• Bug#1043539: project: Forwarding of @debian.org mails to gmail broken

    From Stephen Frost@21:1/5 to [email protected] on Mon Aug 14 02:20:14 2023
    XPost: linux.debian.bugs.dist

    Greetings,

    * Cord Beermann ([email protected]) wrote:
    As listmaster i can confirm that it is a big problem to deliver Mails to gmail/outlook/yahoo. Yahoo Subscribers are mostly gone by now because they bounced a lot, for gmail it is so much that we just ignore bounces because of those rules.

    As a maintainer or some pretty big lists ... we don't have *that* much
    trouble delivering to gmail, or others for that matter.

    | helgefjell.de descriptive text "v=spf1 ip4:142.132.201.35 mx ~all"

    so you flagged your mail has to come from that IP (or the MX) and from other sources it should be considered suspicious.

    ... but if it's DKIM signed, then it'll generally get delivered
    properly.

    SRS/ARC and so on are just dirty patches that try to fix things that were broken before, but they will break even more things like Mail signing.

    ARC doesn't break DKIM signatures (unless someone's got a very broken
    DKIM setup which over-signs ARC headers ... but if so, then that's on
    them).

    Thanks,

    Stephen

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEwf6gbxKhD863zrx/7WyKOINHZFUFAmTZbxUACgkQ7WyKOINH ZFW6Ww//Vn3LR4rm6N/6uw6vt4l/6D0PaNbNP3K6oTHdU5HcLUEYJi0mfzfLUglW It5vCkRh1OyNMKayzfq8exxMA/++f5bIe1Uh5pKTbw44znl9cARXk0MgYQByQo4f OzEsAbSSWz1nC2wK0a4Gn8ratSbyi/v+A1CDB5tNk7R0vC0MYiJqeU1/ZKoAMtpQ tlNAvGTZj/rxCoh1VX8fmKsdUO4qRbM3hDM+ui1fYJ9r/Meh+we99AOojNruuw66 ChQ56nfpTBv4c9+c4/z5ndN6BTsECJsfOumZFcTvNnLS6rCrW2Nig0g7BGXsKh3A 7D6GcvhIvmRL6zLOpTOsO6/n1LEwfDwT+BVic6wURz+k8bW1RwKfUgthsM3CqNT0 MB+kUkdrQlVDZ/o/VDgmQaiCUwvAFudNUZudqC47bbRknOUw+ahu571Vj/cFP41B OdK4KHdl3ffDov8ADbXM/Cu0e/oLVzPcp1zh5nRjt8YnFGNFsPNwX4G2iP1EOdNA A/mozanxD0ElyOG4drq2rAQg1Zl11SKN6DAlcAvz3ESv5V4jn87/A7+8ngcreEnv yNdnDq1YsDyLIJ1kleU1+Q295K5ST/MGirrjTLIiVbm56UgC7O3rgWinpU96gXiR kWoEtQubHGtXhxgNsCQ62O5hiJMCZvoxp0QZZXzNiXUZGD/mxXI=
    =gX89
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Stephen Frost@21:1/5 to [email protected] on Mon Aug 14 02:20:01 2023
    XPost: linux.debian.bugs.dist

    Greetings,

    * Mattia Rizzolo ([email protected]) wrote:
    Alternatively, I wonder if ARC nowadays is respected enough (and if
    Google cares about it)... I personally don't have any system with ARC
    under my care.

    Sadly, no, they don't seem to care one bit about ARC, except possibly if
    it's their own ARC sigs.

    If someone has some idea how to get them to care about ARC, I'd love to
    hear about it, as I have folks on the one hand who view DKIM/DMARC as
    too painful to set up but then they end up with bounces from gmail due
    to my forwarding of messages through my server (which are being
    ARC-signed by it and pass on that the SPF check was successful when they arrived to my server)...

    I'd encourage everyone running their own email servers to please get DKIM/DMARC/ARC/SPF set up. Yeah, it's annoying, but it's not actually
    all *that* bad to do.

    Thanks,

    Stephen

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEwf6gbxKhD863zrx/7WyKOINHZFUFAmTZbfYACgkQ7WyKOINH ZFUQoRAAwvAyqf50QqhKDwdQSuvisG+3h4P/pauchXagvwo5U+QxjctghFLSXvKY /as7W45x73RsWam9na/WFXJMZykRMrOzzxjaDH9GJVuOUbKDx4dBO9S6f45Flf18 GNy9k+PVaG4QUPtfPlYkVXLm4YIIi9VWmr60e/k+Ro+uiuITs7ibjBOUg4rCHLZW y57muyeZJGhCtIFQ+sfvQWV68wkTFAQhBXZmdvj/cs+HsYHFRqkMuYlzKt3VxRdY 0wnY6WXWcFCk8g3s6ZUDyS2YJHECxqO5hnpoMYyQqeHJEye/M5zqfaxvqKe24Fac cn7OVrWsyp7ZOU5nZVmKyGAJb4K614BNcCFfL0lHgpMglEox5wvqS38tCiUXUO0j UJJzjiyk5pHyfTzR6J1Ynh7ycpIgd/vma7CFKcroWdX8S0AaRqL/8O+S/YEiZ+pZ CsTmDITShzNrcXrv9YoLmG+fDT7v0Kfnis1/pVAF2KnMjd0ZfJIHd/lmGtG0ysmm F+H4FhOqIq2I9Ji3ixB0n8MC2DuQ5ujMze4vx3b23lHrBrN9Ynox8R7bOfYh0XKu RFddsj/sJNCae6V7z1nEKLm3jC7EdznD/s1pG9eExSruOkUQiH9D3Hh/q2SI+yXF aa3T9zzHfHL4aii5QmiOtijVKCL6a9DGvHXtm9jqW6Iuc78sFnQ=
    =FBgs
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)