Re: [mailop] Google's email/postmaster

2025-08-04 Thread John Levine via mailop
It appears that Polath, Kiran via mailop said: >-=-=-=-=-=- >-=-=-=-=-=- > >Hello , > >We at Broadridge Financial Solutions send millions of financial customer >communications on behalf of our clients. Lately, we've found that our emails >are being blocked by Google, which is negatively >affecti

Re: [mailop] antiquefancollectors.com contact

2025-07-30 Thread John Levine via mailop
It appears that Marco Moock via mailop said: >-=-=-=-=-=- >-=-=-=-=-=- > >Hello! > >Does anybody know a way to contact antiquefancollectors.com? > >Their name server is unreachable for me from 2 ISPs, but seems to work >via TOR. It works for me(tm). The two name servers, web server, and mail se

Re: [mailop] DANE question

2025-06-26 Thread John Levine via mailop
It appears that Fehlauer, Norbert via mailop said: >-=-=-=-=-=- >-=-=-=-=-=- >Hi, > >> Are you aware that despite of how long is cert valid, once >> it will expire and you will need its rollower? > >Yes I'm aware of that and it's what I'm doing anyway when the used certificate >is near to its ex

Re: [mailop] Checking existence of recipients

2025-06-26 Thread John Levine via mailop
It appears that Support 3Hound via mailop said: >We must follow their instruction present in the agreement:  verify the >correctness of the data AND NOT contact the end user. That is simply impossible. For reasons many other people have explained, there is no way to verify an address other than

Re: [mailop] Freshservice.com platform abused to send spam?

2025-06-24 Thread John Levine via mailop
It appears that Benoit Panizzon via mailop said: >So either their customer sent those spam emails and now pretends he is >innocent, or some third party created accounts using the company name >and details without permission. But how was the service paid for? Their web site says they offer 14 day

Re: [mailop] [E] Proofpoint Blocklist issue

2025-06-24 Thread John Levine via mailop
It appears that Scott Mutter via mailop said: >Maybe if blacklist operators responded intelligently and timely, this >mailop list wouldn't be so cluttered with requests to contact those >blacklist operators. Maybe if the vast majority of requests they got weren't spammers trying to lie their way

Re: [mailop] iphmx.com - who owns that server (SPF fault)

2025-06-17 Thread John Levine via mailop
It appears that Sebastian Nielsen via mailop said: >SPF "exists" method queries fail in Forcpeoint Email Security Cloud if the DNS >query result contains a private IP address." > > >So please, refrain from using unrouteable adresses when publishing DNS records >meant for the "exists:" mechanism,

Re: [mailop] iphmx.com - who owns that server (SPF fault)

2025-06-17 Thread John Levine via mailop
It appears that Alessandro Vesely via mailop said: >On Tue 17/Jun/2025 10:10:47 +0200 sebastian wrote: >> >> The thing is that iphmx.com seems to be a MaaS infrastructure who tells >> clients >> to use exists: as SPF records. >> >> Like: exists:%{i}.spf.hc2347-76.eu.ipmx.com >> >> One example

Re: [mailop] invalid message headers, was Anyone from Mailgun available?

2025-06-11 Thread John Levine via mailop
It appears that Yiorgos \[George\] Adamopoulos via mailop said: >-=-=-=-=-=- >-=-=-=-=-=- > >I revisiting this for completeness just in case it happens to anyone else >too: > >Google is dropping messages with Message-Id: headers that do not enclose >the Message-Id: in angle brackets. Meaning tha

Re: [mailop] Google does Google things... "email address uses abnormal characters" error

2025-05-29 Thread John Levine via mailop
It appears that Al Iverson via mailop said: >-=-=-=-=-=- >-=-=-=-=-=- > >I'll bet anyone ten dollars that it's a rule misfiring on the hyphen, and >that it will eventually clear up. > >Assuming there's no punycode-encoded weirdness or cyrillic lookalike There are a lot of characters that look lik

Re: [mailop] Is there a way to block domains registered at a specific registrar with SpamAssassin or similar

2025-05-23 Thread John Levine via mailop
It appears that Bill Cole via mailop said: >RDAP has bootstrapping facilities so if a domain is under a gTLD or >*some* ccTLDs you don't need to guess. Right, although .MY isn't listed. >> [tld].whois-server.net points to the corresponding TLD registry whois Um, no, that's for sale. You're p

Re: [mailop] Icewarp and "New" Outlook

2025-05-22 Thread John Levine via mailop
It appears that Bill Cole via mailop said: >For implicit TLS (as on ports 443, 465, 587, 993, 995) the client yes, yes, no, yes, yes Maybe someone configured the port wrong? R's, John ___ mailop mailing list mailop@mailop.org https://list.mailop.org

Re: [mailop] Mail Forwarders should not do DKIM signing right?

