[mailop] Mailop cert - was Re: Admin: Gmail users of mailop suspended due to bounces.

2019-04-29 Thread Andrew C Aitchison via mailop
On Mon, 29 Apr 2019, Jim Popovitch via mailop wrote: On April 29, 2019 3:46:03 AM UTC, John Levine via mailop wrote: Still waiting to hear when mailop.org adds its SPF record. Didn't it take almost 2 years the last time we waited on mailop.org to fix a cert?😊 The current web cert for the

Re: [mailop] forwarding failure, Admin: Gmail users of mailop suspended due to bounces.

2019-05-02 Thread Andrew C Aitchison via mailop
On Tue, 30 Apr 2019, John Levine via mailop wrote: I've been encouraging my users not to forward their mail, and if they want to consolidate it at Gmail or Yahoo or whatever, set the other service up to do POP retrieval. Works fine, at the cost of a slight delay in getting some of the mail. W

[mailop] Bots, spam-traps and signup pages

2019-05-09 Thread Andrew C Aitchison via mailop
On Thu, 9 May 2019, Rob McEwen via mailop wrote: The documents that Paul referenced in his last message - probably mentioned this somewhere - but I'll add that (in addition to the link above and doing confirmed-opt-in "COI") you should strongly encourage your customers to captcha-protect thei

Re: [mailop] SPF: What happens if includes specify different 'all' settings?

2019-06-27 Thread Andrew C Aitchison via mailop
On Thu, 27 Jun 2019, Benoit Panizzon via mailop wrote: Hi List Just wondering as I have come across this situation multiple times. A domain includes an SPF entries which have different 'all' settings. Which one is valid? I would have guessed, that an 'include' should never contain the 'all' s

Re: [mailop] Moving to a new outbound IP range

2019-07-01 Thread Andrew C Aitchison via mailop
On Mon, 1 Jul 2019, Simplelists - Andrew Beverley via mailop wrote: Dear all, I'm after some general advice about moving to a new outbound email IP address range. We have a choice of either applying for a brand new range from RIPE (which has presumably never been used before to send email), or

Re: [mailop] Paging Proofpoint - possible issue with SSL cert for SORBS website

2019-08-09 Thread Andrew C Aitchison via mailop
On Fri, 9 Aug 2019, Michelle Sullivan via mailop wrote: Ken O'Driscoll via mailop wrote: As per a discussion on a emailgeeks today, it seems that Firefox is throwing up a CA not trusted security alert for visitors to https:// www.secure.sorbs.net I can reproduce on Firefox but not Chrome. A c

Re: [mailop] live.fr admin required

2019-08-20 Thread Andrew C Aitchison via mailop
On Tue, 20 Aug 2019, William Astle via mailop wrote: Can a live.fr email admin with access to actually do something contact me? One of your users has been forwarding their email to my gmail account and refuses to stop doing so. I can provide evidence of the email forwarding (messages with full

Re: [mailop] [ext] Re: Return Path / Sender Score

2019-08-22 Thread Andrew C Aitchison via mailop
On Thu, 22 Aug 2019, Michael Rathbun via mailop wrote: In our experience, if you mail to addresses that haven't engaged (subscribe, open, click) in the previous 90 to 180 days, there is a growing tendency for your IPs/domains to be classified as spammaceous and dealt with appropriately. You ca

Re: [mailop] DMARC and subdomains

2023-06-18 Thread Andrew C Aitchison via mailop
On Sun, 18 Jun 2023, Alessandro Vesely via mailop wrote: On Fri 16/Jun/2023 22:41:39 +0200 Gellner, Oliver via mailop wrote: On 16.06.2023 at 16:13 Jaroslaw Rafa via mailop wrote: [...] So at least one (and important one, given the size of this mail service) implementation of DMARC does not us

Re: [mailop] SendGrid is deleting your mail

2023-06-23 Thread Andrew C Aitchison via mailop
On Fri, 23 Jun 2023, Carsten Schiefner via mailop wrote: Hi, Luke (& all) - how about elaborating a bit further on the whats and whys of your setup? Because at first sight it is indeed a bit hard to understand why SendGrid may not be in a position to follow the RFCs and the thereof derived an

Re: [mailop] Please don't Cc: me, use only the list for replies

2023-07-12 Thread Andrew C Aitchison via mailop
Please don't Cc: me, use only the list for replies, even if the mailing list software screws up the Reply-To header. ___ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop Please could you indicate who you are and, if appro

Re: [mailop] Please don't Cc: me, use only the list for replies

2023-07-12 Thread Andrew C Aitchison via mailop
On Wed, 12 Jul 2023, ml+mailop--- via mailop wrote: On Wed, Jul 12, 2023, Andrew C Aitchison via mailop wrote: Please could you indicate who you are and, Why? Sorry, I meant to ask for a name or an alias. Why ? Because I don't believe that "the paranoid curmudgeon from esmtp.or

Re: [mailop] Guide for setting up a mail server ?

