Re: [Bug 8340] New: DMARC avoidance

[email protected] Wed, 23 Jul 2025 19:17:13 +0200

Newsgroups	gmane.mail.spam.spamassassin.devel
Message-ID	<[email protected]>

On 7/23/25 6:45 PM, Benny Pedersen via dev wrote:
> [email protected] skrev den 2025-07-23 18:25:
>> https://bz.apache.org/SpamAssassin/show_bug.cgi?id=8340
> 
>> Some of the spam/phishing e-mails start to use this technique to avoid the
>> DMARC.
> 
> is dkim results pass ?
> 
> i think we would soon begin to blacklist based on dkim signer, i keep my rants :)
> 
> dkim/dmarc is not full email addr, only domain name, so let them try
> 
> 
> 
the email I forged doesn't pass SPF, doesn't have DKIM headers but "passes" DMARC checks.
  Giovanni

OpenPGP_signature.asc (application/pgp-signature, 840 B)

-----BEGIN PGP SIGNATURE-----
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=ZXtB
-----END PGP SIGNATURE-----

lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.