2025-05-16 Thread John Levine via mailop
It appears that Marco Moock via mailop said: >Resent, as I sent only to the author... > >Am 15.05.2025 um 11:28:10 Uhr schrieb John Levine: > >> Forwarding is indeed a pain. but this is confused. If you want SPF to >> work you need to change the MAIL FROM bounce address b

Re: [mailop] What is the main objective of DKIM? Preventing From: Header spoofing?

2025-05-15 Thread John Levine via mailop
It appears that Alessandro Vesely via mailop said: >Thanks. I just updated that sentence to read: > >"DomainKeys Identified Mail (DKIM) is an email authentication method >designed to aid detection of forged sender addresses in email (email >spoofing), a technique often used in phishing and emai

Re: [mailop] Mail Forwarders should not do DKIM signing right?

2025-05-15 Thread John Levine via mailop
It appears that Marco Moock via mailop said: >Am 15.05.2025 um 01:36:56 Uhr schrieb Matthew Tse via mailop: > >> I'm looking for advice regarding DKIM signing. So it turns out >> ImprovMX re-signs all forwarded emails with our own DKIM signature, >> which from my research might not be standard (do

Re: [mailop] Possible SMTP callback implementation spotted - info appreciated

2025-05-09 Thread John Levine via mailop
It appears that Peter N. M. Hansteen via mailop said: >Hi, > >My spamtrap harvesting machinery(1) spotted a weird overlong one this >afternoon (times in CEST), to wit: > >[Fri May 09 18:22:04] peter@skapet:~$ grep >ujtvek_baecn8zeukebbwu_yvpj.5ay0q02j3uqj7-jn61h7zh-lw1awg226-...@bsdly.net >/var

Re: [mailop] Have Google and Apple phased out SRS / SPF?

2025-05-09 Thread John Levine via mailop
From: John Levine To: mailop@mailop.org Subject: Re: [mailop] Have Google and Apple phased out SRS / SPF? In-Reply-To: <89a27b2c-65fa-4e93-8387-ba02f0bad...@fh-muenster.de> Organization: Taughannock Networks Cc: b...@fh-muenster.de Bcc: johnl-sent References: <20250506113306.02062...@

Re: [mailop] Have Google and Apple phased out SRS / SPF?

2025-05-07 Thread John Levine via mailop
It appears that Thomas Walter via mailop said: >On 07.05.25 03:30, John Levine via mailop wrote: >> It ends with -all which means "don't forward my mail." Other mail systems >> are doing exactly what you're asking them to do. > >hm. I feel that if you f

Re: [mailop] Have Google and Apple phased out SRS / SPF?

2025-05-06 Thread John Levine via mailop
It appears that Benoit Panizzon via mailop said: >Hi > >Yesterday I analyzed an issue where one of our customers was unable to >send an email to a @gmail.com user. > >It turned out the gmail.com user was forwarding his email to another >recipient which checked our SPF record. As google did not rew

Re: [mailop] Spamgun

2025-05-06 Thread John Levine via mailop
ty & Compliance >nick.scha...@sinch.com<mailto:firstname.lastn...@sinch.com> >Research Report Inbox Insights > > >From: John Levine >Sent: Monday, May 5, 2025 3:22 PM >To: mailop@mailop.org >Cc: Nick Schafer >Subject: Re: [mailop

Re: [mailop] Spamgun

2025-05-05 Thread John Levine via mailop
It appears that Nick Schafer via mailop said: >-=-=-=-=-=- >-=-=-=-=-=- > >Just to follow up on this thread. We are actively working on abuse reports as >they come into our abuse desk each and every day. If you are not receiving an >update to those requests, then please reach >out to me and I'll

Re: [mailop] GoDaddy / unsanctioned email policy changes

2025-04-30 Thread John Levine via mailop
It appears that Alex Shakhov | SH Consulting via mailop said: >DMARC p=reject. A follow-up review confirmed only two people (myself >included) had DNS access, ... How do you know that? Have you reset the passwords and not told the other person for now to try and figure out where the leak is? Ke

Re: [mailop] Suggestions for medium performance mail server

2025-04-07 Thread John Levine via mailop
It appears that Al Iverson via mailop said: >If it were me, I'd probably investigate Kumo MTA, it's open source, >good for bulk senders, and the peeps behind it are known members of >the email community/M3/etc. https://kumomta.com/ Thanks. It's worth a look. >Amazon SES works pretty well, too,

[mailop] Suggestions for medium performance mail server

2025-04-07 Thread John Levine via mailop
I'm consulting for a non-profit that needs to upgrade its mail system. They send about 100,000 messages a day, a combination of a nightly update message that people can subscribe to, and transactional mail reporting when things happen. There's no discussion lists, and the inbound mail is a relative

Re: [mailop] Google and Spam detection

2025-04-07 Thread John Levine via mailop
It appears that Klaus Ethgen via mailop said: >The problem of using DKIM is, that it changes the meaning of headers >slightly. Uh, what? DKIM just adds a signature. It doesn't change other headers at all. >I do not trust any SSL-CA. But Cacert is the most trustworthy. > >With this Lets-Encrypt

Re: [mailop] sslv3 alert bad certificate and the fix.

