Re: Yahoo's DMARC debacle (fwd)

Charlie Brady

unread,

Apr 28, 2014, 1:57:52 PM4/28/14

to qps...@perl.org

I'm guessing that Matt didn't intend this information to be private to me.

---------- Forwarded message ----------
Date: Mon, 28 Apr 2014 09:45:55 -0700
From: Matt Simerson <ma...@tnpi.net>
To: Charlie Brady <charlieb...@budge.apana.org.au>
Subject: Re: Yahoo's DMARC debacle

On Apr 28, 2014, at 6:13 AM, Charlie Brady <charlieb...@budge.apana.org.au> wrote:

> On Sun, 27 Apr 2014, Matt Simerson wrote:
>
>>> and are dealing with the fallout.
>>
>> I dealt with the "fallout" on my mailing lists in May of 2013:
>>
>> http://matt.simerson.net/news/2013/05/01/dkim-and-mailing-lists
>
> Your "fix":
>
>> cd path/to/ezmlm/list; rm prefix text/trailer addtrailer
>
> doesn't work for me:
>
> bash-3.00$ ls prefix text/trailer addtrailer
> ls: prefix: No such file or directory
> ls: text/trailer: No such file or directory
> ls: addtrailer: No such file or directory
> bash-3.00$
>
> So either DKIM isn't relevant, or something else in my
> qpsmtpd/qmail/ezmlm-idx chain is breaking DKIM. Any suggestions?

If ezmlm isn't adding a list prefix or message trailers, then it's
unlikely that ezmlm is breaking the messages DKIM signatures.

Are you using any QP plugins that alter list messages? (The addition of
X-* and Received headers are generally DKIM agnostic). Altering any
message header specifically listed in the DKIM-Signature h property, or
the altering the message body (attachment stripping, charset conversion,
etc.) are the types of changes that are likely to invalidate a DKIM
signature.

The way to test is create yourself a new list and subscribe to it from a
gmail or yahoo address. Then send messages to the list and check their
headers when they return to your freemail account. Gmail will filter them
to the Junk folder if they fail SPF or DMARC tests.

Matt

Charlie Brady

unread,

Apr 28, 2014, 2:02:51 PM4/28/14

to Matt Simerson, qps...@perl.org

On Mon, 28 Apr 2014, Matt Simerson wrote:

> On Apr 28, 2014, at 10:57 AM, Charlie Brady <charlieb...@budge.apana.org.au> wrote:
>
> > I'm guessing that Matt didn't intend this information to be private to me.
>

> Correct, but perl.org is rejecting all messages from domains with DMARC
> p=reject policies, which includes mine, yahoo.com, and aol.com.

What a fine club you have elected yourself into! :-)

>
> Matt

Robert Spier

unread,

Apr 28, 2014, 3:10:45 PM4/28/14

to Charlie Brady, Ask Bjoern-Hansen, Matt Simerson, qpsmtpd ML

--f46d043c7e2cbc766b04f81f137b
Content-Type: text/plain; charset=UTF-8

On Mon, Apr 28, 2014 at 11:02 AM, Charlie Brady <
charlieb...@budge.apana.org.au> wrote:

>
> On Mon, 28 Apr 2014, Matt Simerson wrote:
>
> > On Apr 28, 2014, at 10:57 AM, Charlie Brady <
> charlieb...@budge.apana.org.au> wrote:
> >
> > > I'm guessing that Matt didn't intend this information to be private to
> me.
> >
> > Correct, but perl.org is rejecting all messages from domains with DMARC
> > p=reject policies, which includes mine, yahoo.com, and aol.com.
>
> What a fine club you have elected yourself into! :-)
>

This would explain why we haven't seen any blowback from the yahoo issues
;) We just block them from the mailing lists, not other addresses.
Surprisingly, nobody (except Matt) has complained. We know we have to
revisit this decision, but haven't come up with a solution we're happy with
yet.

-R

--f46d043c7e2cbc766b04f81f137b
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><br><div class=3D"gmail_extra"><br><br><div class=3D"gmail=
_quote">On Mon, Apr 28, 2014 at 11:02 AM, Charlie Brady <span dir=3D"ltr">&=
lt;<a href=3D"mailto:charlieb...@budge.apana.org.au" target=3D"_blank"=
>charlieb...@budge.apana.org.au</a>></span> wrote:<br>

<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
x #ccc solid;padding-left:1ex"><br>
On Mon, 28 Apr 2014, Matt Simerson wrote:<br>
<div class=3D""><br>
> On Apr 28, 2014, at 10:57 AM, Charlie Brady <<a href=3D"mailto:char=
lieb-q...@budge.apana.org.au">charlieb...@budge.apana.org.au</a>&gt=
; wrote:<br>
><br>
> > I'm guessing that Matt didn't intend this information to =
be private to me.<br>
><br>
</div>> Correct, but <a href=3D"http://perl.org" target=3D"_blank">perl.=
org</a> is rejecting all messages from domains with DMARC<br>
> p=3Dreject policies, which includes mine, <a href=3D"http://yahoo.com"=
target=3D"_blank">yahoo.com</a>, and <a href=3D"http://aol.com" target=3D"=
_blank">aol.com</a>.<br>
<br>
What a fine club you have elected yourself into! :-)<br></blockquote><div><=
br></div><div>This would explain why we haven't seen any blowback from =
the yahoo issues ;) =C2=A0We just block them from the mailing lists, not ot=
her addresses. =C2=A0Surprisingly, nobody (except Matt) has complained. =C2=
=A0We know we have to revisit this decision, but haven't come up with a=
solution we're happy with yet.</div>

<div><br></div><div>-R=C2=A0</div></div></div></div>

--f46d043c7e2cbc766b04f81f137b--