offtopic: rant about thoughtless enabling DMARC checks
Michael A. Peters
mpeters at domblogger.net
Mon Feb 11 01:46:43 EET 2019
On 2/10/19 3:42 PM, Noel Butler via dovecot wrote:
> On 10/02/2019 12:49, Benny Pedersen via dovecot wrote:
>
>>
>> fixing mailman will be the fail, solve it by letting opendkim and
>> opendmarc not reject detected maillist will be solution,
>
>
> A general broad mailing list whitelist will be problematic, do work it
> needs to look for specific list type hidden headers, spammers and
> nasties will incorporate those headers into their trash that
> impersonates mailing lists and voila, they pass.
However the majority of spammers do not spam with a properly configured
Reverse DNS - so detect the list header and skip DMARC if list headers
are present AND Reverse DNS matched the HELO/EHLO
More information about the dovecot
mailing list