2025-04-06 Thread John Levine via mailop
It appears that Hal Murray via mailop said: >-=-=-=-=-=- > > >Lyle Giese said: >> Let's Encrypt requires (according to documentation I have seen) Port 80 >> TCP be in use for verification.� I have no other legit use for Port 80 >> on this smart host and decided a long time ago, not to use Let's En

Re: [mailop] sslv3 alert bad certificate and the fix.

2025-04-04 Thread John Levine via mailop
It appears that Viktor Dukhovni via mailop said: >On Fri, Apr 04, 2025 at 08:17:19PM -0500, Lyle Giese via mailop wrote: > >> But in the mean time the logs started showing a few more services failing to >> send to my smart host, like SendGrid and another mass mailing outfit(no big >> loss but conc

Re: [mailop] Intermittent missing DMARC records at Proofpoint

2025-04-03 Thread John Levine via mailop
It appears that Simplelists - Andy Beverley via mailop said: >A query for _dmarc.gcu.edu.dmarc.has.pphosted.com results in a NOERROR >response, while a query for its ancestor, edu.dmarc.has.pphosted.com, >returns a name error (NXDOMAIN), which indicates that subdomains of >edu.dmarc.has.pphost

Re: [mailop] New domains

2025-03-30 Thread John Levine via mailop
It appears that Alessandro Vesely via mailop said: >Hi, > >my tiny server runs a filter that stores message metadata in a DB. Old >messages are deleted, domains are kept. There is daily log of new domains, >useful for spotting fake domain tides, for example. > >Today, for the first time, I saw

Re: [mailop] RFC1035 and DKIM Keys

2025-03-28 Thread John Levine via mailop
It appears that Faisal Misle via mailop said: >Hello all, > >I am working with a customer who's DNS provider won't let him add DKIM >keys as they say records with underscores go against RFC 1035. It seems to me your customer urgently needs to find and switch to a competent DNS provider since that

Re: [mailop] s5h.net listing criteria/reasons

2025-03-25 Thread John Levine via mailop
It appears that Marco Moock via mailop said: >I only operate the mod relay, not an NNTP server itself. The idea is to >identify the message, so I can contact the admin of the server where it >was injected, so they can delete the account. There's no reason to assume there was any NNTP server. The

Re: [mailop] PEST - Proxy Email Spam Target

2025-03-10 Thread John Levine via mailop
It appears that Dan Malm via mailop said: >On 2025-03-09 19:18, John Levine via mailop wrote: >> My users, who are not idiots > >That must be nice ;) Many of them are related to me, so perhaps it should be my users, who are no more idiotic than I am,

Re: [mailop] PEST - Proxy Email Spam Target

2025-03-09 Thread John Levine via mailop
It appears that Jaroslaw Rafa via mailop said: >Dnia 7.03.2025 o godz. 20:39:47 John Levine via mailop pisze: >> I have a fake auth on port 25. Local users sending mail do real auth on >> port 465 or 587. >> >> I get plenty of bot auth traffic on port 25. > >B

Re: [mailop] PEST - Proxy Email Spam Target

2025-03-07 Thread John Levine via mailop
It appears that Lena--- via mailop said: >Did they all try to send a message or closed or dropped the connection >after your sofware accepted the password? > >I'd be curious to look at those messages. I guess that most such messages >might be not actual spam, but a test message to check whether >t

Re: [mailop] PEST - Proxy Email Spam Target

2025-03-07 Thread John Levine via mailop
It appears that Marco Moock via mailop said: >Am 06.03.2025 um 15:27:54 Uhr schrieb mailop--- via mailop: > >>   6. If auth failed it drops message, but says it was delivered > >A really, really bad idea if that system is being used by real users >who might mistype their password. I have a fake

Re: [mailop] Question about SRS and ARC

2025-02-12 Thread John Levine via mailop
It appears that Niels Kobschätzki via mailop said: >Hello, > >I have encountered the first time apparently the problem that I have a user >who forwards mails to another mail-server and a forwarded >mail got rejected because of the dmarc-policy of the original senders domain. >I am using SRS and m

Re: [mailop] Spamhaus "free" DQS

2025-02-12 Thread John Levine via mailop
It appears that Grant Taylor via mailop said: >On 2/11/25 5:12 AM, Alessandro Vesely via mailop wrote: >> And what happens if the amount is exceeded? > >I don't know. They politely write to you and ask you to pay. It's freemium, hardly the only service that works that way. R's, John ___

Re: [mailop] DMARC reports in ZIP format

2025-02-10 Thread John Levine via mailop
It appears that Ralph Seichter via mailop said: >Interesting you should mention that, given that I just watched a video >[1] discussing some of the ZIP format's pitfalls and oddities. > > [1] https://youtu.be/RYHYiXMJdZI > >Since archives may potentially even start with random data, I wonder how

Re: [mailop] DMARC reports in ZIP format

2025-02-09 Thread John Levine via mailop
type is sometimes wrong so you're better off sniffing the first few bytes of the attachment to see what format it is. No, they shouldn't do that either. But they do. R's, John -- Regards, John Levine, jo...@taugh.com, Primary Perpetrator of "The Internet for

Re: [mailop] Fallback to A/AAAA?

