[Dnsmasq-discuss] DKIM / DMARC emails.

[Simon Kelley]

On 18/02/2021 12:47, Matus UHLAR - fantomas wrote:
>> On 17/02/2021 13:54, Etan Kissling wrote:
>>> When submitting a patch I noticed that the Dnsmasq mailing list modifies
>>> the subject of the email (prefix [Dnsmasq-discuss]) as well as appends
>>> 'Dnsmasq-discuss mailing list' information to the end of my message.
>>>
>>> These modifications break DKIM signatures of our emails, leading to them
>>> being filtered into Junk folders. DMARC is a security standard for
>>> accessing email authenticity.
>>>
>>> See my earlier patch:
>>> - [PATCH v4] Connection track mark based DNS query filtering.
>>>
>>> Other mailing lists such as netfilter-devel at vger.kernel.org
>>> do not share these DMARC problems.
>>>
>>> What is the preferred approach here to get my patch reviewed?
> 
> On 17.02.21 22:48, Simon Kelley wrote:
>> There's no particular reason for that behaviour, I guess it was the
>> default on whichever antediluvian version of mailman was first used to
>> host the mailing list. It appears to be trivial to turn both features
>> off, and I can't see any particular reason not to. Anyone object?
> 
> I personally prefer mailing lists without munging Subject and bodies.
> 
> however many people seem not to be able to cope with it, since they don't
> understand how mailing lists work.
> This was apparently readon why those are added.
> 
> The page https://wiki.list.org/DEV/DMARC describes that in order to cope
> with DMARC the recommended option is to set
> dmarc_moderation_action to "Munge From.
> 
> This solves problem with sites using DMARC without DKIM, because DMARC
> in such case requires SPF to match header From:.
> 

That wiki page is just word-soup as far as I am concerned. Does setting
dmarc_moderation_action to "munge from" fix Etan's original problem?


Simon.