[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <20140831112429.GW1251@yuggoth.org>
Date: Sun, 31 Aug 2014 11:24:29 +0000
From: Jeremy Stanley <fungi@...goth.org>
To: oss-security@...ts.openwall.com
Subject: Re: Fwd: ezmlm warning
On 2014-08-31 01:10:54 +0000 (+0000), Jorge Manuel B. S. Vicetto wrote:
> I'm forwarding this email to the ml as I just noticed this is the 3rd
> time since Jun 19th that because of DMARC emails from some members are
> being rejected by receivers domains, like gmail for me. As I don't
> recall reading about this topic before in this ml, I'm raising the
> issue in case others are unaware and start getting warnings for losing
> emails or are surprised by some members not getting their emails.
[...]
As someone who helps operate a fairly large listserv myself, this
has been coming up a lot lately with our subscribers. The official
recommendations from the DMARC coalition (as far as I've been able
to tell) are published at http://www.dmarc.org/faq.html#s_3
The "solution" my fellow sysadmins and I have been leaning toward is
to unsubscribe and reject subscription requests for any address at
an obviously DMARC-enforcing domain, and start building a blacklist
(if someone else already has a DNS-based RBL for this, I'd be quite
interested to use and possible help maintain it as well). MTA
operators enforcing DMARC quite obviously wish to go play in their
own sandbox where a small (statistically, though still quite
important in my opinion) traditional E-mail use case is simply not
considered worth supporting. I'm personally perfectly happy if
nobody at one of those domains ever receives an E-mail message from
me again.
--
Jeremy Stanley
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
