IETF Logo Mail Archive

Re: DMARC and yahoo

Michael Richardson <mcr+ietf@sandelman.ca> Wed, 16 April 2014 02:23 UTC

Return-Path: <mcr@sandelman.ca>
X-Original-To: ietf@ietfa.amsl.com
Delivered-To: ietf@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 689871A00D7 for <ietf@ietfa.amsl.com>; Tue, 15 Apr 2014 19:23:31 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.973
X-Spam-Level:
X-Spam-Status: No, score=-0.973 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, J_CHICKENPOX_16=0.6, J_CHICKENPOX_21=0.6, RP_MATCHES_RCVD=-0.272, SPF_PASS=-0.001] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LMck-f3rOBMh for <ietf@ietfa.amsl.com>; Tue, 15 Apr 2014 19:23:29 -0700 (PDT)
Received: from tuna.sandelman.ca (tuna.sandelman.ca [209.87.252.184]) by ietfa.amsl.com (Postfix) with ESMTP id 342A21A0034 for <ietf@ietf.org>; Tue, 15 Apr 2014 19:23:29 -0700 (PDT)
Received: from sandelman.ca (obiwan.sandelman.ca [IPv6:2607:f0b0:f:2::247]) by tuna.sandelman.ca (Postfix) with ESMTP id 391C42003B; Tue, 15 Apr 2014 22:23:42 -0400 (EDT)
Received: by sandelman.ca (Postfix, from userid 179) id 2AF6163ABA; Tue, 15 Apr 2014 22:23:23 -0400 (EDT)
Received: from sandelman.ca (localhost [127.0.0.1]) by sandelman.ca (Postfix) with ESMTP id 1161463A9E; Tue, 15 Apr 2014 22:23:23 -0400 (EDT)
From: Michael Richardson <mcr+ietf@sandelman.ca>
To: Theodore Ts'o <tytso@mit.edu>
Subject: Re: DMARC and yahoo
In-Reply-To: <20140416012205.GC12078@thunk.org>
References: <CAKW6Ri6OUmxGaBOGR2hoWpDOGWsVQ9tQ2Q9ogkT5wzFhFJLBbQ@mail.gmail.com> <534D9C2C.8010606@gmail.com> <20140415214348.GL4456@thunk.org> <1397607352.389753533@f361.i.mail.ru> <534DCFFB.4080102@gmail.com> <20140416012205.GC12078@thunk.org>
X-Mailer: MH-E 8.2; nmh 1.3-dev; GNU Emacs 23.4.1
X-Face: $\n1pF)h^`}$H>Hk{L"x@)JS7<%Az}5RyS@k9X%29-lHB$Ti.V>2bi.~ehC0; <'$9xN5Ub# z!G,p`nR&p7Fz@^UXIn156S8.~^@MJ*mMsD7=QFeq%AL4m<nPbLgmtKK-5dC@#:k
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="=-=-="; micalg="pgp-sha1"; protocol="application/pgp-signature"
Date: Tue, 15 Apr 2014 22:23:22 -0400
Message-ID: <24986.1397615002@sandelman.ca>
Sender: mcr@sandelman.ca
Archived-At: http://mailarchive.ietf.org/arch/msg/ietf/4F6q95oeS1CFgHevcLlVHNVb9O8
Cc: ietf@ietf.org
X-BeenThere: ietf@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: IETF-Discussion <ietf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ietf>, <mailto:ietf-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/ietf/>
List-Post: <mailto:ietf@ietf.org>
List-Help: <mailto:ietf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 16 Apr 2014 02:23:31 -0000

Theodore Ts'o <tytso@mit.edu> wrote:
    > This means that if a bob@yahoo.com sends a message to a list which
    > includes alice@hotmail.com, and the mailing list server keeps the from
    > field as "bob@yahoo.com", and sends the message to all of the mailing
    > list recipients, which includes alice@hotmail.com, the following things will happen:

    > a) hotmail.com will compare the sender address (authenticated with
    > SPF) with the from address (authenticated by DKIM), see that they
    > are different, and since yahoo.com has a DEMARK p=reject,
    > hotmail.com will bounce the mail.

    > b) this means alice@hotmail.com will never see bob@yahoo.com's mail

    > c) since the mailing list server receives a bounce from hotmail.com,
    > if there are enough attempts from yahoo.com users to send mail to
    > the mailing list, the number of bounces will cause the mailing list
    > server to suspend or remove alice@hotmail.com from the mailing
    > list.

So, as a WG chair, a person known to me just tried to post to the list
From a brand new yahoo.com mail account.  They aren't subscribed with that
address.  I would normally just approve, and add them...

It seems to me that I must now actually reject, because it would affect other
subscribers.

I'm now thinking that we need to remove all the @yahoo.com addresses from
posting to ietf mailing lists.

--
Michael Richardson <mcr+IETF@sandelman.ca>, Sandelman Software Works
 -= IPv6 IoT consulting =-

v2.23.0 | Report a Bug | By Email