Re: Gmail bounce unauthenticated @debian.org addresses

2022-03-07 Thread Bjørn Mork
"LeJacq, Jean Pierre" writes: > There are standard best practices for forwarding support in SPF. > > http://www.open-spf.org/Best_Practices/Forwarding/ Well, if it only was that simple. There is NO working SRS software/example config for sendmail in Debian or anywhere else AFAICS. The only thi

Re: Gmail bounce unauthenticated @debian.org addresses

2022-03-05 Thread Craig Small
On Fri, 4 Mar 2022 at 23:34, Ansgar wrote: > On Fri, 2022-03-04 at 13:27 +0100, Stephan Lachnit wrote: > > On Fri, Mar 4, 2022 at 12:47 PM Baptiste Beauplat > > wrote: > > > As a reminder debian.org addresses does support DKIM. After > > > configuration on your mail server, you can publish your

Re: Gmail bounce unauthenticated @debian.org addresses

2022-03-05 Thread Steve McIntyre
Baptiste Beauplat wrote: >We recently discovered that Gmail started to bounce email from >mentors.debian.net with the following message: > >550-5.7.26 This message does not have authentication information or >fails to 550-5.7.26 pass authentication > checks. To best protect our users from spam, th

Re: Gmail bounce unauthenticated @debian.org addresses

2022-03-05 Thread Baptiste BEAUPLAT
On 3/4/22 18:29, Marco d'Itri wrote: On Mar 04, Baptiste Beauplat wrote: Looking at your email headers, I would guess that gmail is already doing it. X-Google-DKIM-Signature: v=1; a=rsa-sha256... There is somewhat some irony in Gmail blocking email without a DKIM signature while they are usi

Setting DKIM locally (Was: Re: Gmail bounce unauthenticated @debian.org addresses)

2022-03-04 Thread Nilesh Patra
On Fri, 2022-03-04 at 13:27 +0100, Stephan Lachnit wrote: >> Can you point to some quick guide on how to do this for gmail? The >> support page seems kinda confusing to me. > This usually requires you running your own mail server (for outgoing > mail). > I don't think mail providers like GMail all

Re: Gmail bounce unauthenticated @debian.org addresses

2022-03-04 Thread LeJacq, Jean Pierre
On Friday, March 4, 2022 12:37:38 PM EST Ansgar wrote: > On Fri, 2022-03-04 at 10:21 -0500, LeJacq, Jean Pierre wrote: > > There are standard best practices for forwarding support in SPF. > > > > http://www.open-spf.org/Best_Practices/Forwarding/ > > Having each individual user have to configure

Re: Gmail bounce unauthenticated @debian.org addresses

2022-03-04 Thread Ansgar
On Fri, 2022-03-04 at 10:21 -0500, LeJacq, Jean Pierre wrote: > There are standard best practices for forwarding support in SPF. > > http://www.open-spf.org/Best_Practices/Forwarding/ Having each individual user have to configure forwarders (i.e., per- user whitelists), including services like ma

Re: Gmail bounce unauthenticated @debian.org addresses

2022-03-04 Thread Marco d'Itri
On Mar 04, Baptiste Beauplat wrote: > Looking at your email headers, I would guess that gmail is already doing it. > > X-Google-DKIM-Signature: v=1; a=rsa-sha256... > > There is somewhat some irony in Gmail blocking email without a DKIM > signature while they are using a non-standard header tha

Re: DKIM and Exim (was Re: Gmail bounce unauthenticated @debian.org addresses)

2022-03-04 Thread Colin Watson
On Fri, Mar 04, 2022 at 03:59:09PM +0100, Guillem Jover wrote: > On Fri, 2022-03-04 at 14:36:01 +, Colin Watson wrote: > > I reproduced a similar problem, then set up DKIM for myself and > > everything then worked, so I think you're correct. > > > > The links in the original d-d-a email were m

Re: Gmail bounce unauthenticated @debian.org addresses

2022-03-04 Thread LeJacq, Jean Pierre
On Friday, March 4, 2022 10:14:09 AM EST Ansgar wrote: > On Fri, 2022-03-04 at 15:45 +0100, Baptiste Beauplat wrote: > > However for SPF, if I'm not mistaken, this is not possible for > > @debian.org addresses since Debian does not offers an MSA and > > therefor not a single (or enumerable list of)

Re: Gmail bounce unauthenticated @debian.org addresses

2022-03-04 Thread LeJacq, Jean Pierre
On Friday, March 4, 2022 9:45:21 AM EST Baptiste Beauplat wrote: > On 3/4/22 15:41, LeJacq, Jean Pierre wrote: > > Google uses a number of criteria when blocking. A missing DKIM is just > > one. > > See the referenced document: > > > > https://support.google.com/mail/answer/81126 > > > > One of t

Re: Gmail bounce unauthenticated @debian.org addresses

2022-03-04 Thread Ansgar
On Fri, 2022-03-04 at 15:45 +0100, Baptiste Beauplat wrote: > However for SPF, if I'm not mistaken, this is not possible for > @debian.org addresses since Debian does not offers an MSA and > therefor not a single (or enumerable list of) exit point. Using SPF would be possible. Gentoo does that:

