configuration error in lists.isc.org

Reindl Harald h.reindl at thelounge.net
Fri Aug 7 06:57:58 UTC 2015


Am 07.08.2015 um 01:25 schrieb Heiko Richter:
> Whenever I post something to the list (I'm not using SMTP, I'm using a
> usenet server to post to comp.protocols.dns.bind), my postmaster
> address receives DMARC notifications from list members that have
> employed this wonderful protocol on their servers, telling me my
> message had been rejected for violating my SPF policy.
>
> My SPF record doesn't include lists.ist.org, of course and it never
> will. Furthermore it ends with "-all" so all my messages to the list
> are being rejected by list members who have spf aware servers.
>
> Just wanted to let you all know about it as I can imagine I'm not the
> only person who has outgoing SPF.
>
> And the worst thing: If you have a record ending with "~all" your
> messages will be accepted but probably end up in a spam report
> container slowly eating away the good anti-spam-reputation your server
> has.
>
> So ISC: please fix your list servers, let them rewrite the From headers!

please try to understand the topic before blaming!
http://wiki.list.org/DEV/DMARC

* SPF is about envelopes and *never* from-headers
* the envelope is @lists.isc.org

the problem is the list-footer breaking DKIM

 > I'm not using SMTP, I'm using a usenet server
 > to post to comp.protocols.dns.bind

well, and where is your DKIM signature at all when you are talking about 
DMARC - just look at the source code of your own mail?

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 181 bytes
Desc: OpenPGP digital signature
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20150807/3a9e1a27/attachment.bin>


More information about the bind-users mailing list