2025-02-03 Thread John Levine via mailop
According to John Levine via mailop : >>>It would, but fallback to A has been part of SMTP since RFC 974 in 1986 and >>>it's >>>not going away now. >> >>I believe it should go away asap. I asked the guy who wrote 974 who says fallback to A was intende

Re: [mailop] Fallback to A/AAAA?

2025-02-03 Thread John Levine via mailop
It appears that Matus UHLAR - fantomas via mailop said: >On 30.01.25 13:28, John Levine via mailop wrote: >>That would reject all mail from Gmail and every other large provider I know. >>Seems a bit extreme. It'd even reject mail from my tiny system since the >>inboun

Re: [mailop] Fallback to A/AAAA?

2025-01-30 Thread John Levine via mailop
ty >of systems will reject attemtps to send mail from such a domain, mine >included, and I, for one, have not intention of changing that. Yup, that's what section 4.2 of RFC 7505 says. R's, John -- Regards, John Levine, jo...@taugh.com, Primary Perpetrator of "The Interne

Re: [mailop] Fallback to A/AAAA?

2025-01-30 Thread John Levine via mailop
It appears that Matus UHLAR - fantomas via mailop said: >I'm sure we could reject many mail coming from hosts without MX record and >without running MTA on port 25, thus from undeliverable senders. That would reject all mail from Gmail and every other large provider I know. Seems a bit extreme.

[mailop] The IETF's mailing lists are moving to a new network

2025-01-29 Thread John Levine via mailop
The IETF runs a lot of mailing lists, which I think many of us subscribe to. The mail will shortly be moving to a new server at Panix in New York, both the mailing lists and the transaction-like mail about the status of documents and such. It's not like a giant ESP, but the overall volume is o

Re: [mailop] Fallback to A/AAAA?

2025-01-28 Thread John Levine via mailop
It appears that Fehlauer, Norbert via mailop said: > >Thanks. So, if a domain has correct defined mx records only those can be used >and if they are not reachable for any reason there should >never be an attempt to reach the implicit MX RR of the domain. That is correct, although since this is

Re: [mailop] Q re. RFC 5322, sec. 2.3., wrt. completely empty mail bodies

2025-01-26 Thread John Levine via mailop
the CRLF in front of it are optional. I agree that any mail program that barfs on a message that only contains headers is pretty broken. R's, John -- Regards, John Levine, jo...@taugh.com, Primary Perpetrator of "The Internet for Dummies", Pl

Re: [mailop] Q re. RFC 5322, sec. 2.3., wrt. completely empty mail bodies

2025-01-25 Thread John Levine via mailop
It appears that Bill Cole via mailop said: >On 2025-01-25 at 13:36:52 UTC-0500 (Sat, 25 Jan 2025 19:36:52 +0100) >Carsten Schiefner via mailop >is rumored to have said: > >> Dear all - >> >> my understanding of section 2.3. "Body" of RFC 5322 "Internet Message >> Format" (https://datatracker.ie

Re: [mailop] I know there is some 1 and 1 (IONOS) kundenserver.de people lurking on this list..

2025-01-11 Thread John Levine via mailop
It appears that Michael Peddemors via mailop said: >Your systems are being abused right now by a well known attacker.. > >Sending email replay attacks, and your systems also generate back scatter.. > >First of all.. (And this goes to all email operators) only allow domains >in the MAIL FROM, that

Re: [mailop] Service specific passwords ? - was Re: Suggested best practice for changing ISP MTA IPs?

