15 May
2014
15 May
'14
6:44 p.m.
Andy Smith said:
No, you're right, it's me that was confused. I
thought he was
talking about mailing lists.
No, although when a mailing list is resurrected, it is going to be an
issue with that. I do like the new dmarc_moderaction_action for mailman,
which only kicks in for domains that are telling the world to reject or
quarantine mail not validly signed as being from them.
Yes, a simple forwarder — as long as it's doing
SRS — should be
okay. I think. :)
Sometimes yes, sometimes no.
I have noticed some problems, but on looking more closely there are not
as many as I thought and they seem to be the sender's fault.
So on the 13th, I have a message in the logs from Gmail rejecting an
email from evil Facebook:
/var/log/mail.log:May 13 00:35:18 localhost postfix/smtp[27315]:
7363081163: to=<**account**(a)gmail.com>om>,
orig_to=<facebook(a)**domain**.com>om>,
relay=gmail-smtp-in.l.google.com[173.194.78.26]:25, delay=1.3,
delays=0.82/0.01/0.06/0.41, dsn=5.7.1, status=bounced (host
gmail-smtp-in.l.google.com[173.194.78.26] said: 550-5.7.1
Unauthenticated email from facebookmail.com is not accepted due to
550-5.7.1 domain's DMARC policy. Please contact administrator of
facebookmail.c 550-5.7.1 om domain if this was a legitimate mail. Please
visit 550-5.7.1 http://support.google.com/mail/answer/2451690 to learn
about DMARC 550 5.7.1 initiative. c8si3184511wix.26 - gsmtp (in reply to
end of DATA command))
.. but all the other messages from them this month appear to have got
through ok.
The one that did get blocked appears to be legit: it has arrived in a
local mailbox as well as being forwarded to Gmail and looks totally
normal apart from the fact that it doesn't have any authentication in
the header. It does look like a new evil Facebook server (it got
greylisted) so is Facebook being incompetent as well as evil?
There are other bounces from Gmail in the logs over yahoo.com mail, on
8th May, 5th May, 23rd April, 19th April (twice) and 17th April.
Looking at them, the 8th May is actually spam via someone else; 5th May
and 23rd April a Yahoogroups email that needed approving by the mod; and
the other April emails were also Yahoogroups from yahoo.com users.
For other people's email, there are rather more, but they do look like
spam.
It's somewhat annoying that there doesn't seem to be an easy way to get
Postfix to do what the new Mailman does - look at the published policies
and act accordingly. Or is there?
Ian