[ZendTo] A head's up about the mailing list
Jules
Jules at Zend.To
Mon Nov 14 09:18:39 GMT 2016
Mike,
I've just fixed the lack of IPv6 in the SPF record. I'm very wary of
updating our mailman install, as there are a lot of lists on it, and
lots of people would be very upset if a "yum upgrade mailman" did
something horrible. I'm not even supposed to be looking after our mail
system any more, I just do the minimum necessary fixes to keep it working.
Let's see if the IPv6 SPF record is enough to keep us going for now. :-/
Thanks!
Jules.
On 11/11/2016 16:06, Mike Brudenell wrote:
> Hi, Jules -
>
> There's still a problem with the SPF record for the zend.to
> <http://zend.to> domain I'm afraid…
>
> We're seeing messages arriving from IPv6 addresses, which aren't
> listed in your SPF record and so are not generating SOFTFAIL results
> for SPF checks.
>
> For example a message at 12:42 had this Received header
>
> Received: from falcon.ecs.soton.ac.uk
> <http://falcon.ecs.soton.ac.uk> (falcon.ecs.soton.ac.uk
> <http://falcon.ecs.soton.ac.uk>. [2001:630:d0:f102::25e])
> by mx.google.com <http://mx.google.com> with ESMTPS id
> vg1si10581610wjb.19.2016.11.11.06.42.24
> (version=TLS1 cipher=AES128-SHA bits=128/128);
> Fri, 11 Nov 2016 06:42:24 -0800 (PST)
>
>
> showing Google had received it from [2001:630:d0:f102::25e]
>
> The MX option in your SPF record picks up the various IPv6 addresses
> of your site's _inbound_ mail servers, but I
> guess [2001:630:d0:f102::25e] is an outbound-only server so doesn't
> have MX records point to it, hence doesn't get included in the SPF data.
>
> You need to list the IP addresses/netblocks of all your outbound
> servers in the SPF record for zend.to <http://zend.to>
>
> In passing (and the IT staff might already know) the SPF record for
> your main soton.ac.uk <http://soton.ac.uk> domain is right at the
> maximum number of DNS lookups SPF permits: 10. I hope no-one adds and
> more entries requiting lookups to it!
>
> Cheers,
> Mike B-)
>
> On 11 November 2016 at 11:24, Jules <Jules at zend.to
> <mailto:Jules at zend.to>> wrote:
>
> I've just added an SPF record for the domain.
> Any thoughts on fixing the "on behalf of" issue?
>
> Thanks!
> Jules.
>
>
> On 11/11/2016 09:16, Stewart Campbell wrote:
>>
>> I sent an email regarding this a while ago. Domains that have
>> SPF/DKIM/DMARC set up will have problems even sending mail to
>> this list as it sends all list emails ‘on behalf of’ the sender.
>> My domain does not have this list in its SPF record so it will fail.
>>
>> *From:*zendto-bounces at zend.to <mailto:zendto-bounces at zend.to>
>> [mailto:zendto-bounces at zend.to] *On Behalf Of *Mike Brudenell
>> *Sent:* 11 November 2016 09:08
>> *To:* ZendTo Users <zendto at zend.to> <mailto:zendto at zend.to>
>> *Subject:* [ZendTo] A head's up about the mailing list
>>
>> Just a head's up to the person/people who run the mailing list…
>>
>> For the past few months Google are now flagging all messages form
>> the list with a a red "this message is a little suspicious"
>> question mark indicator because there's no valid SPF or DKIM for it.
>>
>> It needs one or both of:
>>
>> * an SPF record setting up for the "zend.to <http://zend.to>"
>> domain that authorises the mail servers transmitting the
>> list's messages to do so, and/or
>> * DKIM signatures being added to the messages, ideally with
>> "d=zend.to <http://zend.to>" as the attribute in the signature.
>>
>> Adding either or both of these should eliminate the warnings.
>>
>> Cheers,
>>
>> Mike B-)
>>
>> --
>>
>> Systems Administrator & Change Manager
>>
>> IT Services, University of York, Heslington, York YO10 5DD, UK
>>
>> Tel: +44-(0)1904-323811 <tel:%2B44-%280%291904-323811>
>>
>> Web: www.york.ac.uk/it-services <http://www.york.ac.uk/it-services>
>>
>> Disclaimer: www.york.ac.uk/docs/disclaimer/email.htm
>> <http://www.york.ac.uk/docs/disclaimer/email.htm>
>>
>>
>>
>> _______________________________________________
>> ZendTo mailing list
>> ZendTo at zend.to <mailto:ZendTo at zend.to>
>> http://mailman.ecs.soton.ac.uk/mailman/listinfo/zendto
>> <http://mailman.ecs.soton.ac.uk/mailman/listinfo/zendto>
>
> Jules
>
> --
> Julian Field MEng MBCS CITP CEng
>
>
> www.Zend.To <http://www.Zend.To>
> Twitter: @JulesFM
> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
>
> _______________________________________________ ZendTo mailing
> list ZendTo at zend.to <mailto:ZendTo at zend.to>
> http://mailman.ecs.soton.ac.uk/mailman/listinfo/zendto
> <http://mailman.ecs.soton.ac.uk/mailman/listinfo/zendto>
>
> --
> Systems Administrator & Change Manager
> IT Services, University of York, Heslington, York YO10 5DD, UK
> Tel: +44-(0)1904-323811
> Web:www.york.ac.uk/it-services <http://www.york.ac.uk/it-services>
> Disclaimer:www.york.ac.uk/docs/disclaimer/email.htm
> <http://www.york.ac.uk/docs/disclaimer/email.htm>
>
> _______________________________________________
> ZendTo mailing list
> ZendTo at zend.to
> http://mailman.ecs.soton.ac.uk/mailman/listinfo/zendto
Jules
--
Julian Field MEng MBCS CITP CEng
'Every morning when I wake,
Dear Lord, a little prayer I make,
O please do keep Thy lovely eye
On all poor creatures born to die
And every evening at sun-down
I ask a blessing on the town,
For whether we last the night or no
I'm sure is always touch-and-go.
We are not wholly bad or good
Who live our lives under Milk Wood,
And Thou, I know, wilt be the first
To see our best side, not our worst.
O let us see another day!
Bless us all this night, I pray,
And to the sun we all will bow
And say, good-bye - but just for now!'
- Dylan Thomas
www.Zend.To
Twitter: @JulesFM
PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ecs.soton.ac.uk/pipermail/zendto/attachments/20161114/e1749066/attachment.html
More information about the ZendTo
mailing list