You are viewing a plain text version of this content. The canonical link for it is here.
Posted to infrastructure-issues@apache.org by "Gavin (JIRA)" <ji...@apache.org> on 2016/09/20 04:31:20 UTC

[jira] [Closed] (INFRA-12589) reported bounces when user emailed ezmlm list moderators due to forward/DMARC conflicts

     [ https://issues.apache.org/jira/browse/INFRA-12589?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Gavin closed INFRA-12589.
-------------------------
    Resolution: Workaround

We have recently added qmail owner files which should help.
other than that we'll update our setup with DKIM/DMARC which may be done before or during our new mail server software rollout

> reported bounces when user emailed ezmlm list moderators due to forward/DMARC conflicts
> ---------------------------------------------------------------------------------------
>
>                 Key: INFRA-12589
>                 URL: https://issues.apache.org/jira/browse/INFRA-12589
>             Project: Infrastructure
>          Issue Type: Bug
>          Components: Mail (qmail), Mailing Lists
>            Reporter: Hoss Man
>            Assignee: Gavin
>
> I'm not a DMARC expert, so i have no idea what the correct/expected behavior is in a situation like this, but a user recently contacted me directly because their attempt to email java-user-owner@lucene resulted in Apache's qmail-send bouncing their email because when ezmlm tried forwarding the email to my (gmail powered) email address google's SMTP server rejected it due to the DMARC policy of the original senders domain.
> here is a copy of the bounce message the user recieved, with all domains intact, and only the usernames spamguarded (i truncated the body of the original email since it doesn't seem relevant or urposes of this bug) ...
> ---------------------
> Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of postmaster@mail.apache.org designates 140.211.11.3 as permitted sender) smtp.helo=mail.apache.org
> Return-Path: <>
> X-Received: by 10.98.144.21 with SMTP id a21mr1748038pfe.24.1473358295296; Thu, 08 Sep 2016 11:11:35 -0700 (PDT)
> Received: by 10.202.87.145 with SMTP id l139csp931858oib; Thu, 8 Sep 2016 11:11:35 -0700 (PDT)
> Received: from mail.apache.org (hermes.apache.org. [140.211.11.3]) by mx.google.com with SMTP id c6si8153029pfc.35.2016.09.08.11.11.35 for <SP...@robustlinks.com>; Thu, 08 Sep 2016 11:11:35 -0700 (PDT)
> Received: (qmail 28867 invoked for bounce); 8 Sep 2016 18:11:34 -0000
> Message-Id: <57...@mx.google.com>
> Delivered-To: SPAM_GUARD_USER@robustlinks.com
> Received-Spf: pass (google.com: best guess record for domain of postmaster@mail.apache.org designates 140.211.11.3 as permitted sender) client-ip=140.211.11.3;
> failure notice
> Hi. This is the qmail-send program at apache.org <http://apache.org/>.
> I'm afraid I wasn't able to deliver your message to the following addresses.
> This is a permanent error; I've given up. Sorry it didn't work out.
> <SPAM_GUARD_ME@fucit.org <ma...@fucit.org>>:
> 74.125.28.27 failed after I sent the message.