2025-01-06 Thread John Levine via mailop
It appears that postfix--- via mailop said: >> Andrew, either I’m not understanding or you’ve not thought this through… >> >> If a customer wants a copy of all of their email to be in Gmail, does it >> really matter if Gmail has the password to the user’s account? > >does the user use the same c

Re: [mailop] Proposal: automated monthly posting wrt. useful resources

2024-12-29 Thread John Levine via mailop
It appears that Hal Murray via mailop said: >> Oliver's posting below got me thinking about a regular, probably monthly >> summary posting of useful tools and resources to track down email issues. > >I think the collection of tools and resources would quickly become too >large to be useful as a

Re: [mailop] [Admin] Re: This is ridiculous

2024-12-27 Thread John Levine via mailop
It appears that Lyndon Nerenberg (VE7TFX/VE6BBM) via mailop said: >Michael Denney via mailop writes: > >> I'm simply replying via my normal mail client. I didn't realize that = >> having HTML in my message would cause anyone problems. AFAIK everyone = >> these days has an HTML-Capable mail clie

Re: [mailop] This is ridiculous

2024-12-27 Thread John Levine via mailop
It appears that Andrew C Aitchison via mailop said: >I conclude that this GMail user get virtually no wanted messages from >*.eu.org addresses and that many gmail users get significant quantities >of spam from these addresses. > >Yes, eu.org is a "TLD" but if most of those addresses send mostly

Re: [mailop] Domain Factory Contact?

2024-12-19 Thread John Levine via mailop
It appears that Andrew C Aitchison via mailop said: >On Tue, 17 Dec 2024, Gellner, Oliver via mailop wrote: > >> The only validators which I found that correctly reported a problem >> are Mailhardener ("The selector 'init_dkim' contains an underscore, >> some SMTP implementations will not accept a

Re: [mailop] DKIM “z” Tag

2024-12-18 Thread John Levine via mailop
It appears that Faisal Misle via mailop said: >While almost nobody reads message headers to see the signature, I can see how >it can be useful to see if a >header was modified in transit. However, how practical/useful/needed is it in >real life, and more importantly, >is there any harm in testin

Re: [mailop] How much mail is spam?

2024-12-09 Thread John Levine via mailop
It’s this draft, not formally published.IEEE Xplore Full-Text PDF:ieeexplore.ieee.orgPlease consider the environment before reading this message.John Levine, jo...@taugh.com On Dec 9, 2024, at 12:09, Dave Crocker wrote: On 12/9/2024 8:59 AM, John Levine via

[mailop] How much mail is spam?

2024-12-09 Thread John Levine via mailop
It has been my impression that for many years about 90% of the mail a system typically recieves is spam. Most of it is easy to filter so the amount that gets into a user's mailbox is a lot less. I sure see a lot of attempted deliveries on my small MTAs. I ask because I've ben looking at a paper

Re: [mailop] Is there a standard for how many RCPT to accept?

2024-12-05 Thread John Levine via mailop
It appears that Viktor Dukhovni via mailop said: >On Thu, Dec 05, 2024 at 06:20:11AM -0800, Michael Peddemors via mailop wrote: > >> And for the record, ESP's and senders should NEVER assume that they can send >> even 100 recipients. > >Well, senders really SHOULD be able to, the fact that some la

Re: [mailop] Is there a standard for how many RCPT to accept?

2024-12-05 Thread John Levine via mailop
It appears that Viktor Dukhovni via mailop said: >On Wed, Dec 04, 2024 at 07:23:07PM -0700, Andrew Barker via mailop wrote: > >>RFC 5321, indicates the correct code for too many recipients is code >>452. It also notes that some old servers might also return 552 due to >>an error in an

Re: [mailop] Is there a standard for how many RCPT to accept?

2024-12-05 Thread John Levine via mailop
It appears that Viktor Dukhovni via mailop said: >On Thu, Dec 05, 2024 at 03:01:04PM +, Gellner, Oliver via mailop wrote: > >> > Well, the correct reply code is 452. The correct enhanced status code is >> > 4.5.3: >> > https://www.iana.org/assignments/smtp-enhanced-status-codes/smtp-enhanced

[mailop] How to move existing mail domain to Google Workspace

2024-12-04 Thread John Levine via mailop
I have been hosting mail for my wife's church, and they want to move it to Google Workspace. There is one address that goes to a real mailbox here that's picked up by IMAP, and a few others that forward to other addresses. All of the instructions for setting up mail at Google say to change the MX

Re: [mailop] Yahoo and mailing lists

2024-11-25 Thread John Levine via mailop
It appears that Mark Fletcher via mailop said: >Yahoo policy change in early November, affecting handling of mailing list >email from domains with a DMARC record of p=none. Previously, they would >accept mailing list emails sent from these domains without having to >re-write the From line. Since t

Re: [mailop] current state of multi-protocol mail forwarding

2024-11-23 Thread John Levine via mailop
It appears that Miles Fidelman via mailop said: >Andy Smith via mailop wrote: >> Hi, >> >> On Sat, Nov 23, 2024 at 12:16:55AM +0100, Philipp Kern via mailop wrote: >>> On 11/22/24 8:37 PM, Miles Fidelman via mailop wrote: So, one answer to my problem is just to set up a copy of sendmail with

Re: [mailop] current state of multi-protocol mail forwarding

2024-11-22 Thread John Levine via mailop
It appears that Mark Delany via mailop said: >On 22Nov24, Eric Tykwinski via mailop apparently wrote: >> Here’s the thing that confuses me, and perhaps because I don’t know >> Interplanetary File System as much as I should. >> You have /var/spool/mail/user which changes every time you receive/del

Re: [mailop] current state of multi-protocol mail forwarding

2024-11-22 Thread John Levine via mailop
It appears that Miles Fidelman via mailop said: >So, one answer to my problem is just to set up a copy of sendmail with >local delivery to an IPFS file.  But, that leads me to wonder if anybody >is offering mail-gateways as a service - be they free gateways or paid? Gateways to what? The way yo

Re: [mailop] Yahoo/AOL pipelining, was Delivery Issues as of November 11th.

