[Dnsmasq-discuss] DKIM / DMARC emails.

Matus UHLAR - fantomas uhlar at fantomas.sk
Fri Feb 19 12:35:35 UTC 2021


>>> On 17/02/2021 13:54, Etan Kissling wrote:
>>>> When submitting a patch I noticed that the Dnsmasq mailing list modifies
>>>> the subject of the email (prefix [Dnsmasq-discuss]) as well as appends
>>>> 'Dnsmasq-discuss mailing list' information to the end of my message.
>>>>
>>>> These modifications break DKIM signatures of our emails, leading to them
>>>> being filtered into Junk folders. DMARC is a security standard for
>>>> accessing email authenticity.
>>>>
>>>> See my earlier patch:
>>>> - [PATCH v4] Connection track mark based DNS query filtering.
>>>>
>>>> Other mailing lists such as netfilter-devel at vger.kernel.org
>>>> do not share these DMARC problems.
>>>>
>>>> What is the preferred approach here to get my patch reviewed?

>> On 17.02.21 22:48, Simon Kelley wrote:
>>> There's no particular reason for that behaviour, I guess it was the
>>> default on whichever antediluvian version of mailman was first used to
>>> host the mailing list. It appears to be trivial to turn both features
>>> off, and I can't see any particular reason not to. Anyone object?

>On 18/02/2021 12:47, Matus UHLAR - fantomas wrote:
>> I personally prefer mailing lists without munging Subject and bodies.
>>
>> however many people seem not to be able to cope with it, since they don't
>> understand how mailing lists work.
>> This was apparently readon why those are added.
>>
>> The page https://wiki.list.org/DEV/DMARC describes that in order to cope
>> with DMARC the recommended option is to set
>> dmarc_moderation_action to "Munge From.
>>
>> This solves problem with sites using DMARC without DKIM, because DMARC
>> in such case requires SPF to match header From:.


On 18.02.21 22:50, Simon Kelley wrote:
>That wiki page is just word-soup as far as I am concerned.  Does setting
>dmarc_moderation_action to "munge from" fix Etan's original problem?

it should - it's designed to do exactly that.

-- 
Matus UHLAR - fantomas, uhlar at fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Linux is like a teepee: no Windows, no Gates and an apache inside...



More information about the Dnsmasq-discuss mailing list