2023-07-13 Thread Andrew C Aitchison via mailop
On Wed, 12 Jul 2023, Michael Peddemors via mailop wrote: And yes, email forwarding will break.. but email forwarding remotely should be killed off anyways.. everyone can log into two accounts. Universities would like to allow the world to contact staff who have recently left. We forward paper

Re: [mailop] Antivirus/anti-phish email scanning

2023-07-31 Thread Andrew C Aitchison via mailop
On Mon, 31 Jul 2023, Mike Hillyer via mailop wrote: From: mailop On Behalf Of Taavi Eomäe via mailop Does anyone here have any familiarity with antivirus/anti-phish vendors that can or are meant to be used with email? I've checked the rspamd external services page (https://rspamd.com/doc/mod

Re: [mailop] OT: OpenTable

2023-08-30 Thread Andrew C Aitchison via mailop
On Wed, 30 Aug 2023, Ángel via mailop wrote: On 2023-08-24 at 14:29 -0400, postfix--- via mailop wrote: (...) Needless to say: I will avoid restaurants using OpenTable, whether while visiting destinations or at home. If they cannot choose a service provider that is respectful of my choices, t

Re: [mailop] Sendlane Inc [ESP] New IP range warming notice

2023-09-15 Thread Andrew C Aitchison via mailop
On Fri, 15 Sep 2023, Damon Sauer via mailop wrote: Good Morning! Just an FYI to the mailop community, We are warming up: (in progress) 38.152.90.0/24 starting with 38.152.90.0/26 38.154.122.128/28 38.154.109.32/27 # whois 38.152.90.1 output includes: NetRange: 38.152.0.0 - 38.152.127.2

Re: [mailop] Microsoft announces DANE for Exchange Online Inbound starting next year

2023-09-29 Thread Andrew C Aitchison via mailop
On Fri, 29 Sep 2023, Philip Paeps via mailop wrote: On 2023-09-28 03:13:27 (+0800), Mike Hillyer via mailop wrote: Breaking news, Microsoft is pulling the trigger on DANE next year: Implementing Inbound SMTP DANE with DNSSEC for Exchange Online Mail Flow This is good news. Hopefully this wil

Re: [mailop] Zero-day RCE for exim - whacky stats?

2023-09-30 Thread Andrew C Aitchison via mailop
On Sat, 30 Sep 2023, Andrew C Aitchison wrote: On Sat, 30 Sep 2023, Jay R. Ashworth via mailop wrote: I haven't even heard exim *mentioned* in like 20 years; these stats can't be right, can they? https://www.bleepingcomputer.com/news/security/millions-of-exim-mail-servers-exposed-to-zero-day

Re: [mailop] Zero-day RCE for exim - whacky stats?

2023-09-30 Thread Andrew C Aitchison via mailop
On Sat, 30 Sep 2023, Jay R. Ashworth via mailop wrote: I haven't even heard exim *mentioned* in like 20 years; these stats can't be right, can they? https://www.bleepingcomputer.com/news/security/millions-of-exim-mail-servers-exposed-to-zero-day-rce-attacks/ https://arstechnica.com/security/2

Re: [mailop] Zero-day RCE for exim - whacky stats?

2023-09-30 Thread Andrew C Aitchison via mailop
On Sat, 30 Sep 2023, Carsten Schiefner via mailop wrote: Hi Simon, On 30.09.2023 10:18, Simon Arlott via mailop wrote: On 30/09/2023 08:50, Andrew C Aitchison via mailop wrote: I see that there is an Exim release candidate out on test at the moment https://lists.exim.org/lurker/message

Re: [mailop] Google not sending DMARC reports since 9/25

2023-10-03 Thread Andrew C Aitchison via mailop
On Tue, 3 Oct 2023, Faisal Misle via mailop wrote: We noticed (and looks like so did our counterparts at Dmarcian) that Google has not been sending DMARC reports since last week. I haven't had a dmarc report from google since 25 Sept either, but they did sent a tls report for 30 Sept. -- Andr

[mailop] DMARC report rejections - was Re: Recent increase in GMail 421-4.7.28 responses

2023-10-06 Thread Andrew C Aitchison via mailop
On Thu, 5 Oct 2023, Bernardo Reino via mailop wrote: On Thu, 5 Oct 2023, Slavko via mailop wrote: Dňa 2. 10. o 18:34 Brandon Long via mailop napísal(a): I've raised a bug to take a look, this looks like a too broad dkim replay rule. I am not sure if that is the same, but in last two days

Re: [mailop] fastmail and sender score snafu

2023-10-09 Thread Andrew C Aitchison via mailop
On Mon, 9 Oct 2023, Simon Arlott via mailop wrote: On 09/10/2023 07:44, Kirill Miazine via mailop wrote: The reason for a long retry is that I have to manually decrypt mailstore partition in case of server reboot. Exim would accept the message, but defer delivery until the mount appears. I want

Re: [mailop] valid DKIM-signed email spam-classified @gmail only; correct PASS @ other server recipients ?