DKIM and Exim (was Re: Gmail bounce unauthenticated @debian.org addresses)

2022-03-04 Thread Guillem Jover
Hi! On Fri, 2022-03-04 at 14:36:01 +, Colin Watson wrote: > I reproduced a similar problem, then set up DKIM for myself and > everything then worked, so I think you're correct. > > The links in the original d-d-a email were mostly stale, but I found > https://bynicolas.com/server/exim-multi-d

Re: Gmail bounce unauthenticated @debian.org addresses

2022-03-04 Thread Baptiste Beauplat
On 3/4/22 15:41, LeJacq, Jean Pierre wrote: > Google uses a number of criteria when blocking. A missing DKIM is just one. > See the referenced document: > > https://support.google.com/mail/answer/81126 > > One of the problems here is that mentors.debian.net does not have the > standard > email

Re: Gmail bounce unauthenticated @debian.org addresses

2022-03-04 Thread Bastian Blank
Hi On Fri, Mar 04, 2022 at 03:15:59PM +0100, Baptiste Beauplat wrote: > Am I mistaken in thinking that's only a case of simply rejecting > unsigned DKIM email? This might be, but… > Return-Path: > Received: from mentors.debian.net (localhost [127.0.0.1]) > by wv-debian-mentors1.wavecloud.

Re: Gmail bounce unauthenticated @debian.org addresses

2022-03-04 Thread LeJacq, Jean Pierre
On Friday, March 4, 2022 9:15:59 AM EST Baptiste Beauplat wrote: > > > >> mentors.debian.net with the following message: > > Can you please share the complete headers of the bounced message? Aka > > the thing in the message/rfc822 part of the DSN message. Right now we > > don't know what they se

Re: Gmail bounce unauthenticated @debian.org addresses

2022-03-04 Thread Baptiste Beauplat
On 3/4/22 15:27, Bastian Blank wrote: > I don't see anything about debian.org in those headers? Do you? Ah, I see the confusion. Gmail reject ALL unauthenticated email, this isn't specific to @debian.org addresses but it does, at least, affect mine. We detected the issue on mentors (the bounce I

Re: Gmail bounce unauthenticated @debian.org addresses

2022-03-04 Thread Colin Watson
On Fri, Mar 04, 2022 at 03:15:59PM +0100, Baptiste Beauplat wrote: > On 3/4/22 14:40, Bastian Blank wrote: > > On Fri, Mar 04, 2022 at 12:38:02PM +0100, Baptiste Beauplat wrote: > >> We recently discovered that Gmail started to bounce email from > >> mentors.debian.net with the following message: >

Re: Gmail bounce unauthenticated @debian.org addresses

2022-03-04 Thread Baptiste Beauplat
Hi Bastian, On 3/4/22 14:40, Bastian Blank wrote: > On Fri, Mar 04, 2022 at 12:38:02PM +0100, Baptiste Beauplat wrote: >> We recently discovered that Gmail started to bounce email from >> mentors.debian.net with the following message: > > Can you please share the complete headers of the bounced m

Re: Gmail bounce unauthenticated @debian.org addresses

2022-03-04 Thread Bastian Blank
On Fri, Mar 04, 2022 at 12:38:02PM +0100, Baptiste Beauplat wrote: > We recently discovered that Gmail started to bounce email from > mentors.debian.net with the following message: Can you please share the complete headers of the bounced message? Aka the thing in the message/rfc822 part of the DS

Re: Gmail bounce unauthenticated @debian.org addresses

2022-03-04 Thread Baptiste Beauplat
Hi Stephan, On 3/4/22 13:27, Stephan Lachnit wrote: > On Fri, Mar 4, 2022 at 12:47 PM Baptiste Beauplat wrote: >> >> My debian address is also affected, and probably others that did not >> setup DKIM for their @debian.org address. >> >> As a reminder debian.org addresses does support DKIM. After

Re: Gmail bounce unauthenticated @debian.org addresses

2022-03-04 Thread Ansgar
On Fri, 2022-03-04 at 13:27 +0100, Stephan Lachnit wrote: > On Fri, Mar 4, 2022 at 12:47 PM Baptiste Beauplat > wrote: > > As a reminder debian.org addresses does support DKIM. After > > configuration on your mail server, you can publish your DKIM public > > key > > to db.debian.org [1][2]. > > C

Re: Gmail bounce unauthenticated @debian.org addresses

2022-03-04 Thread Stephan Lachnit
On Fri, Mar 4, 2022 at 12:47 PM Baptiste Beauplat wrote: > > My debian address is also affected, and probably others that did not > setup DKIM for their @debian.org address. > > As a reminder debian.org addresses does support DKIM. After > configuration on your mail server, you can publish your DK

Gmail bounce unauthenticated @debian.org addresses

2022-03-04 Thread Baptiste Beauplat
Hi all, We recently discovered that Gmail started to bounce email from mentors.debian.net with the following message: 550-5.7.26 This message does not have authentication information or fails to 550-5.7.26 pass authentication checks. To best protect our users from spam, the 550-5.7.26 message ha