Re: Fwd: Re: mailing list question

Thanks Jon, the reason for all this starts to be a bit clearer.  What is 
not very clear to me yet is what to do.  The mailman list is ran by
the uni of Bonn (thanks again).  I do have normal admin rights over the
specific list, but I cannot control their software version (2.1.14).

I'm not at all a mailman wizard :-(  Looking through the config, I
see "Hide the sender of a message, replacing it with the list address 
(Removes From, Sender and Reply-To fields)", but this seems far too
drastic to me.

Anyone with relevant mailman experience who can help me out?

	Cheers --- Jan



On 04/28/2014 04:59 PM, jon judge wrote:
> After submitting a message to the list last week from eg. [email protected],
> this is an example dmarc report from yahoo saying it received 3 messages
> from IP 131.220.8.4/lists.iai.uni-bonn.de, which is not authorised to send
> email from mydomain.com (domain name changed.. for privacy).  You can see
> the dmarc verifications (dkim and spf) both failed, which is why I got the
> report.
>
> <feedback><report_metadata><org_name>Yahoo!
> Inc.</org_name>[email protected]<report_id>1398244772.446320</report_id><date_range><begin>1398124800</begin><end>1398211199
> </end></date_range></report_metadata><policy_published><domain>mydomain.com</domain><adkim>s</adkim><aspf>s</aspf><p>none</p><pct>100</pct></policy_published><record><row><source_ip>131.220.8.4</source_ip><count>3</count><policy_evaluated><disposition>none</disposition><dkim>fail</dkim><spf>fail</spf></policy_evaluated></row><identifiers><header_from>mydomain.com</header_from></identifiers><auth_results><dkim><domain>lists.iai.uni-bonn.de</domain><result>neutral</result></dkim><spf><domain>lists.iai.uni-bonn.de</domain><result>none</result></spf></auth_results></record></feedback>
>
> So this is definitely a 'specific mailing list' sender impersonation problem
> in the first instance.  I have similar ones from gmail etc.
>
> As per the last email, I would configure the outgoing mails so it always
> sends from eg. [email protected], and see if you have any luck
> getting more successful deliveries. But the complete solution is to start
> afresh with an untainted domain, and get all the dmarc keys etc. configured
> on it.
>
>
>
> --
> View this message in context: http://swi-prolog.996271.n3.nabble.com/Fwd-Re-mailing-list-question-tp14894p14901.html
> Sent from the SWI Prolog mailing list archive at Nabble.com.
> _______________________________________________
> SWI-Prolog mailing list
> [email protected]
> https://lists.iai.uni-bonn.de/mailman/listinfo.cgi/swi-prolog
>