2024-11-18 Thread John Levine via mailop
It appears that Michael Peddemors via mailop said: >However, not sure you should use pipelining .. Given that almost every >system out there now does inline rejection, at various SMTP verbs, >pipelining is not helping your cause.. I think you're misunderstanding how pipelining works. It just l

Re: [mailop] Underscore in DKIM Selectorname?

2024-11-06 Thread John Levine via mailop
It appears that Fehlauer, Norbert via mailop said: >-=-=-=-=-=- >-=-=-=-=-=- > >Hi, > >I know that an underscore in DKIM selectornames usually trigger a DKIM neutral >error. I guess >somewhere in the RFC it is stated if an underscore is allowed or accepted. Can >someone please >point out the co

Re: [mailop] Google Rejecting Mails as Spam

2024-10-27 Thread John Levine via mailop
It appears that Viktor Dukhovni via mailop said: >On Sat, Oct 26, 2024 at 02:16:51PM -0400, John Levine via mailop wrote: >> It appears that Gino via mailop said: >> >Those awful RSA keys. What's the consensus on using only ed25519 DKIM >> >signatures? >>

Re: [mailop] Google Rejecting Mails as Spam

2024-10-26 Thread John Levine via mailop
It appears that Gino via mailop said: >Those awful RSA keys. What's the consensus on using only ed25519 DKIM >signatures? You'll lose a lot of mail, because very few systems implement them. I wrote the RFC and I still haven't gotten around to it. R's, John _

Re: [mailop] Google Rejecting Mails as Spam

2024-10-25 Thread John Levine via mailop
It appears that Bill Cole via mailop said: >> default._domainkey.valar.uk.net. 300 IN TXT "v=DKIM1; k=rsa; >> p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr51Z83Plk5XDJOCp8wk7 etc. >Nope. For example: There are three spaces embedded in the part of the key in the first string in the DKIM

Re: [mailop] Huge increase in SASL brute force

2024-10-22 Thread John Levine via mailop
It appears that A. Schulze via mailop said: >that's nice! May you tell more about the configuration? Is it postfix >or qpsmtpd? Neither, it's mailfront. R's, John ___ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop

Re: [mailop] Huge increase in SASL brute force

2024-10-21 Thread John Levine via mailop
It appears that Peter N. M. Hansteen via mailop said: >which begs the question, what to do you do to the ones that get thrown into >the table? My MTA does fake auth. If you try to do SMTP AUTH, it always succeds and then I route the message to a spam trap. Mostly the messages are short, just eno

Re: [mailop] 8BITMIME, was Mimecast DKIM Sender Invalid

2024-10-21 Thread John Levine via mailop
e that claims to do so is Outlook/Hotmail and I don't get the impression they do it correctly. -- Regards, John Levine, jo...@taugh.com, Primary Perpetrator of "The Internet for Dummies", Please consider the environment before reading this e-mail. https://jl.ly

Re: [mailop] Mimecast DKIM Sender Invalid

2024-10-21 Thread John Levine via mailop
It appears that Slavko via mailop said: >Year or two ago i discuss 8BITMIME with exim's dev (as part >of my SMTPUTF8 experiments) and he stated, that nowadays >is support of 8BITMIME as common, that it is not worth to care >about it (or so). I see, that it is not this case ;-) qmail has been igno

Re: [mailop] who's the sender, was SPF fragility vs. utility

2024-10-20 Thread John Levine via mailop
According to Anthony Howe via mailop : >>> Thunderbird does show more than display names (unless I'm missing >>> something) ... >> >> In the message list it just shows the display name unless there is no >> display name, >> in which case it shows the address. >> >> When you open the message, it

Re: [mailop] SPF fragility vs. utility

2024-10-20 Thread John Levine via mailop
It appears that Anthony Howe via mailop said: >> Similar with Thunderbird. > >Thunderbird does show more than display names (unless I'm missing something) >... In the message list it just shows the display name unless there is no display name, in which case it shows the address. When you open

Re: [mailop] SPF alignment when sending from G Suite

2024-10-10 Thread John Levine via mailop
It appears that Dave Crocker via mailop said: > >On 10/9/2024 11:57 PM, Matus UHLAR - fantomas via mailop wrote: >> checking SPF is a fallback mechanism. > >SPF is a fairly complex, fragile tool and it makes DMARC.. It's >inclusion in DMARC is always justified with language such as you used, >b

Re: [mailop] DKIM: Who's using the x tag?

