Re: Mailman 2.1.16 [DMARC: perspectives from a listadmin of large open-source lists

[Theodore Ts'o <[e-mail]>]

On Tue, Apr 15, 2014 at 08:39:48AM +1200, Brian E Carpenter wrote:
> Murray,
> 
> On 15/04/2014 05:26, Murray S. Kucherawy wrote:
> ...
> > The DMARC proponents did engage mailman.   Version 2.1.16 includes support
> > for a setting that makes the operation of the list DMARC-friendly, though
> > likely in a way some people will find unpalatable. 
> 
> Please tell us more about that.

>From what I can tell, it has an option which you can replace the From
field with the original sender's from field with the mailing list's
e-mail address.   i.e., instead of:

From: Brian E Carpenter <[e-mail]>

it would instead be;

From: IETF <[e-mail]>

Any SPF or DKIM fields would also get stripped, and the original from
field would be moved elsewhere (it's not clear from reading the
description whether it's to some other header field, i.e.,
"X-Original-From" or to the body of the e-mail.



The solution I would prefer is one where mailman look up the DMARC
record, and if it's p=reject, it could rewrite the email from:

From: Brian E Carpenter <[e-mail]>

to something like:

From: Brian E Carpenter <[e-mail]>

(or maybe instead of yahoo.com.INVALID, it should be "yahoo.com.BREAKS.MAILING.LISTS" :-)

    	  	     			   	  - Ted