On Wed, Oct 06, 2021 at 07:39:26AM -0400, Greg Wooledge wrote:
> On Wed, Oct 06, 2021 at 08:27:36AM +0300, Reco wrote:
> > On Tue, Oct 05, 2021 at 04:40:41PM -0400, Greg Wooledge wrote:
> > > Is there anything I can do to stop it, other than simply
> > > re-subscribing every time I post?
> >
> > It says there plain and clear:
> >
> > > > When in doubt, ... or send mail to "postmaster".
> >
> > Lists' postmasters were very helpful in pointing at errors in my setup
> > when I had the problems with the list in the past. Mail them, ask for
> > help.
>
> That paragraph is telling me to talk to "postmas...@wooledge.org" which
> is, unfortunately, me.
There's no harm in asking for help from lists' postmaster, given a
circumstances like this.
I'm sure you're familiar with [1].
> > The most probable cause of your troubles - you do not have DMARC policy
> > published, which means the whole Internet could send bounces to the list
> > on your behalf. SPF policy that you have published is not enough.
>
> Another thing I have to learn?! Crap. Well, maybe some day I'll find
> the time and energy to think about it.
Some consider SMTP an old protocol, but it's a moving target actually.
Even a perfect setup can get outdated with time.
And, DMARC is a simple TXT DNS record, unless you want to implement
a proper checking of receiving mails.
> I still don't understand how a bounce message that was received by
> the Debian mail server ("Delivered-To: lists-debian-u...@bendel.debian.org")
> with a "From postmas...@vps268904.ovh.net" on top of it can cause *me*
> to become unsubscribed. The only place my email address is mentioned
> is at the top of the body.
It's my understanding that this particular bounce did not get you
unsubscribed. It's a consequence.
There was another, earlier bounce that did, which is a reason.
I may be wrong here, of course. I haven't seen the logs of your qmail,
for starters.
> Is a message sent from Alice to lists-debian-u...@bendel.debian.org with
> Bob's address at the top of the body considered a "bounce from Bob"?
> That sounds like a huge bug in bendel.debian.org to me.
It may seem that way, but it's not. Your e-mail address is a part of the
e-mail body, and does not included in e-mail headers. And headers are
pretty clear on who's the sender is.
> Either that, or they're not showing me enough context to understand how
> this particular message from ovh.net got *me* in trouble.
IMO you're looking at the wrong e-mail.
> I guess the only thing I can do *right now* is hope that whoever this
> ovh user is, they'll fix their setup and/or *actually* unsubscribe
> instead of just thinking they have unsubbed.
Of course they won't. Why should they bother with fixing anything if it
does not break anything *for them*?
Receiving a "friendly" advice (in other words - be a good netizen or
take your spam machine elsewhere) from their hosting provider can do the
trick. And sending an abuse e-mail is the actual action you *can* do
right now.
Reco
[1] https://www.debian.org/MailingLists/