2024-10-10 Thread John Levine via mailop
It appears that Al Iverson via mailop said: >If you've got any evidence of x= in the wild that you care to share, >thank you kindly in advance! I've been collecting the DKIM signatures of mail that lands in my personal mailboxes. Since May there are 19,000 signed messages of which about 5000 hav

Re: [mailop] IDNA domain with ß

2024-10-05 Thread John Levine via mailop
It appears that Slavko via mailop said: >>>+ both are able to use underscored labels (eg. _dmarc), in contrast >>> of idna library, which rejects that domain name with invalid char > >>That is correct. IDNA is only for encoding hostnames, and hostnames do not >>allow >>underscores. > >Neverendin

Re: [mailop] IDNA domain with ß

2024-10-05 Thread John Levine via mailop
It appears that Slavko via mailop said: >Dňa 5. októbra 2024 13:35:01 UTC používateľ Viktor Dukhovni via mailop > napísal: > >>The ICU library encodes domain names that consist of valid U-labels and >>NR-LDH labels to A-labels, labels starting with "_" are neither >>U-labels, nor NR-LDH labels, s

Re: [mailop] IDNA domain with ß

2024-10-05 Thread John Levine via mailop
It appears that Slavko via mailop said: >+ dnspython requires extra effort to get it works with IDNA2008 > and U-labels (by default it encodes "ß" as "ss") Yeah, the python encodings.idna library has never been updated past IDNA2003 for reasons I find unpersuasive. If you import the external idn

Re: [mailop] Ask for commercial smtp gateway

2024-09-21 Thread John Levine via mailop
It appears that Corey H via mailop said: >I expect it should be a pure smtp relay, change nothing in headers. We >can pay for it. I have looked and found nothing. For fairly obvious reasons, relays are picky about what they allow, and while your set of random mail may be nice, someone else's tha

Re: [mailop] Trouble sending/receiving @dm.duke.edu

2024-09-19 Thread John Levine via mailop
It appears that Viktor Dukhovni via mailop said: >On Thu, Sep 19, 2024 at 11:54:40AM -0700, Seth Mattinen via mailop wrote: >> On 9/19/24 11:53, Marco Moock wrote: >> > Am 19.09.2024 um 11:29:23 Uhr schrieb Seth Mattinen via mailop: >> > >> > > Looking for someone who handles mail in duke.edu for

Re: [mailop] Super dumb gmail request ...

2024-08-31 Thread John Levine via mailop
It appears that Matthew Richardson via mailop said: >TOTP is based on a shared secret which is (depending upon TOTP client) >straightford to extract and retain securely for the long term. > >Does anyone see any flaw in this approach, or in the longevity of TOTP? I think it's the best we can do th

Re: [mailop] Understanding why a spammer is doing this

2024-08-29 Thread John Levine via mailop
s with my old keys so if you want to check them, better check them promptly. R's, John -- Regards, John Levine, jo...@taugh.com, Primary Perpetrator of "The Internet for Dummies", Please consider the environment before reading this e-mail. https://jl.ly

Re: [mailop] What Kind of Return-Path's are these? (A1 Telekom)

2024-08-28 Thread John Levine via mailop
It appears that Tapio Peltonen via mailop said: >On Wed, 28 Aug 2024 at 02:05, Michael Peddemors via mailop > wrote: > >> Return-Path: >> > >Hm, isn't the local part supposed to be max 64 characters? >That's 112 characters, almost twice the RFC 5321 max length. Yeah, that's a problem and I know

Re: [mailop] Amusing and Convoluted Request

2024-08-26 Thread John Levine via mailop
It appears that Rhys Ferris via mailop said: >Recently, having finally gotten on board with unsubscribe headers, but >still getting some Spam complaints from some ISPs, our bulk department >asked if we could please redirect the inbound spam complaints back to >the ISP to ask the ISP to reach ou

Re: [mailop] DMARC p=reject Interaction with security gateways

2024-08-23 Thread John Levine via mailop
It appears that Alex Shakhov via mailop said: >-=-=-=-=-=- >-=-=-=-=-=- > >Hello - We are currently managing several domains that are experiencing >spoofing attacks, which led us to implement a p=reject policy. We monitor >these domains through Uriports, and while all DKIM/SPF validations pass, >e

Re: [mailop] [E] Yahoo 'temporarily' deferred

2024-08-17 Thread John Levine via mailop
It appears that Kasper Peeters via mailop said: >I understand that. I have looked carefully for any abuse (monitoring postfix >queues, monitoring outbound port 25 traffic at an upstream router >and things like that) but do not see anything suspicious. I'm sure a >sufficiently determined hacker w

