Re: Strict/Relaxed DKIM alignment possible with SA?

2017-05-07 Thread RW
On Sun, 7 May 2017 13:08:03 +0200 Matus UHLAR - fantomas wrote: > On 07.05.17 12:46, Thore Boedecker wrote: > >I have played around with it and SA is not performing actual SPF > >queries/validations due to the use of spampd on localhost as a > >proxy. SA needs a trusted internal received header

Re: Strict/Relaxed DKIM alignment possible with SA?

2017-05-07 Thread Robert Schetterer
Am 07.05.2017 um 13:08 schrieb Matus UHLAR - fantomas: >>> > > On 07.05.17 00:46, Thore Boedecker wrote: >>> > > > Thanks for all the great advice so far. >>> > > > >>> > > > Currently I'm playing around with opendkim->opendmarc->amavisd >>> on my >>> > > > testserver. >>> > > > >>> > > > My curren

Re: Strict/Relaxed DKIM alignment possible with SA?

2017-05-07 Thread Matus UHLAR - fantomas
> > On 07.05.17 00:46, Thore Boedecker wrote: > > > Thanks for all the great advice so far. > > > > > > Currently I'm playing around with opendkim->opendmarc->amavisd on my > > > testserver. > > > > > > My current postfix setup is using spampd as proxy and thus any > > > opendkim/opendmarc milters

Re: Strict/Relaxed DKIM alignment possible with SA?

2017-05-07 Thread Thore Boedecker
On 07.05.17 - 12:27, Matus UHLAR - fantomas wrote: > > > On 07.05.17 00:46, Thore Boedecker wrote: > > > > Thanks for all the great advice so far. > > > > > > > > Currently I'm playing around with opendkim->opendmarc->amavisd on my > > > > testserver. > > > > > > > > My current postfix setup is usi

Re: Strict/Relaxed DKIM alignment possible with SA?

2017-05-07 Thread Matus UHLAR - fantomas
On 07.05.17 00:46, Thore Boedecker wrote: > Thanks for all the great advice so far. > > Currently I'm playing around with opendkim->opendmarc->amavisd on my > testserver. > > My current postfix setup is using spampd as proxy and thus any > opendkim/opendmarc milters won't work in cojunction. >

Re: Strict/Relaxed DKIM alignment possible with SA?

2017-05-07 Thread Thore Boedecker
On 07.05.17 - 11:46, Matus UHLAR - fantomas wrote: > On 07.05.17 00:46, Thore Boedecker wrote: > > Thanks for all the great advice so far. > > > > Currently I'm playing around with opendkim->opendmarc->amavisd on my > > testserver. > > > > My current postfix setup is using spampd as proxy and thu

Re: Strict/Relaxed DKIM alignment possible with SA?

2017-05-07 Thread Matus UHLAR - fantomas
On 07.05.17 00:46, Thore Boedecker wrote: Thanks for all the great advice so far. Currently I'm playing around with opendkim->opendmarc->amavisd on my testserver. My current postfix setup is using spampd as proxy and thus any opendkim/opendmarc milters won't work in cojunction. I've been plann

Re: Strict/Relaxed DKIM alignment possible with SA?

2017-05-06 Thread Thore Boedecker
Thanks for all the great advice so far. Currently I'm playing around with opendkim->opendmarc->amavisd on my testserver. My current postfix setup is using spampd as proxy and thus any opendkim/opendmarc milters won't work in cojunction. I've been planning to switch to amavis and use it as a milt

Re: Strict/Relaxed DKIM alignment possible with SA?

2017-05-06 Thread David Jones
From: Alex >I'm just adding 1.5 points when DMARC tests fail and the policy is to >reject. Is it safe to block them completely? I am rejecting with OpenDMARC when the sender's DMARC record has p=reject. This is what they asked for so I am doing it. I have run into on case where a sender who's

Re: Strict/Relaxed DKIM alignment possible with SA?

2017-05-06 Thread Matus UHLAR - fantomas
On 06.05.17 15:49, Thore Boedecker wrote: After looking at the headers it became clear what the issue was: It seems that Yahoo (at least yahoo.co.jp) is allowing emails from @gmail.com senders to be sent through their servers. From: Matus UHLAR - fantomas @gmail.com From: and envelope from.

Re: Strict/Relaxed DKIM alignment possible with SA?

