Looking at CookHeaders.py in 2.1.18-1, it appears that it rewrites "Joe User" <[email protected]> as "Joe User" via Discussion list for OpenIndiana <[email protected]> and leaves From: alone if the domain does not implement p=reject. That's obviously not what is being done. Unfortunately, verifying this requires spinning up an MTA and a web server which is a lot of overhead.
The mail header suggests that we're using 2.1.14 with a local patch. So it *might* be that just updating mailman to 2.1.18-1 would clear up most issues. It would be very helpful if the list maintainer would comment. Whether other mail providers follow yahoo depends on how successful the policy change is in reducing spam and spear phishing attacks. When probably depends upon the speed with which the mailing list packages adapt to the change. Lots of mailing lists have subscribers who barely know how to use a computer. I doubt that those lists will tell their users to get another mail account. The first article I read about the change was by someone who maintained a church mailing list. He modified From: and blogged about the issue. That takes a bit more expertise than "get another mail account". Reg -------------------------------------------- On Wed, 5/14/14, Discussion list for OpenIndiana <[email protected]> wrote: Subject: Re: [OpenIndiana-discuss] "Discussion list for OpenIndiana" To: "Discussion list for OpenIndiana" <[email protected]> Date: Wednesday, May 14, 2014, 12:57 PM In regard to: Re: [OpenIndiana-discuss] "Discussion list for OpenIndiana",...: > The reason for the change is the yahoo DMARC policy change which results > in anyone using yahoo for mail to get bounced. So changing it back > excludes anyone using yahoo from participating. To which most experts say, "Tough. Use a different provider for mailing lists". > Every mailing list has > been similarly affected. It's just a matter of time before gmail and > others follow yahoo. Considering how badly this plays with mailing lists and how poorly it has been received, I'm not so certain that other big mailbox providers are going to be quick to do the same. Hiding the originating From: seems like a "cure" that's worse than the original problem. There can't be *that* many yahoo & AOL users on this list; send them a direct message, explaining the problem, and tell them they're being dropped from the list, but that they're encouraged to rejoin the list using an email address from a domain that doesn't use p=reject for DMARC. Tim -- Tim Mooney [email protected] Enterprise Computing & Infrastructure 701-231-1076 (Voice) Room 242-J6, Quentin Burdick Building 701-231-8541 (Fax) North Dakota State University, Fargo, ND 58105-5164 _______________________________________________ openindiana-discuss mailing list [email protected] http://openindiana.org/mailman/listinfo/openindiana-discuss _______________________________________________ openindiana-discuss mailing list [email protected] http://openindiana.org/mailman/listinfo/openindiana-discuss
