Re: [lopsa-tech] Email spoofing

You should have seen an e-mail about it on one or more of the LOPSA lists, we're moving the mailman lists over to Google Groups this weekend. While I'm not a huge fan of Groups, it gets us out of the business of running mailing list software with our limited group of tech volunteers. --- [1]

Re: [lopsa-tech] Email spoofing

gt; *Sent:* Tuesday, December 20, 2016 6:28 PM > *To:* Edward Ned Harvey (lopser) > *Cc:* LOPSA Technical Discussions > *Subject:* Re: [lopsa-tech] Email spoofing > > > > I'm curious to see if the problem goes away when I migrate the lists out > of mailman this week

Re: [lopsa-tech] Email spoofing

What are you migrating to? Just curious since I have to set up some new lists for myself in a few weeks. On Tue, Dec 20, 2016 at 3:27 PM, Daniel Rich wrote: > I'm curious to see if the problem goes away when I migrate the lists out > of mailman this weekend... > --- > > *Dan

Re: [lopsa-tech] Email spoofing

Huh? What are you doing? From: Daniel Rich [mailto:dr...@lopsa.org] Sent: Tuesday, December 20, 2016 6:28 PM To: Edward Ned Harvey (lopser) Cc: LOPSA Technical Discussions Subject: Re: [lopsa-tech] Email spoofing I'm curious to see if the problem goes away when I migrate the lists o

Re: [lopsa-tech] Email spoofing

I'm curious to see if the problem goes away when I migrate the lists out of mailman this weekend... --- [1] DANIEL RICH President +1-408-627-4769 To advance the practice of system administration; to support, recognize, educate, and encourage its practitioners; and to serve the public through e

Re: [lopsa-tech] Email spoofing

Op 8 dec. 2016 15:39 schreef "Edward Ned Harvey (lopser)" < lop...@nedharvey.com>: > > Before anything else, can any of you confirm that when you receive this message, there has or hasn't been a line injected into the message body saying "This sender failed our fraud detection checks..." at the beg

Re: [lopsa-tech] Email spoofing

These are the headers my ISP's anti-spam inserts Sender: tech-boun...@lists.lopsa.org Errors-To: tech-boun...@lists.lopsa.org X-Message-Linecount: 157 X-Connected-IP: 64.34.197.29:55449 X-Body-Linecount: 12 X-Message-Size: 9498 X-Body-Size: 656 X-Received-Count: 12 X-Re

Re: [lopsa-tech] Email spoofing

Adam> I received the message, and there has *not* been any message Adam> injected into the body regarding failing fraud detection checks. Same here, I got the message and it had a ton of various headers, but not that one. Adam> On Thu, Dec 8, 2016 at 9:39 AM, Edward Ned Harvey (lopser) < Adam> l

Re: [lopsa-tech] Email spoofing

same. Nothing like that in the headers or body. -nick — Nick Peelman n...@peelman.us > On Dec 8, 2016, at 9:59 AM, Adam Levin wrote: > > I received the message, and there has *not* been any message injected into > the body regarding failing fraud detection checks. > > -Adam > > On Thu,

Re: [lopsa-tech] Email spoofing

I received the message, and there has *not* been any message injected into the body regarding failing fraud detection checks. -Adam On Thu, Dec 8, 2016 at 9:39 AM, Edward Ned Harvey (lopser) < lop...@nedharvey.com> wrote: > Before anything else, can any of you confirm that when you receive this

Re: [lopsa-tech] Email spoofing

Before anything else, can any of you confirm that when you receive this message, there has or hasn't been a line injected into the message body saying "This sender failed our fraud detection checks..." at the beginning of the message body? And who is your mail service provider? Ok, we know this

Re: [lopsa-tech] Email spoofing

The best I can gather, this list is using Privacy Options > Sender Filters > dmarc_moderation_action = Munge From (Which, I gather, is good). This results in the message being delivered to end users, saying From: tech-boun...@lists.lopsa.org on Behalf Of the original sender. https://wiki.list.o

Re: [lopsa-tech] Email spoofing

> From: Jonathan [mailto:lo...@redigloo.org] > > You say "messages to this list" so I presume the problem is that the messages > are being resent from the lopsa.org Mailman MTA, presenting your sender > address.  Your SPF not unsurprisingly doesn't include the lopsa.org Mailman > server lopsa-sb1.

Re: [lopsa-tech] Email spoofing

Hi You say "messages to this list" so I presume the problem is that the messages are being resent from the lopsa.org Mailman MTA, presenting your sender address. Your SPF not unsurprisingly doesn't include the lopsa.org Mailman server lopsa-sb1.lopsa.org 64.34.197.29 https://en.wikipedia.or

Re: [lopsa-tech] Email spoofing

What I get for putting email before coffee. Overlooked the include. Alright. I'm out of ideas for the mo'. -nick -- Nick Peelman n...@peelman.us Sent from my iPhone On Dec 8, 2016, at 07:19, Edward Ned Harvey (lopser) wrote: >> From: Nick Peelman [mailto:n...@peelman.us] >> >> 104.47.37

Re: [lopsa-tech] Email spoofing

> From: Nick Peelman [mailto:n...@peelman.us] > > 104.47.37.131 is not covered under http://spf.protection.outlook.com: > > dig http://spf.protection.outlook.com TXT Oops, that's wrong ... dig spf.protection.outlook.com TXT "v=spf1 ip4:207.46.101.128/26 ip4:207.46.100.0/24 ip4:207.46.163.0/24

Re: [lopsa-tech] Email spoofing

> From: Nick Peelman [mailto:n...@peelman.us] > > 104.47.37.131 is not covered under http://spf.protection.outlook.com: Holy crap. Of all the office365 users, I'm the first one to encounter this? Mind blowing. Guess I'll go submit a support request. __

Re: [lopsa-tech] Email spoofing

104.47.37.131 is not covered under spf.protection.outlook.com : dig spf.protection.outlook.com TXT > ;; QUESTION SECTION: > ;spf.protection.outlook.com. IN TXT > > ;; ANSWER SECTION: > spf.protection.outlook.com. 500 IN TXT "v=spf1 > ip4

Re: [lopsa-tech] Email spoofing

Edward Ned Harvey (lopser) wrote: > > From: tech-boun...@lists.lopsa.org [mailto:tech-boun...@lists.lopsa.org] > > On Behalf Of Edward Ned Harvey (lopser) > > > > This sender failed our fraud detection checks and may not be who they appe > > ar to be. Learn about http://aka.ms/LearnAboutSpoofing >

Re: [lopsa-tech] Email spoofing

> From: tech-boun...@lists.lopsa.org [mailto:tech-boun...@lists.lopsa.org] > On Behalf Of Edward Ned Harvey (lopser) > > This sender failed our fraud detection checks and may not be who they appe > ar to be. Learn about http://aka.ms/LearnAboutSpoofing I pasted the headers of this message into th