2017-05-06 Thread Alex
Hi, On Sat, May 6, 2017 at 10:10 AM, David Jones wrote: > From: Thore Boedecker > >>Hello folks, > >>over the last couple of months I have received some nasty spam, >>delivered by the Yahoo mail servers. > >>After looking at the headers it became clear what the issue was: > > Please post the ema

Re: Strict/Relaxed DKIM alignment possible with SA?

2017-05-06 Thread Alex
Hi, >>>So is there any way to make SA perform at least a relaxed DKIM >>>alignment check on the headers so that the DKIM signature domain has >>>to belong to the 'From:' address? > >>every domain using yahoo mail servers would have to delegate DKIM to >>yahoo and yahoo would need to sign under all

Re: Strict/Relaxed DKIM alignment possible with SA?

2017-05-06 Thread David Jones
From: Matus UHLAR - fantomas   >On 06.05.17 15:49, Thore Boedecker wrote: >>After looking at the headers it became clear what the issue was: >> >>It seems that Yahoo (at least yahoo.co.jp) is allowing emails from >>@gmail.com senders to be sent through their servers. >@gmail.com From: and enve

Re: Strict/Relaxed DKIM alignment possible with SA?

2017-05-06 Thread Matus UHLAR - fantomas
On 06.05.17 15:49, Thore Boedecker wrote: After looking at the headers it became clear what the issue was: It seems that Yahoo (at least yahoo.co.jp) is allowing emails from @gmail.com senders to be sent through their servers. @gmail.com From: and envelope from. Sender: was yahoo... The funn

Re: Strict/Relaxed DKIM alignment possible with SA?

2017-05-06 Thread Matus UHLAR - fantomas
On Sat, 6 May 2017 15:49:08 +0200 Thore Boedecker wrote: Over on my side, the receiving end of these emails, there is my spamassassin. SA discovers the DKIM signature and is able to validate this signature against the Yahoo server which is totally undesirable in my opinion. From: RW SPF requ

Re: Strict/Relaxed DKIM alignment possible with SA?

2017-05-06 Thread David Jones
From: RW   >On Sat, 6 May 2017 15:49:08 +0200 >Thore Boedecker wrote: >> Over on my side, the receiving end of these emails, there is my >> spamassassin. SA discovers the DKIM signature and is able to validate >> this signature against the Yahoo server which is totally undesirable >> in my opi

Re: Strict/Relaxed DKIM alignment possible with SA?

2017-05-06 Thread RW
On Sat, 6 May 2017 15:49:08 +0200 Thore Boedecker wrote: > Over on my side, the receiving end of these emails, there is my > spamassassin. SA discovers the DKIM signature and is able to validate > this signature against the Yahoo server which is totally undesirable > in my opinion. It doesn't sc

Re: Strict/Relaxed DKIM alignment possible with SA?

2017-05-06 Thread Dominic Benson
> On 6 May 2017, at 14:49, Thore Boedecker wrote: > > Hello folks, > > over the last couple of months I have received some nasty spam, > delivered by the Yahoo mail servers. > > After looking at the headers it became clear what the issue was: > > It seems that Yahoo (at least yahoo.co.jp) is

Re: Strict/Relaxed DKIM alignment possible with SA?

2017-05-06 Thread Thore Boedecker
Thanks David for the first hints in the right direction and yes you are right, I'm looking for some sort of DMARC integration into SA. I have uploaded the mail here: https://paste.foxxx0.de/wZjcT/ Thore On 06.05.17 - 14:10, David Jones wrote: > From: Thore Boedecker >   > >Hello folks, >

Re: Strict/Relaxed DKIM alignment possible with SA?

2017-05-06 Thread David Jones
From: Thore Boedecker   >Hello folks, >over the last couple of months I have received some nasty spam, >delivered by the Yahoo mail servers. >After looking at the headers it became clear what the issue was: Please post the email in pastebin.com or something so we can help. >It seems that Ya

Strict/Relaxed DKIM alignment possible with SA?

2017-05-06 Thread Thore Boedecker
Hello folks, over the last couple of months I have received some nasty spam, delivered by the Yahoo mail servers. After looking at the headers it became clear what the issue was: It seems that Yahoo (at least yahoo.co.jp) is allowing emails from @gmail.com senders to be sent through their server