Re: [mailop] [E] Yahoo 'temporarily' deferred

2024-08-17 Thread John Levine via mailop
It appears that Kasper Peeters via mailop said: >-=-=-=-=-=- >-=-=-=-=-=- > >> Yahoo's FBL works on DKIM signatures. Are you 100% sure that all the mail >> you're sending has >> signatures from domains you've signed up to get reports? > >Yes, we serve 6 domains, all have correct DKIM signatures

Re: [mailop] [E] Yahoo 'temporarily' deferred

2024-08-16 Thread John Levine via mailop
It appears that Kasper Peeters via mailop said: >-=-=-=-=-=- >-=-=-=-=-=- > >> I would suggest that you join the Yahoo complaint Feedback loop: >> >> https://senders.yahooinc.com/complaint-feedback-loop/ > >We did, for all domains served from that IP, but have so far not received a >single messa

Re: [mailop] [E] Yahoo 'temporarily' deferred

2024-08-16 Thread John Levine via mailop
It appears that Viktor Dukhovni via mailop said: >On Tue, Aug 13, 2024 at 05:40:05PM -0700, incoming-mailop--- via mailop wrote: > >> In our case we had a client who was repeated flagging our mailings as >> spam.  We contacted the client and all was resolved. > >I have distant recollection of repo

Re: [mailop] Plain connections on SubmissionS port

2024-08-12 Thread John Levine via mailop
It appears that Viktor Dukhovni via mailop said: >For SUBMIT, the traffic is presumably from your own users, who are >rarely very far away, and if temporarily on a bad link will try >again from a better location. So the timeouts on ports 465 and 587 >could be shorter. Whatever your users are unl

Re: [mailop] [EXTERNAL] Re: (Mis)use of DKIM's length tag and it's impact on DMARC and BIMI

2024-08-11 Thread John Levine via mailop
It appears that Michael Orlitzky via mailop said: >On 2024-08-09 15:11:45, Brotman, Alex via mailop wrote: >> Yes, it should be updated. >> >> It might also be worth trying to get a bug filed against opendkim to update >> docs or comments in the sample configuration file that is provided in the

Re: [mailop] Proofpoint breaking delivery for Google Workspace

2024-08-02 Thread John Levine via mailop
It appears that Tobias Fiebig via mailop said: >Moin, >I just got poked by a user that mail delivery for a review system fails >to some users; > >Specifically, organizations using cloud-hosted Proofpoint setups >forwarding to google workspace. I realize this is unlikely to happen, but they should

Re: [mailop] oauth2 for mail clients

2024-07-31 Thread John Levine via mailop
It appears that Michael Brown via mailop said: >-=-=-=-=-=- >-=-=-=-=-=- > >On 2024-07-31 16:51, John Levine via mailop wrote: >> Gmail gets lost in a mess of creating private Google cloud projects > >alpine works *great* using the well-known oAuth2 client secrets from &

Re: [mailop] oauth2 for mail clients

2024-07-31 Thread John Levine via mailop
It appears that Andrew C Aitchison via mailop said: >I will put in a request to the alpine mailing list, once I understand which >of these I should be asking for. Alpine 2.26 already does oauth for Outlook and Gmail. The Outlook version works pretty well, Gmail gets lost in a mess of creating p

Re: [mailop] Echospoofing

2024-07-30 Thread John Levine via mailop
It appears that Jaren Angerbauer via mailop said: >$dayjob is Proofpoint -- I have been heavily involved with this. We have >gone to great lengths to raise awareness with customers and get them to >correctly configure their systems. Ultimately up to them though, despite >our warnings of potentia

Re: [mailop] Moving my domains to a new host, email to gmail times out

2024-07-30 Thread John Levine via mailop
It appears that Ken Robinson via mailop said: >LOG: MAIN > H=mail.gmail.com [104.207.146.49]: SMTP timeout after initial connection: >Connection timed out >LOG: MAIN > == kenrb...@gmail.com R=lookuphost T=remote_smtp defer (110): Connection That's not Gmail's mail server. What are you trying t

Re: [mailop] Outlook forwarding meeting invite breaks DMARC

2024-07-29 Thread John Levine via mailop
It appears that Gellner, Oliver via mailop said: >-=-=-=-=-=- >-=-=-=-=-=- > >On 29.07.2024 at 17:08 Scott Q. via mailop wrote: > > Anyone else dealing with Outlook not rewriting the header From upon >forwarding a meeting invite ? > >This is obviously wrong and breaks on domains with strict DMAR

Re: [mailop] Invalid format and contents of DMARC reports

2024-07-28 Thread John Levine via mailop
It appears that Daniel K. via mailop said: >RFC 7478 says: > > The aggregate data MUST be an XML file that > SHOULD be subjected to GZIP compression. > >The name of the filename is then specified, and the extension further >implies only gzip as an optional compression method. > >

  1   2   3   4   5   6   7   8   9   10   >