they used to remember your email address associated with your credit card, now, likely due to privacy/security concerns, when you want the receipt to be emailed to you, you need to type your email address each time. Now, many people do not know their email address especially

[mailop] Facebook/Twitter, advice/anyone here?

2016-08-15 Thread Michelle Sullivan
Thoughts and suggestions people... I have about 2500 facebook and twitter accounts (current count) hitting my server on a daily basis Neither Facebook nor Twitter seem to stop sending to them even with 550 User Unknown messages at SMTP time everytime they send... anyone know how to get th

[mailop] Google Postmaster Tools Spam Rate and Feedback Loop Data Showing 0

2016-08-15 Thread Matt Rideout
I'm attempting to use Gmail's feedback loop and have run into some issues that I was hoping to get some input on. I suspect that the issues are related to using different domains for SPF and DKIM authentication. The first issue is that both the "Spam Rate", and "Feedback Loop Spam Rate" are sh

Re: [mailop] Gmail now requires DKIM / SPF

2016-08-15 Thread Brandon Long via mailop
The percentage of mail that's authenticated is rather high, the percentage that aligns, not as much. Unaligned mail is still called out in other ways (Brandon Long via Authenticated Domain). Brandon On Mon, Aug 15, 2016 at 1:57 AM, David Hofstee wrote: > Gmail now requires SPF or DKIM: http

Re: [mailop] Dealing with a DKIM replay attack and yahoo's use of DKIM domains for FBL reports

2016-08-15 Thread Bill Cole
On 15 Aug 2016, at 12:17, Tim Starr wrote: I see your point, but why is it so bad to rewrite content links? I am assuming a unique link per mailbox. Change any content of a message and you invalidate any cryptographic signatures. Rewrite links to go through your machines and you're effectiv

Re: [mailop] Dealing with a DKIM replay attack and yahoo's use of DKIM domains for FBL reports

2016-08-15 Thread Brandon Long via mailop
People assume click tracking, at the least. It's not clear that it would help, anyways, the point of these attacks is use them against another service, you might get some feedback but probably not fast enough to matter, just like the per user dkim selector. Brandon On Aug 15, 2016 9:22 AM, "Tim

Re: [mailop] Microsoft FBL setup issues

2016-08-15 Thread Udeme Ukutt
Replied offlist. Udeme On Fri, Aug 12, 2016 at 3:07 PM, Torsten Reinert via mailop < mailop@mailop.org> wrote: > We are trying to set up a new FBL with Microsoft via the JMRP but are > unable to add IPs to the feed. The feed basically is created w/o IPs and > new IPs cannot be added. Anyone else

Re: [mailop] Dealing with a DKIM replay attack and yahoo's use of DKIM domains for FBL reports

2016-08-15 Thread Tim Starr
I see your point, but why is it so bad to rewrite content links? I am assuming a unique link per mailbox. -Tim On Sat, Aug 13, 2016 at 10:12 AM, Bill Cole < mailop-20160...@billmail.scconsult.com> wrote: > On 12 Aug 2016, at 19:12, Tim Starr wrote: > > The only benefit I can see from sending the

Re: [mailop] Dealing with a DKIM replay attack

2016-08-15 Thread Steve Atkins
> On Aug 15, 2016, at 8:39 AM, Eliot Lear wrote: > > Hi Steve, > > > > On 8/15/16 5:30 PM, Steve Atkins wrote: >>> On Aug 14, 2016, at 10:11 PM, Eliot Lear wrote: >>> >>> >>> >>> On 8/14/16 6:46 AM, Steve Atkins wrote: If there were a protocol that said "if you receive mail signed by

Re: [mailop] Dealing with a DKIM replay attack

2016-08-15 Thread Eliot Lear
Hi Steve, On 8/15/16 5:30 PM, Steve Atkins wrote: >> On Aug 14, 2016, at 10:11 PM, Eliot Lear wrote: >> >> >> >> On 8/14/16 6:46 AM, Steve Atkins wrote: >>> If there were a protocol that said "if you receive mail signed by this >>> domain / this key and the recipient isn't in the To: or Cc: fie

Re: [mailop] Dealing with a DKIM replay attack

2016-08-15 Thread Steve Atkins
> On Aug 14, 2016, at 10:11 PM, Eliot Lear wrote: > > > > On 8/14/16 6:46 AM, Steve Atkins wrote: >> If there were a protocol that said "if you receive mail signed by this >> domain / this key and the recipient isn't in the To: or Cc: field, >> block it", or some similar protocol that signed t

[mailop] Gmail now requires DKIM / SPF

2016-08-15 Thread David Hofstee
Gmail now requires SPF or DKIM: http://googleappsupdates.blogspot.nl/2016/08/making-email-safer-with-new-security-warnings-in-gmail.html Not sure why it it calls it authenticated when it is not aligned with the 'From'-domain (like DMARC does). Technically it is, but not by the sender itself.

Re: [mailop] Gmail blocking due to "missing" PTR record

2016-08-15 Thread Benoit Panizzon
Hi Seth > Terminal: (host 167.89.88.20 > 20.88.89.167.in-addr.arpa domain name pointer > o1.webmaillist.flowerdeliveryexpress.com.) 20.88.89.167.in-addr.arpa domain name pointer o1.webmaillist.flowerdeliveryexpress.com. $ dig -t any o1.webmaillist.flowerdeliveryexpress.com. ;; ANSWER SECTION: o