Package: reportbug
X-Debbugs-Cc: mar...@meltin.net
Version: 13.1.0
Severity: important

Dear Maintainer,

When I submit a Debian bug using reportbug, I receive many DMARC
reports with failures in them.  It appears that the Debian BTS
forwards emails without changing the original sender.  This makes DKIM
and SPF fail in many cases.  It would be better to rewrite the sender
to, say, <ow...@bugs.debian.org> before forwarding the message.

It is hard to judge the severity of this, since I don't know how many
recipients' SPAM filtering might have rejected the message based on
DMARC/DKIM/SPF failures.  Therefore, I'm marking it as important.

Here are some example outputs from dmarc-cat, for DMARC reports
relating to email forwarded by the Debian BTS (it is difficult for me
to provide attachments because of my local machine email config):

$ dmarc-cat 
gmx.net\!meltin.net\!1740787200\!1740873599\!cf6fcf3b8bb843b6acd2385e77dd2f5b.xml.gz
 
dmarc-cat 0.15.0,parallel/j12 by Ollivier Robert

Reporting by: GMX — noreply-dm...@sicher.gmx.net
From 2025-03-01 11:00:00 +1100 AEDT to 2025-03-02 10:59:59 +1100 AEDT

Domain: meltin.net
Policy: p=none; dkim=r; spf=r

Reports(1):
IP                 Count   From       RFrom      RDKIM   RSPF    
bendel.debian.org. 4       meltin.net meltin.net fail    none    

$ dmarc-cat yahoo.com\!meltin.net\!1740787200\!1740873599.xml.gz 
dmarc-cat 0.15.0,parallel/j12 by Ollivier Robert

Reporting by: Yahoo — dmarch...@yahooinc.com
From 2025-03-01 11:00:00 +1100 AEDT to 2025-03-02 10:59:59 +1100 AEDT

Domain: meltin.net
Policy: p=none; dkim=r; spf=r

Reports(1):
IP                 Count   From       RFrom      RDKIM     RSPF    
bendel.debian.org. 1       meltin.net meltin.net permerror none    

$ dmarc-cat google.com\!meltin.net\!1737158400\!1737244799.zip 
dmarc-cat 0.15.0,parallel/j12 by Ollivier Robert

Reporting by: google.com — noreply-dmarc-supp...@google.com
From 2025-01-18 11:00:00 +1100 AEDT to 2025-01-19 10:59:59 +1100 AEDT

Domain: meltin.net
Policy: p=none; dkim=r; spf=r

Reports(10):
IP                              Count   From       RFrom        RDKIM   RSPF    
 
mitropoulos.debian.org.         36      meltin.net meltin.net   fail    none    
 
mail.tryninja.io.               29      meltin.net meltin.net   fail    none    
 
i-bif.cloudflare-email.net.     2       meltin.net meltin.net   fail    none    
 
bendel.debian.org.              2       meltin.net meltin.net   fail    pass    
 
smtp-mx-ubuntu-0.canonical.com. 1       meltin.net meltin.net   fail    
softfail 
bendel.debian.org.              1       meltin.net meltin.net   fail    none    
 
mail-sor-f69.google.com.        1       meltin.net meltin.net   fail    pass    
 
smtp-mx-ubuntu-1.canonical.com. 1       meltin.net meltin.net   fail    
softfail 
mail-sor-f41.google.com.        1       meltin.net mokyokit.com pass    pass    
 
yw-1204.doraji.xyz.             1       meltin.net meltin.net   fail    none    
 

Thanks...


-- Package-specific info:
** Environment settings:
EDITOR=editor
PAGER=less
VISUAL=editor
NAME='Martin Schwenke'
INTERFACE=text

** /home/martins/.reportbugrc:
reportbug_version "7.10.3"
mode standard
ui text
offline
email "mar...@meltin.net"
no-cc
list-cc-me
smtphost reportbug.debian.org

-- System Information:
Debian Release: trixie/sid
  APT prefers testing
  APT policy: (990, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 6.12.11-rt-amd64 (SMP w/12 CPU threads; PREEMPT)
Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_AU:en
Shell: /bin/sh linked to /usr/bin/dash
Init: sysvinit (via /sbin/init)
LSM: AppArmor: enabled

Versions of packages reportbug depends on:
ii  apt                2.9.30
ii  python3            3.13.2-1
ii  python3-reportbug  13.1.0
ii  sensible-utils     0.0.24

reportbug recommends no packages.

Versions of packages reportbug suggests:
ii  claws-mail                      4.3.0-2+b3
ii  debconf                         1.5.89
pn  debsums                         <none>
pn  dlocate                         <none>
ii  emacs-bin-common                1:30.1+1-3
ii  file                            1:5.45-3+b1
ii  gnupg                           2.2.46-1
ii  postfix [mail-transport-agent]  3.9.1-10+b1
pn  python3-urwid                   <none>
pn  reportbug-gtk                   <none>
ii  xdg-utils                       1.2.1-2

Versions of packages python3-reportbug depends on:
ii  apt                2.9.30
ii  file               1:5.45-3+b1
ii  python3            3.13.2-1
ii  python3-apt        2.9.9+b1
ii  python3-debian     0.1.49
ii  python3-debianbts  4.1.1
ii  python3-requests   2.32.3+dfsg-4
ii  sensible-utils     0.0.24

python3-reportbug suggests no packages.

-- no debconf information



peace & happiness,
martin

Reply via email to