DMARC enabled for jenkins-ci.org and jenkins.io domain

[Olblak]

Hi Everybody,

Yesterday I enabled DMARC on jenkins.io and jenkins-ci.org domain.
The purpose of this setting is to reject any email using the header ''header_from' set to jenkins.io or jenkins-ci.org, from a none authorized IP, I already started receiving a lot of XML reports where most of the rejected emails are from none authorized locationbut we could still have false positives especially from mailing lists

So feel free to raise an issue if you notice something wrong.

More information about what DMARC is -> https://en.wikipedia.org/wiki/DMARC

[Gavin Mogan]

That would explain why my jira emails are now marked as spam

Original Message
Message ID <1147834549.25545.1588899606346@bf9b58d888b1>
Created at: Thu, May 7, 2020 at 6:00 PM (Delivered after 29 seconds)
From: nor...@jenkins-ci.org
To: jen...@gavinmogan.com
Subject: [JIRA] Subscription: My Plugins
SPF: PASS with IP 198.61.254.52 Learn more
DKIM: 'PASS' with domain gavinmogan.com Learn more
DMARC: 'FAIL' Learn more


Download Original
Copy to clipboard

Delivered-To: hal...@gmail.com
Received: by 2002:a0c:fe8f:0:0:0:0:0 with SMTP id d15csp340293qvs;
        Thu, 7 May 2020 18:00:36 -0700 (PDT)
X-Google-Smtp-Source: APiQypIrC7A8YI/3WOlwt1/8bqy7bgbbkPo6DMBOx5cpLoTolIh0v+R3ir1+y9yDk0GzaL6CP1T3
X-Received: by 2002:a02:c9d0:: with SMTP id c16mr92262jap.80.1588899635834;
        Thu, 07 May 2020 18:00:35 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1588899635; cv=none;
        d=google.com; s=arc-20160816;
        b=b59R+pJIC8JLu0HQKUUlX4usK20yFGeWlfWveSrBBB+4D/J/ASavIpkmH9LBzxZi3P
         9tFp1J3AhTpT38YwPuu3lYPYSZ3RB030VcjHsO/NkTXTJaOERrA0FtSjSJBycNn7CcA6
         cf0IYY/DnNs0zIRlkA412kYPVcANCc18Xsjnnvs1UcgkHMu1Fb+b/VJKGeWZDw/0vNSd
         MCIafJ2n+sG5uH+hi79Qk34gBzpU73K3xRCMdf7ERxFFchpqas13VlV9jRKxxp85enA8
         q+F7umLx4ZItttYMqYpVJefq9rV5qhyIOGkF13WY9Vf3bHbqZ7Ih/jHQUhCSxlYO7QNm
         dyJw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
        h=mime-version:subject:message-id:to:from:date:dkim-signature;
        bh=gNpUIEx770vty9ud9HsUtYzNiQH9xDJ+EYXw9i4ohAs=;
        b=rD8pwPNc0doQH/pk9ZWmb/mtQI6AfpNzLIuKQeABBjztutvyiijA/Qb0H1R6c+Ea6L
         3a+mKCuoCTm2/nkGqMnR4O1l0JcSY/rXql4oz0yNN6xWupt/8yd8h9Xxx1xals9IOqA7
         JrC57qGSrZ+bKdC7S1tdAnJkOeaFdUdqXY9wFCP/Ya0YlU8YdSmOus/mLGPIyDkYNb69
         IfQYhevesy6eCl4q+/gSNIuMA50wUnSayDCb2TMpSAr0nbXprFLPBxch+dheNiCeLiNn
         H2U71pgS+OvOjQqJHNMBpJM0gbaTOYfDeE5GqBmXWt0VUsshxJkRw5/w1pX8zq2Tj1Qu
         K3Zg==
ARC-Authentication-Results: i=1; mx.google.com;
       dkim=pass header.i=@gavinmogan.com header.s=krs header.b=A5gnzgDv;
       spf=pass (google.com: domain of bounce+423ba6.9f917f-halkeye=gmai...@gavinmogan.com designates 198.61.254.52 as permitted sender) smtp.mailfrom="bounce+423ba6.9f917f-halkeye=gmai...@gavinmogan.com";
       dmarc=fail (p=REJECT sp=REJECT dis=QUARANTINE) header.from=jenkins-ci.org
Return-Path: <bounce+423ba6.9f917f-halkeye=gmai...@gavinmogan.com>
Received: from so254-52.mailgun.net (so254-52.mailgun.net. [198.61.254.52])
        by mx.google.com with UTF8SMTPS id x19si5835507ilj.150.2020.05.07.18.00.32
        for <hal...@gmail.com>
        (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128);