2023-10-29 Thread Andrew C Aitchison via mailop
On Sun, 29 Oct 2023, pgnd via mailop wrote: Is that domain the same as you post here from? I ask, because your email was signed only by one key and you mentioned dualsign previously. nope. _this_ is not sent from one of my own servers. all my mails from all my servers are dual signed. as sho

Re: [mailop] Microsoft lays hands on login data: Beware of the new Outlook

2023-11-10 Thread Andrew C Aitchison via mailop
On Fri, 10 Nov 2023, Carsten Schiefner via mailop wrote: Folks, sort of triggered by Benoit's recent and absolutely spot-hitting rant about Microsoft's inability resp. unwillingness to appropriately deal with spam complaints, I thought I should share this article: Microsoft lays hands on l

Re: [mailop] Microsoft lays hands on login data: Beware of the new Outlook

2023-11-11 Thread Andrew C Aitchison via mailop
On Sat, 11 Nov 2023, Bjoern Franke via mailop wrote: Hi, ... I have not been aware of the fact that *ALL* apps actually might be doing this. It was just recently that I looked for alternative iOS mail apps - and "phoning home" credentials got noted only for the Spark app. This seems to be no

[mailop] ClientID - was Re: Microsoft lays hands on login data: Beware of the new Outlook

2023-11-11 Thread Andrew C Aitchison via mailop
On Sat, 11 Nov 2023, Carsten Schiefner via mailop wrote: Hi Andrew, Am 11.11.2023 um 14:25 schrieb Andrew C Aitchison via mailop : […] I guess we need to look at ClientID https://datatracker.ietf.org/doc/draft-storey-smtp-client-id/ (SMTP) https://datatracker.ietf.org/doc/draft-yu-imap

[mailop] Historical spam loads - was Re: Google rate-limiting more aggressively than usual?

2023-11-19 Thread Andrew C Aitchison via mailop
On Sun, 19 Nov 2023, Bill Cole via mailop wrote: On 2023-11-19 at 06:59:37 UTC-0500 (Sun, 19 Nov 2023 12:59:37 +0100) Alessandro Vesely via mailop is rumored to have said: I don't think someone can drop almost all mail and still call itself a mail server. Were you running a mail system in t

Re: [mailop] Merry Christmas from Google?

2023-12-17 Thread Andrew C Aitchison via mailop
On Sun, 17 Dec 2023, Marco Moock via mailop wrote: Am 16.12.2023 um 16:07:19 Uhr schrieb Jarland Donnell via mailop: Obligatory: We don't intend to send any email their way that could be perceived as unsolicited, but our users do use forwarders and we'll never completely match their filters.

Re: [mailop] ECDSA DKIM validation?

2023-12-21 Thread Andrew C Aitchison via mailop
On Thu, 21 Dec 2023, John R Levine via mailop wrote: On Thu 21/Dec/2023 10:37:52 +0100 John Levine via mailop wrote: Yes, your code should handle them. No, that doesn't mean you should sign with them. Yup. The question was why Gmail doesn't /verify/ ed25519 signatures. Answering that they

Re: [mailop] Malformed To: header

2023-12-30 Thread Andrew C Aitchison via mailop
On Sat, 30 Dec 2023, Slavko via mailop wrote: Hi, recently i see messages from this ML rejected by my MTA, due malformed To: header (from postmas...@inter-corporate.com): To: mailop@mailop.org AFAIK, the display name have to be quoted (@ char in it), thus my MTA is right, but... Please,

Re: [mailop] BIMI boycott?

2024-01-10 Thread Andrew C Aitchison via mailop
On Wed, 10 Jan 2024, Olga Fischer via mailop wrote: Hi mailops, I am new here because I want to collect some opinion. Many bigger mailers are blogging about BIMI. As far as I see its exclusively for brands. It has 2 big barriers for entry: - Expensive bespoke cert oids - Registered trademark l

Re: [mailop] BIMI boycott?

2024-01-10 Thread Andrew C Aitchison via mailop
On Wed, 10 Jan 2024, Jaroslaw Rafa via mailop wrote: As the OP has written, the only ones that may be interested in this may be marketers. Nobody else needs any logos, avatars etc. displayed alongside the email headers. There is a reason why the early attempt at this - I'm talking about the X-Fa

[mailop] BIMI and multiple hops

2024-01-12 Thread Andrew C Aitchison via mailop
[ Wearing an MTA developer's hat. ] I see that an MTA is supposed to remove existing Authentication-Results and BIMI-Indicator headers, and that generally an MUA may use these headers if present. I presume that most MTAs only add these headers on delivery, but if a non-compliant MTA receive

Re: [mailop] BIMI and multiple hops

2024-01-13 Thread Andrew C Aitchison via mailop
On Sat, 13 Jan 2024, Benny Pedersen via mailop wrote: Andrew C Aitchison via mailop skrev den 2024-01-13 07:16: [ Wearing an MTA developer's hat. ] +1 I see that an MTA is supposed to remove existing Authentication-Results and BIMI-Indicator headers, and that generally an MUA may use

Re: [mailop] Anyone else noticing an increase in spam from Office365 distribution lists?

2024-01-14 Thread Andrew C Aitchison via mailop
On Sun, 14 Jan 2024, Mark Alley via mailop wrote: This is anecdotal, but I think it illustrates even at a smaller scale the persistent problem Microsoft currently has with their tenancy. I did some quick perusal of the last month's data from our email logs, and out of a total of 22,473 exter

Re: [mailop] Support contact for Shaw.ca

2024-02-02 Thread Andrew C Aitchison via mailop
On Thu, 1 Feb 2024, Scott Undercofler via mailop wrote: I'm replying on list for visibility. The issue you’re seeing is directly related to SMTP smuggling which was discussed on list ad nauseam about a month ago. The servers at shaw are configured to reject non-RFC bare linefeeds. Can you elabo

Re: [mailop] zen.spamhaus.org

2024-02-07 Thread Andrew C Aitchison via mailop
On Wed, 7 Feb 2024, Atro Tossavainen via mailop wrote: Otherwise you need to stop using Spamhaus -- even if you sign-up, perhaps because of the query volume, you still must query them directly not via a public resolver. This is not true. One of the main points of DQS is that the DNS service y

Re: [mailop] Is forwarding to Gmail basically dead?