> Remote host said: 550-5.7.1 Unauthenticated email from robustlinks.com <http://robustlinks.com/> is not accepted due to
> 550-5.7.1 domain's DMARC policy. Please contact the administrator of
> 550-5.7.1 robustlinks.com <http://robustlinks.com/> domain if this was a legitimate mail. Please visit
> 550-5.7.1  https://support.google.com/mail/answer/2451690 <https://support.google.com/mail/answer/2451690> to learn about the
> 550 5.7.1 DMARC initiative. r18si36248944pfk.45 - gsmtp
> --- Below this line is a copy of the message.
> Return-Path: <SPAM_GUARD_USER@robustlinks.com <ma...@robustlinks.com>>
> Received: (qmail 28853 invoked by uid 500); 8 Sep 2016 18:11:34 -0000
> Delivered-To: apmail-lucene-java-user-owner@lucene.apache.org <ma...@lucene.apache.org>
> Received: (qmail 28845 invoked by uid 99); 8 Sep 2016 18:11:34 -0000
> Received: from pnap-us-west-generic-nat.apache.org <http://pnap-us-west-generic-nat.apache.org/> (HELO spamd4-us-west.apache.org <http://spamd4-us-west.apache.org/>) (209.188.14.142)
>    by apache.org <http://apache.org/> (qpsmtpd/0.29) with ESMTP; Thu, 08 Sep 2016 18:11:34 +0000
> Received: from localhost (localhost [127.0.0.1])
> 	by spamd4-us-west.apache.org <http://spamd4-us-west.apache.org/> (ASF Mail Server at spamd4-us-west.apache.org <http://spamd4-us-west.apache.org/>) with ESMTP id DCEAEC03CE
> 	for <java-user-owner@lucene.apache.org <ma...@lucene.apache.org>>; Thu,  8 Sep 2016 18:11:33 +0000 (UTC)
> X-Virus-Scanned: Debian amavisd-new at spamd4-us-west.apache.org <http://spamd4-us-west.apache.org/>
> X-Spam-Flag: NO
> X-Spam-Score: -0.721
> X-Spam-Level:
> X-Spam-Status: No, score=-0.721 tagged_above=-999 required=6.31
> 	tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_LOW=-0.7,
> 	RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001]
> 	autolearn=disabled
> Authentication-Results: spamd4-us-west.apache.org <http://spamd4-us-west.apache.org/> (amavisd-new);
> 	dkim=pass (2048-bit key)
> 	header.d=robustlinks-com.20150623.gappssmtp.com <http://robustlinks-com.20150623.gappssmtp.com/>
> Received: from mx2-lw-us.apache.org <http://mx2-lw-us.apache.org/> ([10.40.0.8])
> 	by localhost (spamd4-us-west.apache.org <http://spamd4-us-west.apache.org/> [10.40.0.11]) (amavisd-new, port 10024)
> 	with ESMTP id 32qaxdnM8aCh for <java-user-owner@lucene.apache.org <ma...@lucene.apache.org>>;
> 	Thu,  8 Sep 2016 18:11:31 +0000 (UTC)
> Received: from mail-pa0-f52.google.com <http://mail-pa0-f52.google.com/> (mail-pa0-f52.google.com <http://mail-pa0-f52.google.com/> [209.85.220.52])
> 	by mx2-lw-us.apache.org <http://mx2-lw-us.apache.org/> (ASF Mail Server at mx2-lw-us.apache.org <http://mx2-lw-us.apache.org/>) with ESMTPS id 564D05FC25
> 	for <java-user-owner@lucene.apache.org <ma...@lucene.apache.org>>; Thu,  8 Sep 2016 18:11:31 +0000 (UTC)
> Received: by mail-pa0-f52.google.com <http://mail-pa0-f52.google.com/> with SMTP id cm16so19702191pac.0
>        for <java-user-owner@lucene.apache.org <ma...@lucene.apache.org>>; Thu, 08 Sep 2016 11:11:31 -0700 (PDT)
> DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
