[Dnsmasq-discuss] DKIM / DMARC emails.

[Simon Kelley]

On 19/02/2021 12:35, Matus UHLAR - fantomas wrote:
>>>> On 17/02/2021 13:54, Etan Kissling wrote:
>>>>> When submitting a patch I noticed that the Dnsmasq mailing list
>>>>> modifies
>>>>> the subject of the email (prefix [Dnsmasq-discuss]) as well as appends
>>>>> 'Dnsmasq-discuss mailing list' information to the end of my message.
>>>>>
>>>>> These modifications break DKIM signatures of our emails, leading to
>>>>> them
>>>>> being filtered into Junk folders. DMARC is a security standard for
>>>>> accessing email authenticity.
>>>>>
>>>>> See my earlier patch:
>>>>> - [PATCH v4] Connection track mark based DNS query filtering.
>>>>>
>>>>> Other mailing lists such as netfilter-devel at vger.kernel.org
>>>>> do not share these DMARC problems.
>>>>>
>>>>> What is the preferred approach here to get my patch reviewed?
> 
>>> On 17.02.21 22:48, Simon Kelley wrote:
>>>> There's no particular reason for that behaviour, I guess it was the
>>>> default on whichever antediluvian version of mailman was first used to
>>>> host the mailing list. It appears to be trivial to turn both features
>>>> off, and I can't see any particular reason not to. Anyone object?
> 
>> On 18/02/2021 12:47, Matus UHLAR - fantomas wrote:
>>> I personally prefer mailing lists without munging Subject and bodies.
>>>
>>> however many people seem not to be able to cope with it, since they
>>> don't
>>> understand how mailing lists work.
>>> This was apparently readon why those are added.
>>>
>>> The page https://wiki.list.org/DEV/DMARC describes that in order to cope
>>> with DMARC the recommended option is to set
>>> dmarc_moderation_action to "Munge From.
>>>
>>> This solves problem with sites using DMARC without DKIM, because DMARC
>>> in such case requires SPF to match header From:.
> 
> 
> On 18.02.21 22:50, Simon Kelley wrote:
>> That wiki page is just word-soup as far as I am concerned.  Does setting
>> dmarc_moderation_action to "munge from" fix Etan's original problem?
> 
> it should - it's designed to do exactly that.
> 

OK. It's set. Looking for feedback, good and bad.

Simon.