2024-02-11 Thread Andrew C Aitchison via mailop
On Sun, 11 Feb 2024, Sebastian Nielsen via mailop wrote: because SPF is too easy to forge.) Wrong. When a shared space is used, its up to that particular space, to enforce so customers cannot use other customer’s email addresses. Since some of these shared spaces have demonstrated that they

[mailop] CloudSererblocks - was Re: Outgoing Spam from Microsoft IPs

2024-02-16 Thread Andrew C Aitchison via mailop
On Fri, 16 Feb 2024, Matt Palmer via mailop wrote: On Wed, Feb 14, 2024 at 07:57:09AM +0100, Hans-Martin Mosner via mailop wrote: Is there some way to identify the host IPs which are used by those cloud servers, so one could block incoming SMTP from them if Microsoft can't be bothered to

Re: [mailop] One click unsubscribe in mailing list messages

2024-02-24 Thread Andrew C Aitchison via mailop
On Sat, 24 Feb 2024, Anne P. Mitchell, Esq. via mailop wrote: Not to mention that Federal law requires a one-step unsubscribe method. As I often seem to get challenged on this, here is the text of the law: "§ 316.5 Prohibition on charging a fee or imposing other requirements on recipients who

Re: [mailop] Contact of postmaster for hostedemail.com domains

2024-02-26 Thread Andrew C Aitchison via mailop
On Mon, 26 Feb 2024, Jaroslaw Rafa via mailop wrote: Dnia 26.02.2024 o godz. 10:19:54 Kris Deugau via mailop pisze: Also try getting your recipients to complain to their mail hosting provider - complaints from the people who want to *receive* the message are far more effective than complaints f

Re: [mailop] Filter out emoji from email adresses

2024-03-06 Thread Andrew C Aitchison via mailop
On Wed, 6 Mar 2024, John Levine via mailop wrote: Right. I am aware of communities of EAI mail users in India and Thailand, but not anywhere else. You might expect EAI users in China, but nope, for reasons I can explain if anyone cares. Everywhere else people use ASCII mail addresses, even th

[mailop] Ubuntu Noble/24.04 - TLS 1.0, 1.1 and DTLS 1.0 are forcefully disabled

2024-03-12 Thread Andrew C Aitchison via mailop
https://discourse.ubuntu.com/t/noble-numbat-release-notes/39890#tls-10-11-and-dtls-10-are-forcefully-disabled-13 (which is mostly a template) suggests that TLS 1.0, 1.1 and DTLS 1.0 are "forcefully disabled" in the upcoming Ubuntu release (due next month at a guess). Apparently this is not new

Re: [mailop] Ubuntu Noble/24.04 - TLS 1.0, 1.1 and DTLS 1.0 are forcefully disabled

2024-03-13 Thread Andrew C Aitchison via mailop
On Wed, 13 Mar 2024, Marco Moock via mailop wrote: Am 13.03.2024 um 10:43:27 Uhr schrieb Bill Cole via mailop: Without one, disabling them is a cargo-cult praxis that is worse than any false sense of security provided to oblivious peers who can't do TLSv1.2 or better. What are legitimate re

Re: [mailop] Ubuntu Noble/24.04 - TLS 1.0, 1.1 and DTLS 1.0 are forcefully disabled

2024-03-14 Thread Andrew C Aitchison via mailop
On Thu, 14 Mar 2024, Marco Moock via mailop wrote: Am 14.03.2024 schrieb Cyril - ImprovMX via mailop : But in my opinion, moving the needle upward by not accepting deprecated versions would force those users to be compliant and improve the general security. Most of them will simply fall back

Re: [mailop] Google unsolicited mail rejected with 421

2024-03-14 Thread Andrew C Aitchison via mailop
On Thu, 14 Mar 2024, Johann Klasek via mailop wrote: On Thu, Mar 14, 2024 at 12:03:46PM +0100, Marco Moock via mailop wrote: Am 14.03.2024 schrieb Julian Bradfield via mailop : On 2024-03-14, Marco Moock via mailop wrote: sendmail tried to deliver it 20 times during the night - this morning

Re: [mailop] mailop and DKIM signatures

2024-03-21 Thread Andrew C Aitchison via mailop
On Sat, 16 Mar 2024, Gellner, Oliver via mailop wrote: Depending on the kind of changes which have been applied to the message you can reverse the transformations and verify the original DKIM signatures. A member of this list developed a software to do this programmatically. Where can I learn

Re: [mailop] Off-Topic - VMWare ESXI 7.0

2024-04-17 Thread Andrew C Aitchison via mailop
On Wed, 17 Apr 2024, Bruno Flßckiger via mailop wrote: What sort of shortcomings do you see for, say, Proxmox?  I would say that by using Open vSwitch & Free Range Routing (with EVPN), one can get pretty close to the VMware NSX.  And with enabling Ceph on Proxmox, one can get the VSan-like fun