>        d=robustlinks-com.20150623.gappssmtp.com <http://robustlinks-com.20150623.gappssmtp.com/>; s=20150623;
>        h=mime-version:subject:from:in-reply-to:date:cc
>         :content-transfer-encoding:message-id:references:to;
>        bh=ugAyeibatqCHRueuec6AYjUieB8UeC5TxzZDRbR4DfA=;
>        b=GjO2k1Cdj/+O8hUip9wZkHrx/kwXq1/HlhW/ymGi8EU3JK4D0cdYHILtVxyqB92aQs
>         zpl1ez34o0pVNORpySap1ex1A3prYbMyUrw7rhnYwlKNLHDAyWXDq4zJr92/mmcac28Q
>         Afjy0gt3/JwQ4YlJQoV8gCtnwYe9vMhw42P/sZP4Ku6TIzj0uFwOrKB8ewsgpmSdOQz0
>         ymXKcSXd4jPIyJ1C1+4u37HwfL+1bCIhbCDI5W4pQTyDI4vePNceR2sSGqnQ9geA03lQ
>         jCmI2Dveq1+umBkNdmz0cK/1JPE7VQVoFGcwjFLOW4a2cSN4ptgwukuOr4a7iZIwZWrw
>         qKhQ==
> X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
>        d=1e100.net <http://1e100.net/>; s=20130820;
>        h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc
>         :content-transfer-encoding:message-id:references:to;
>        bh=ugAyeibatqCHRueuec6AYjUieB8UeC5TxzZDRbR4DfA=;
>        b=PZ5F2uOJScYA/az+2Hm3LDQL5p1tdLESf30uJjDAaCbLgmobK7za16WGtJ0lbrrRpC
>         QP+lz4ALMtwXpiya0v00ovIcW+kgZnxxUmviDY6RWixnD89BrUd1RlgeygMNsvu49hz4
>         Ds9AMZiuQEN/S2BlH1YWr+nhquDhahIYKik+dojr+whKvvPSWoR5Ziim0CLaViv8TSmD
>         jZZatTSrqfpZFOJU/LffYuhrRQ5dAdzMeRz+NM5IWTaIzs/U/0fH/SFlNJFHcro4leaN
>         /yIggdHTOlSBfvu9qI0zoaY/QF72lkPCO88EhzRMru+78fa6o4gs5iV/Uo1TgJ4iRD0E
>         Ae5Q==
> X-Gm-Message-State: AE9vXwMfbxTuBvYQ5KCMsioGNz31+PraRcN/PN7h22wy/vQYULJM+8i/yBloSSVlcLU8Bw==
> X-Received: by 10.66.120.143 with SMTP id lc15mr1586200pab.139.1473358290448;
>        Thu, 08 Sep 2016 11:11:30 -0700 (PDT)
> Received: from ip-192-168-1-6.us <http://ip-192-168-1-6.us/>-west-2.compute.internal (cpe-72-225-210-157.nyc.res.rr.com <http://cpe-72-225-210-157.nyc.res.rr.com/>. [72.225.210.157])
>        by smtp.gmail.com <http://smtp.gmail.com/> with ESMTPSA id p4sm57833772pfp.60.2016.09.08.11.11.29
>        (version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128);
>        Thu, 08 Sep 2016 11:11:29 -0700 (PDT)
> Content-Type: text/plain; charset=us-ascii
> Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\))
> Subject: Re: helping SPAM_GUARD_USER unsubscribe -- was: Re: Unsubscribing problems
> From: Robust Links <SPAM_GUARD_USER@robustlinks.com <ma...@robustlinks.com>>
> In-Reply-To: <al...@tray>
> Date: Thu, 8 Sep 2016 14:11:27 -0400
> Cc: java-user-owner@lucene.apache.org <ma...@lucene.apache.org>
> Content-Transfer-Encoding: quoted-printable
> Message-Id: <082EFF26-A755-426A-BF4D-C29FD2A71AB0@robustlinks.com <ma...@robustlinks.com>>
> References: <CADuAvzfgXdwqV58Mkpejq-NVX53TfkcZPj=j6kAsSAKgT7p54Q@mail.gmail.com <ma...@mail.gmail.com>> <CAL8Pwka=EVNpph8DhO7ip1BuyQesTvMNJ+O933U97ic1U0NJrw@mail.gmail.com <ma...@mail.gmail.com>> <1057F90E-4E4A-4268-A0C8-E903932AAAC5@robustlinks.com <ma...@robustlinks.com>> <al...@tray>
> To: Chris Hostetter <SPAM_GUARD_ME@fucit.org <ma...@fucit.org>>
> X-Mailer: Apple Mail (2.3124)
> Hi Chris
> thank you for your note below. The problem was the verification email =
> ...



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)