        Thu, 07 May 2020 18:00:35 -0700 (PDT)
Received-SPF: pass (google.com: domain of bounce+423ba6.9f917f-halkeye=gmai...@gavinmogan.com designates 198.61.254.52 as permitted sender) client-ip=198.61.254.52;
Authentication-Results: mx.google.com;
       dkim=pass header.i=@gavinmogan.com header.s=krs header.b=A5gnzgDv;
       spf=pass (google.com: domain of bounce+423ba6.9f917f-halkeye=gmai...@gavinmogan.com designates 198.61.254.52 as permitted sender) smtp.mailfrom="bounce+423ba6.9f917f-halkeye=gmai...@gavinmogan.com";
       dmarc=fail (p=REJECT sp=REJECT dis=QUARANTINE) header.from=jenkins-ci.org
DKIM-Signature: a=rsa-sha256; v=1; c=relaxed/relaxed; d=gavinmogan.com; q=dns/txt; s=krs; t=1588899635; h=Content-Type: MIME-Version: Subject: Message-ID: To: From: Date; bh=gNpUIEx770vty9ud9HsUtYzNiQH9xDJ+EYXw9i4ohAs=; b=A5gnzgDvkM1y8SK3cruZftPi51ZrWzrBwDpYjihp9/6dBQ+igaNEZPlUDgZlcXbxRoowpFxR Si+v/H1c9CQrXa53m2NZ/ZCUqM63ieXRJ5OxojF1mYmNkCSzUcjAFight3NZZ+P9vCyWHgIt 6Rqf7NyOFuIopPR8eKTuZ1AY4po=
X-Mailgun-Sending-Ip: 198.61.254.52
X-Mailgun-Spam-Rules: HTML_MESSAGE, MIME_HTML_ONLY, RCVD_IN_DNSWL_MED, RCVD_IN_MSPIKE_H3, RCVD_IN_MSPIKE_WL, SPF_HELO_NONE, SPF_PASS
X-Mailgun-Spf: Pass
X-Mailgun-Sscore: -2.2
X-Mailgun-Sflag: No
X-Mailgun-Incoming: Yes
X-Envelope-From: <nor...@jenkins-ci.org>
Received: from hemlock.osuosl.org (smtp2.osuosl.org [140.211.166.133]) by mxa.mailgun.org with ESMTP id 5eb4af17.7f0bdb487d88-smtp-in-n01; Fri, 08 May 2020 01:00:07 -0000 (UTC)
Received: from localhost (localhost [127.0.0.1]) by hemlock.osuosl.org (Postfix) with ESMTP id 0C4368976C for <jen...@gavinmogan.com>; Fri,
  8 May 2020 01:00:07 +0000 (UTC)
X-Virus-Scanned: amavisd-new at osuosl.org
Received: from hemlock.osuosl.org ([127.0.0.1]) by localhost (.osuosl.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9dUrlVToRkKy for <jen...@gavinmogan.com>; Fri,
  8 May 2020 01:00:06 +0000 (UTC)
Received: from bf9b58d888b1 (jenkins-edamame.osuosl.org [140.211.9.2]) by hemlock.osuosl.org (Postfix) with ESMTP id 53F3989769 for <jen...@gavinmogan.com>; Fri,
  8 May 2020 01:00:06 +0000 (UTC)
Date: Fri, 8 May 2020 01:00:06 +0000 (GMT)
From: nor...@jenkins-ci.org
To: jen...@gavinmogan.com
Message-ID: <1147834549.25545.1588899606346@bf9b58d888b1>
Subject: [JIRA] Subscription: My Plugins
MIME-Version: 1.0
Content-Type: multipart/related; boundary="----=_Part_25544_270846908.1588899606338"
X-JIRA-FingerPrint: 3c0fae591c90ba70494f35b895fc4b8f

--
You received this message because you are subscribed to the Google Groups "Jenkins Infrastructure" group.
To unsubscribe from this group and stop receiving emails from it, send an email to jenkins-infr...@googlegroups.com.
To view this discussion on the web, visit https://groups.google.com/d/msgid/jenkins-infra/e3bf70b5-99c1-4eea-88a3-837773f1c1f8%40www.fastmail.com.

[Gavin Mogan]

Sweet, thanks Olblak, Jira Emails are now coming through without being pushed to spam!

[Olblak]

I updated Jira smtp configuration to use Sendgrid instead previously configured OSUOSL smtp service

To view this discussion on the web, visit https://groups.google.com/d/msgid/jenkins-infra/CAG%3D_Duu%3DxjprjacEGsH25w3BMYnb2FiYCn1bQ6OhEUHAsezMHQ%40mail.gmail.com.

Attachments:

• image.png