Re: [mailop] Problems with invoices.premierinn.de and postmas...@premierinn.de

2024-04-25 Thread Andrew C Aitchison via mailop
On Thu, 25 Apr 2024, Paul Menzel via mailop wrote: Dear mail operators, Until now we rejected emails from donotre...@invoices.premierinn.de 2024-04-23.log:2024-04-23 17:48:53 194.95.238.12 <22>Apr 23 17:48:53 mgw6-erl postfix/smtpd[744016]: NOQUEUE: reject: RCPT from fra-smtp2.oracleindu

[mailop] MX records required - Was Re: Problems with invoices.premierinn.de and postmas...@premierinn.de

2024-04-26 Thread Andrew C Aitchison via mailop
but not any record addresses ? TonyFinch> Too late for that by about 10 years, I'm afraid. Looks like that dream is getting further away :-( We wont will that fight if we don't push for it. On 25.04.24 14:59, Andrew C Aitchison via mailop wrote: Should someone here not know, RFC 7

Re: [mailop] Doesn't ARC substitute DKIM at Gmail inbound?

2024-05-05 Thread Andrew C Aitchison via mailop
On Sat, 4 May 2024, Alessandro Vesely via mailop wrote: The last URL in the response says something about ARC: ARC checks the previous authentication status of forwarded messages. If a forwarded message passes SPF or DKIM authentication, but ARC shows it previously failed authenticati

Re: [mailop] (Mis)use of DKIM's length tag and it's impact on DMARC and BIMI

2024-05-17 Thread Andrew C Aitchison via mailop
On Fri, 17 May 2024, Taavi Eomäe via mailop wrote: As part of coordinated disclosure, I am sharing it here as well. In short, using the approach described below, attackers can replace the entire contents of a letter, in a way the letters still pass DKIM’s cryptographic checks. This also means

Re: [mailop] Yahoo no longer accepting email forwards?

2024-05-21 Thread Andrew C Aitchison via mailop
On Tue, 21 May 2024, Mark E. Jeftovic via mailop wrote: The only difference between messages that get through vs ones that are rejected (same message) is whether we send to the Yahoo email box directly, or else via an email forward (which has SRS enabled, and optionally SPF and even minimal DM

[mailop] BIMI and ARC

2024-06-10 Thread Andrew C Aitchison via mailop
[ Also sent to draft-brand-indicators-for-message-identificat...@ietf.org ] https://datatracker.ietf.org/doc/draft-brand-indicators-for-message-identification/05/ 7.8. Handle Existing BIMI-Location and BIMI-Indicator Headers says: If the original email message had a DKIM signature, it has a

Re: [mailop] Why an SPF hard bounce on ~all ?

2024-06-27 Thread Andrew C Aitchison via mailop
On Thu, 27 Jun 2024, Mark E. Jeftovic via mailop wrote: Been debugging an email forwarding problem, it's basically that the forwarder doesn't use SRS or ARC That would be an SPF fail, but the sender domains are ~all Why the hard bounce? * Sender address: ~all * The forwarded address has -all

Re: [mailop] Cloud hosts for responsible mail servers?

2024-07-09 Thread Andrew C Aitchison via mailop
On Tue, 9 Jul 2024, Andy Beverley via mailop wrote: On 09/07/2024 03:17, Philip Paeps via mailop wrote: I've had a VM at Mythic Beasts doing mail for several years.  They're rock solid and all my interactions with them have been very positive.  I don't have any stake in them other than as a h

Re: [mailop] Domains discrimination

2024-07-10 Thread Andrew C Aitchison via mailop
On Wed, 10 Jul 2024, Brandon Long via mailop wrote: Better case would be to automatically discover that a TLD is bad but also provide for the possibility that a given domain in the TLD is fine using a reputation based system. Of course, then there's the "automatically know what the TLD is" prob

Re: [mailop] Mailserver software

2024-07-15 Thread Andrew C Aitchison via mailop
On Mon, 15 Jul 2024, Marco Moock via mailop wrote: Am 15.07.2024 um 14:48:01 Uhr schrieb John Levine via mailop: Sendmail is actively maintained and works fine, but configuring it is hard and the documentation is a 30 year stream of consciousness. The m4 macros are a bit tricky, but all poss

Re: [mailop] Mailserver software

2024-07-16 Thread Andrew C Aitchison via mailop
On Tue, 16 Jul 2024, Taavi Eomäe via mailop wrote: It should be noted that both Stalwart and Maddy on that list are very new. Stalwart especially so, it hasn't even reached version 1.x yet, ... Those who have been here for decades may remember that when someone said that about exim (c

Re: [mailop] Mailserver software

2024-07-16 Thread Andrew C Aitchison via mailop
On Wed, 17 Jul 2024, postfix--- via mailop wrote: On 2024-07-16 14:36, Bjoern Franke via mailop wrote: Which iPhone / Android clients do you mean? last time I tested Apple Mail, my IMAP server logged requests from Apple's network. On Android, I do not use Gmail. I use a client that pulls

Re: [mailop] Invalid format and contents of DMARC reports

2024-07-27 Thread Andrew C Aitchison via mailop
On Thu, 25 Jul 2024, Daniel K. via mailop wrote: We feed received DMARC reports through Open-Report-Parser and visualize with Open DMARC Analyzer. Sometimes the ingestion step fails, because we receive aggregate DMARC reports with invalid contents. Particularly from senders that seem to have ju

