[Dnsmasq-discuss] DKIM / DMARC emails.

Matus UHLAR - fantomas uhlar at fantomas.sk
Thu Feb 18 12:47:55 UTC 2021


>On 17/02/2021 13:54, Etan Kissling wrote:
>> When submitting a patch I noticed that the Dnsmasq mailing list modifies
>> the subject of the email (prefix [Dnsmasq-discuss]) as well as appends
>> 'Dnsmasq-discuss mailing list' information to the end of my message.
>>
>> These modifications break DKIM signatures of our emails, leading to them
>> being filtered into Junk folders. DMARC is a security standard for
>> accessing email authenticity.
>>
>> See my earlier patch:
>> - [PATCH v4] Connection track mark based DNS query filtering.
>>
>> Other mailing lists such as netfilter-devel at vger.kernel.org
>> do not share these DMARC problems.
>>
>> What is the preferred approach here to get my patch reviewed?

On 17.02.21 22:48, Simon Kelley wrote:
>There's no particular reason for that behaviour, I guess it was the
>default on whichever antediluvian version of mailman was first used to
>host the mailing list. It appears to be trivial to turn both features
>off, and I can't see any particular reason not to. Anyone object?

I personally prefer mailing lists without munging Subject and bodies.

however many people seem not to be able to cope with it, since they don't
understand how mailing lists work.
This was apparently readon why those are added.

The page https://wiki.list.org/DEV/DMARC 
describes that in order to cope with DMARC the recommended option is to set
dmarc_moderation_action to "Munge From.

This solves problem with sites using DMARC without DKIM, because DMARC
in such case requires SPF to match header From:.

-- 
Matus UHLAR - fantomas, uhlar at fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
I just got lost in thought. It was unfamiliar territory.



More information about the Dnsmasq-discuss mailing list