gpg: Signature made Tue May 13 14:53:08 2014 UTC
gpg: using DSA key 2099B64CBF15490B
gpg: Good signature from "Andy Smith <andy@strugglers.net>" [unknown]
gpg: aka "Andrew James Smith <andy@strugglers.net>" [unknown]
gpg: aka "Andy Smith (UKUUG) <andy.smith@ukuug.org>" [unknown]
gpg: aka "Andy Smith (BitFolk Ltd.) <andy@bitfolk.com>" [unknown]
gpg: aka "Andy Smith (Linux User Groups UK) <andy@lug.org.uk>" [unknown]
gpg: aka "Andy Smith (Cernio Technology Cooperative) <andy.smith@cernio.com>" [unknown]
Hello,
On Tue, May 13, 2014 at 08:36:01AM +0000, Martijn Grooten wrote:
> On Tue, May 13, 2014 at 12:16:02AM +0100, Ian wrote:
> > What are people doing in relation to this?
> >
> > Until now, I have been using postfix to send mail for
> > client@clientsdomainto their real email address, but this fails for
> > the reasons given when
> > people unfortunate enough to use yahoo. com (or, more rarely, AOL) email
> > them.
>
> Am I right in understanding that breaking DKIM isn't an issue here (as
> mere forwarding shouldn't break DKIM) but breaking SPF is?
Mailman typically breaks DKIM signatures when it alters the subject
and adds its own footers.
Since both DKIM and SPF fails, the DMARC reject policy is enforced.
Here are your options today, with Mailman:
http://wiki.list.org/pages/viewpage.action?pageId=17891458
I will probably continue to go with (4) until 2.1.18 hits Debian
stable or backports, in which case I'll go for (1): allow From
address munging for senders who have DMARC reject policy.
Cheers,
Andy
--
http://bitfolk.com/ -- No-nonsense VPS hosting