Re: [mailop] Echospoofing

2024-07-31 Thread Andrew C Aitchison via mailop
On Wed, 30 Jul 2024, John Levine via mailop wrote: It appears that Jaren Angerbauer via mailop said: $dayjob is Proofpoint -- I have been heavily involved with this. We have gone to great lengths to raise awareness with customers and get them to correctly configure their systems. Ultimately

Re: [mailop] oauth2 for mail clients

2024-07-31 Thread Andrew C Aitchison via mailop
On Sun, 14 Jul 2024, Scott Q. via mailop wrote: My question wasn't geared in that direction. It's up to each provider to create their own custom interfaces for integrating all that. It's not rocket science. My question was geared towards the clients used to access mail. Outlook uses hardcoded

Re: [mailop] oauth2 for mail clients

2024-07-31 Thread Andrew C Aitchison via mailop
On Tue, 16 Jul 2024, Sidsel Jensen via mailop wrote: Hi Andreas We have some documentation here: https://documentation.open-xchange.com/8/middleware/mail/dovecot/oauth_2.0_with_postfix_and_dovecot.html but a good HowTo sounds like a really good idea, to further the adoption. If you need help l

Re: [mailop] [E] Re: Super dumb gmail request ...

2024-08-27 Thread Andrew C Aitchison via mailop
On Tue, 27 Aug 2024, Colin Johnston via mailop wrote: Have you tried an normal android phone without a sim as Google should send the 2fa to that as well as sms ? How would she add the phone to the account *without* the one-time key she wishes to receive ? -- Andrew C. Aitchison

Re: [mailop] Google is refusing DMARC reports

2019-09-28 Thread Andrew C Aitchison via mailop
On Sat, 28 Sep 2019, Tom Ivar Helbekkmo via mailop wrote: _dmarc.google.com IN TXT "v=DMARC1; p=reject; rua=mailto:mailauth-repo...@google.com"; : host aspmx.l.google.com[173.194.73.26] said: 550-5.2.1 The user you are trying to contact is receiving mail at a rate that 550-5.2.1 prevents

Re: [mailop] Gmail marking email from me as spam

2019-10-07 Thread Andrew C Aitchison via mailop
On Mon, 7 Oct 2019, Jaroslaw Rafa via mailop wrote: Dnia 7.10.2019 o godz. 14:18:52 Mathieu Bourdin via mailop pisze: Weel, basically your issue can be summarized in one word: reputation. Welcome to email deliverability 101 ;) And in what way this helps anything? Do you want to say "you s

Re: [mailop] [EXTERNAL] Re: Reasons ISPs (Microsoft) ignore DMARC policy?

2019-11-21 Thread Andrew C Aitchison via mailop
On Wed, 20 Nov 2019, Matt Vernhout via mailop wrote: If a sender asked you to reject that mail with their policy do them a favour and send a bounce that says something like ‘your DMARC said to bounce failed messages, if this is wrong fix your authentication and try again’ One of the

Re: [mailop] [EXTERNAL] Re: Reasons ISPs (Microsoft) ignore DMARC policy?

2019-11-21 Thread Andrew C Aitchison via mailop
teve Oh...And I'm certain Google also sent a DMARC report :P On Thu, Nov 21, 2019 at 4:34 AM Andrew C Aitchison via mailop < mailop@mailop.org> wrote: On Wed, 20 Nov 2019, Matt Vernhout via mailop wrote: If a sender asked you to reject that mail with their policy do them a favou

Re: [mailop] Reasons to add plain text alternative to email?

2019-12-09 Thread Andrew C Aitchison via mailop
On Mon, 9 Dec 2019, Maarten Oelering via mailop wrote: Multipart messages with html and text alternatives are generally considered best practice. Senders with html templates should add a text version is the common believe. But it's almost 2020, and we were wondering if there's still a good reas

Re: [mailop] G-Suite removing LSA functionality

2019-12-17 Thread Andrew C Aitchison via mailop
On Tue, 17 Dec 2019, Philip Paeps via mailop wrote: On 2019-12-17 03:20:04 (+0800), Al Iverson via mailop wrote: Google is announcing that in the future, G-Suite accounts will not support LSA (Less Secure Access) account connection functionality. This will put an end to accessing your Gmail a

[mailop] fetchmail 7 will support OAuth2 - was Re: G-Suite removing LSA functionality

2019-12-17 Thread Andrew C Aitchison via mailop
On Tue, 17 Dec 2019, Andrew C Aitchison via mailop wrote: On Tue, 17 Dec 2019, Philip Paeps via mailop wrote: On 2019-12-17 03:20:04 (+0800), Al Iverson via mailop wrote: Google is announcing that in the future, G-Suite accounts will not support LSA (Less Secure Access) account connection

Re: [mailop] Gmail doesn't like my IPv6 address, why?

2019-12-19 Thread Andrew C Aitchison via mailop
On Wed, 18 Dec 2019, Brian via mailop wrote: I never had any significant deliverability issues with my personal low volume email server before, which I have been running for several years following pretty much all the well-known recommendations and standards. Two months ago I decided to take so

[mailop] Color coding - was Re: List washing etc.

2020-01-24 Thread Andrew C Aitchison via mailop
On Thu, 23 Jan 2020, Michael Peddemors via mailop wrote: But it is helpful, whether sending or receiving, to see if the address is in your contacts (known person) or not.. But we see a lot of changes coming on that front, just overheard some Thunderbird developers working on, and I know our t

Re: [mailop] [FEEDBACK] whose address, was Approach to dealing with List Washing services, industry feedback..

