Re: [dmarc-ietf] Why are MUAs hiding or removing the From address?

Joseph Brennan <brennan@columbia.edu> Thu, 23 July 2020 15:06 UTC

Return-Path: <jb51@columbia.edu>
X-Original-To: dmarc@ietfa.amsl.com
Delivered-To: dmarc@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EFF4F3A087F for <dmarc@ietfa.amsl.com>; Thu, 23 Jul 2020 08:06:24 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.919
X-Spam-Level:
X-Spam-Status: No, score=-1.919 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_MSPIKE_H4=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id woA9mCxZ1a_Q for <dmarc@ietfa.amsl.com>; Thu, 23 Jul 2020 08:06:23 -0700 (PDT)
Received: from mx0b-00364e01.pphosted.com (mx0b-00364e01.pphosted.com [148.163.139.74]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7A4843A08C6 for <dmarc@ietf.org>; Thu, 23 Jul 2020 08:06:13 -0700 (PDT)
Received: from pps.filterd (m0167073.ppops.net [127.0.0.1]) by mx0b-00364e01.pphosted.com (8.16.0.42/8.16.0.42) with SMTP id 06NEbg97009360 for <dmarc@ietf.org>; Thu, 23 Jul 2020 11:06:12 -0400
Received: from sendprodmail12.cc.columbia.edu (sendprodmail12.cc.columbia.edu [128.59.72.20]) by mx0b-00364e01.pphosted.com with ESMTP id 32bvydubmm-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for <dmarc@ietf.org>; Thu, 23 Jul 2020 11:06:12 -0400
Received: from mail-io1-f71.google.com (mail-io1-f71.google.com [209.85.166.71]) by sendprodmail12.cc.columbia.edu (8.14.4/8.14.4) with ESMTP id 06NF6BHC002500 (version=TLSv1/SSLv3 cipher=AES128-GCM-SHA256 bits=128 verify=NOT) for <dmarc@ietf.org>; Thu, 23 Jul 2020 11:06:11 -0400
Received: by mail-io1-f71.google.com with SMTP id f25so4233149ioh.7 for <dmarc@ietf.org>; Thu, 23 Jul 2020 08:06:11 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to; bh=nFZdOOhHIan3/jSSzP6gSVN2oE39Qyhjo3OhK4mnwTI=; b=ELkTQUdi87qmGv0YEQd2snmMFaYfkepQakv6MDleDWI8O3IFmKF4DPO3fV+Pk3zHVJ kSAtF60ilDZP7ivFeeIO3jbToWnwf6oDjDApcsxFaRO2Kcpe5qtzB4dKN5WfjqpaWsw1 QNfFdP9bZP/WC9iaMZsZorP18PCBUOqfHiHpejJHZmOc5l1E6m/oXtdoj324TpQF1K2u aWdF4qBV3wnCIwqGvbtJ4y+UqxhX9TVHJcbLxhklMAqi3k1URIiE4ViJwzanbOcCT9KS 2tBbyZQcyNNvSuNuavCaO7HQgeM3xMDopVk3dhg+6iM25BX2Aq2YWGaKeu2NSwQnMBT1 y1aQ==
X-Gm-Message-State: AOAM531x9VWMhbY5TL7GjD+TVz9SIcG+HWNVrJ7DYIEGikXTnkzOhVeT I92XSvkKxBzUNOSM44N4OMJnJkTLf7MC8SnxAWmKam/aqotmNRW2tYLjo1xog2HPrSONxU3KZ3u G9gT2m77DrX0mUz487AMzB8FX2bNRKg==
X-Received: by 2002:a02:c903:: with SMTP id t3mr5318487jao.30.1595516771156; Thu, 23 Jul 2020 08:06:11 -0700 (PDT)
X-Google-Smtp-Source: ABdhPJyWn7FzJsxs+EtZb8SDQl/zIvPIrQi6UfD9L/nyCctKlryiFbzhAT26ErgGYBsnBbLoR5JAln31l0q+XqRQB0k=
X-Received: by 2002:a02:c903:: with SMTP id t3mr5318447jao.30.1595516770698; Thu, 23 Jul 2020 08:06:10 -0700 (PDT)
MIME-Version: 1.0
References: <cd9258e6-3917-2380-dd9b-66d74f3a64d3@gmail.com> <20200717210053.674D61D2C431@ary.qy> <CAL0qLwbkhG-qUyGqxaEjcFn2Lb7wPMhcPFEMA8eqptBJpePPxA@mail.gmail.com> <8efcf71c-f841-46a4-10b7-feb41a741405@gmail.com> <CAL0qLwbK7GQXkiS+H8GtsvHMzWr4o431Shc7Cc9MhqsTiHfzFw@mail.gmail.com> <bc7ed18c-8f1d-b41b-0a4b-3aa180a63563@gmail.com> <CAL0qLwYgs7py1aTQ87pykNT_0dpnrKz=+1DxMMSQMgbwz4XZDg@mail.gmail.com> <5AF00366-DB28-41CB-A1C4-F5BCA77EC969@wordtothewise.com> <CAL0qLwZRYb4yk_WJKizR0UA97XK3VedfZw73YgyTPHuOpxZQhQ@mail.gmail.com> <74a6fb5f7578452f9080cddb8ebbc8f5@bayviewphysicians.com> <adcc1359-6bb6-1237-2967-307b49557cf4@wisc.edu> <CAMSGcLAyhV8UPwr7pO9ZASebefG4XdJS1rbBdfEoQW-xE2Wg5w@mail.gmail.com> <708a775465c2765311742e7c2eee34ff@junc.eu>
In-Reply-To: <708a775465c2765311742e7c2eee34ff@junc.eu>
From: Joseph Brennan <brennan@columbia.edu>
Date: Thu, 23 Jul 2020 11:05:59 -0400
Message-ID: <CAMSGcLC2m_kTiNRObii1MSGKru5ECrrVFOV3u-i7kW7wVaXgpw@mail.gmail.com>
To: IETF DMARC WG <dmarc@ietf.org>
Content-Type: text/plain; charset="UTF-8"
X-CU-OB: Yes
X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.235, 18.0.687 definitions=2020-07-23_06:2020-07-23, 2020-07-23 signatures=0
X-Proofpoint-Spam-Reason: safe
Archived-At: <https://mailarchive.ietf.org/arch/msg/dmarc/_Fm_PCsLMgaD04XOqpw7JHw0PDI>
Subject: Re: [dmarc-ietf] Why are MUAs hiding or removing the From address?
X-BeenThere: dmarc@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Domain-based Message Authentication, Reporting, and Compliance \(DMARC\)" <dmarc.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dmarc>, <mailto:dmarc-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dmarc/>
List-Post: <mailto:dmarc@ietf.org>
List-Help: <mailto:dmarc-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dmarc>, <mailto:dmarc-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 23 Jul 2020 15:06:25 -0000

On Thu, Jul 23, 2020 at 9:20 AM Benny Pedersen
<me=40junc.eu@dmarc.ietf.org> wrote:

> show the source on how to make this work in mimedefang, or will it
> completely fail with spampd ?

Since it is off topic, I will give a short answer. If the Header From
matches /From: anything <string@domain>, check whether domain is one
that needs the rewrite, gmail.com for example, and change the field to
be simply /From: string@domain/.

In Mimedefang, we created a per-message global hash %Header, and
parsed each field (split on :). So for example $Header{from} was the
value of the From header field. The hash was used in various rules. MD
has a built-in function to replace the content of header fields, which
I think is a milter function.


-- 
Joseph Brennan
Lead, Email and Systems Applications