2020-01-26 Thread Andrew C Aitchison via mailop
On Sun, 26 Jan 2020, Jaroslaw Rafa via mailop wrote: Similar thing happened to me recently when I wanted to re-login to one of those test accounts from my home computer, but I installed a new browser which was not yet used with that account. Usually there are no problems in such a case, but my h

Re: [mailop] [FEEDBACK] whose address, was Approach to dealing with List Washing services, industry feedback..

2020-01-27 Thread Andrew C Aitchison via mailop
unlock my phone (that may be unrealistic) if we have eliminated passwords then they have access to all my data stored anywhere. On Sun, 26 Jan 2020, Brandon Long wrote: On Sun, Jan 26, 2020 at 10:35 AM Andrew C Aitchison via mailop < mailop@mailop.org> wrote: Hmm. Proving that you can read

Re: [mailop] DNSxL lookups IPv6 - one /128 per DNS query

2020-02-02 Thread Andrew C Aitchison via mailop
On Sun, 2 Feb 2020, Matthias Leisi via mailop wrote: At dnswl.org, we collect (DNS) logs to identify abusers of our service. During last week, the logs increased by a factor of 10 (usually this is pretty stable, going up an down a few percents), so we thought we’d investigate. And we found som

Re: [mailop] AT&T Block - abuse_...@abuse-att.net still valid?

2020-02-12 Thread Andrew C Aitchison via mailop
On Wed, 12 Feb 2020, Scott Mutter via mailop wrote: Look, I understand it's a thin line battling spam and abusive behavior from mail servers. I've pleaded with many blacklist operators to give me details as to why they are blacklisting one of our servers. I can probably count on 1 hand how ma

Re: [mailop] Recipe vs fake From: header?

2020-02-18 Thread Andrew C Aitchison via mailop
I thought DKIM was supposed to flag such messages; do these phishing emails satisfy DKIM ? On Tue, 18 Feb 2020, Benoit Panizzon via mailop wrote: Hi List Lately, our customers are getting an increased amount of phishing emails, or emails containing malware with legit looking From: headers fro

Re: [mailop] AT&T Block - abuse_...@abuse-att.net still valid?

2020-02-20 Thread Andrew C Aitchison via mailop
On 12/02/2020 16:47, Andrew C Aitchison via mailop wrote: Does this fly, or am I missing something critical ? If you block for content or black-listed host and there is a DMARC reporting address report the appropriate details to the DMARC reporting address(es) ? OK, I haven't thought th

Re: [mailop] Opinions? Email Abuse over TOR Network? (spamtraps)

2020-02-24 Thread Andrew C Aitchison via mailop
On Fri, 21 Feb 2020, Alessandro Vesely via mailop wrote: I'm still puzzled by that Emerald Onion Repeat Infringer Termination Policy. Perhaps, they have a real time incident reporting system to catch miscreants. I assumed it was what they want to do, not what they can do. If it isn't in the p

Re: [mailop] Ewetel postmaster wanted - your IP 116.203.31.6 seems to be dynamic - please use the smarthost of your ISP

2020-03-09 Thread Andrew C Aitchison via mailop
On Mon, 9 Mar 2020, Stefan Bauer via mailop wrote: Any ewetel postmaster around? One of our IPs (subject) get flagged as dynamic during delivery to ewetel. However this IP is static. I am not surprised that Ewetel has guessed wrong: whois 116.203.31.6 -h whois.ripe.net gives a /16 belo

Re: [mailop] Abusix Potentially Compromised Account Report

2020-03-22 Thread Andrew C Aitchison via mailop
On Sun, 22 Mar 2020, Steve Freegard via mailop wrote: This data is inherently noisy and I've gone to extreme lengths to remove as much noise as possible and provide Abuse Desks/Postmasters some visibility that they do not currently have. Whilst this time it's reported an alias, next time it

Re: [mailop] Weekly Report a little early this week, from the Spam Auditors

2020-04-30 Thread Andrew C Aitchison via mailop
On Thu, 30 Apr 2020, Michael Peddemors via mailop wrote: Just another update, on what our spam auditing team is seeing as trends ... * o265 leakage Have they lost a century ? -- Andrew C. Aitchison Kendal, UK and...@aitchison.me.

Re: [mailop] SendGrid Abuse unresponsive

2020-05-05 Thread Andrew C Aitchison via mailop
On Wed, 6 May 2020, Andy Smith via mailop wrote: Hello, On Tue, May 05, 2020 at 02:50:39PM -0700, Carl Byington via mailop wrote: It is bad enough that our local spamassassin rules add 5 points if the message is dkim signed by sendgrid.net. Same here and it's extra frustrating because there

Re: [mailop] Abusix Potentially Compromised Account Report

2020-05-19 Thread Andrew C Aitchison via mailop
On Tue, 19 May 2020, Thomas Walter via mailop wrote: On 19.05.20 12:01, Jaroslaw Rafa via mailop wrote: There are no practical scenarios that justify the existence and use of shared accounts. Use a mailing list instead. And multiply each and every mail to multiple people, making it difficult

Re: [mailop] Microsoft Outlook "Modern Authentication"?

2020-05-25 Thread Andrew C Aitchison via mailop
On Mon, 25 May 2020, Daniele Nicolodi via mailop wrote: Hello, sorry for the slight OT. I have an email account with an organization that uses Office365 for their email. I recently received a email stating that they will be phasing out "basic authentication" and that "modern authentication" wi

Re: [mailop] Microsoft Outlook "Modern Authentication"?

2020-06-02 Thread Andrew C Aitchison via mailop
On Thu, 28 May 2020, Daniele Nicolodi asked: The IT department of the organization that is pushing thins says that modern authentication and disabling IMAP (over SSL) enhance security. I don't see how this is the case. Does anyone have an opinion? Phil Pennock replied: PP> As to IMAP/TLS -- I

Re: [mailop] How to allow different domain in envelope and header from? (Is Gmails DMARC check broken?)

2020-06-04 Thread Andrew C Aitchison via mailop
On Thu, 4 Jun 2020, BenoÎt Panizzon via mailop wrote: [ Not replying to the list as this may be off topic, but you are welcome to bring it back on list if you wish. ] Hi Gang Tanks for the various feedback, learning a log :-) I found one issue caused by domain alignment in DMARC. Looking

Re: [mailop] Microsoft Outlook "Modern Authentication"?

2020-06-05 Thread Andrew C Aitchison via mailop
On Thu, 4 Jun 2020, Daniele Nicolodi via mailop wrote: On 02/06/2020 02:41, Andrew C Aitchison via mailop wrote: On Thu, 28 May 2020, Daniele Nicolodi asked: The IT department of the organization that is pushing thins says that modern authentication and disabling IMAP (over SSL) enhance

Re: [mailop] Microsoft Outlook "Modern Authentication"?

2020-06-06 Thread Andrew C Aitchison via mailop
On Fri, 5 Jun 2020, Brandon Long via mailop wrote: The weird thing to me is that I thought O365 and outlook.com already supported OAUTHBEARER (or equivalent). https://docs.microsoft.com/en-us/exchange/client-developer/legacy-protocols/how-to-authenticate-an-imap-pop-smtp-application-by-using-oa

Re: [mailop] [EXTERNAL] Hotmail - New Support Request form not working?

2020-06-10 Thread Andrew C Aitchison via mailop
On Wed, 10 Jun 2020, Scott Mutter via mailop wrote: This IP address - 191.101.16.96 - is a shared hosting server. Shared Hosting, if you're not familiar with it, takes a server and hosts many different websites across different VirtualHosts (with the glorification of HTTP v1.1 and SNI). And a

Re: [mailop] t-online.de refuses to remove an ip from their blacklist

2020-06-18 Thread Andrew C Aitchison via mailop
On Thu, 18 Jun 2020, Andreas Bueggeln - NOC - Profihost AG via mailop wrote: Hello, we host hundreds of dedicated servers on VMs and our customers send thousands of mail to t-online.de mailboxes every day. a new customer uses an ip, which has been offline for months or even years wanted to sen

Re: [mailop] [WEEKLY UPDATE] Happy Holidays Everyone!

2020-06-30 Thread Andrew C Aitchison via mailop
On Tue, 30 Jun 2020, Michael Peddemors via mailop wrote: * Stop promoting DNS over HTTPS as a good thing.. ;) Care to elaborate ? -- Andrew C. Aitchison Kendal, UK and...@aitchison.me.uk

Re: [mailop] Is DNS-over-HTTPS bad? Sure. (was: Happy Holidays Everyone!)

2020-07-06 Thread Andrew C Aitchison via mailop
On Sun, 5 Jul 2020, Chris Lewis via mailop wrote: On 2020-07-05 15:19, Jay R. Ashworth via mailop wrote: An argument I could tolerate -- corporate IT types can be expected to diagnose smartly enough to deal with it... though it will still make things more difficult for them. Impossible for

Re: [mailop] Is DNS-over-HTTPS bad? Sure.

2020-07-06 Thread Andrew C Aitchison via mailop
Executive summary: DoH is intended to reset the balance of control and data collection from ISPs, system and network administrators towards (browser) users. On Mon, 6 Jul 2020, Michael Peddemors via mailop wrote: One thing not mentioned so far in this thread, is data collection.. While many D

Re: [mailop] Is DNS-over-HTTPS bad? Sure.

2020-07-06 Thread Andrew C Aitchison via mailop
On Tue, 7 Jul 2020, Noel Butler via mailop wrote: On 07/07/2020 01:01, Johann Klasek via mailop wrote: I have been told that DoH is set into place to solve the privacy problem. On a small DNS workgroup meeting I saw a presentation on how they statistically identify users by their DNS traffic,

Re: [mailop] Rolling DKIM Key Disclosure

2020-07-11 Thread Andrew C Aitchison via mailop
On Fri, 10 Jul 2020, Matt Corallo via mailop wrote: For various reasons, DKIM's non-repudiation property has always prevented us deploying DKIM signing on our mail. The obvious fix for this is to roll DKIM keys aggressively (eg every few minutes) and publish the private keys for revoked keys as

[mailop] MUAs and webmail services

2020-07-23 Thread Andrew C Aitchison via mailop
Does anyone have (a pointer to) figures for the comparative use of "traditional" MUAs (IMAP, POP) and webmail - both generic and email-service-supplied ? When I first heard about BIMI I assumed it was aimed at email-service-supplied webmail - I imagine mutt or alpine users would be turned *off

  1   2   3   >