On 2019-09-17 09:06, Miroslav Geisselreiter wrote: > Hi guys, > > when I send e-mails to CentOS mailing list <centos at centos.org>, I > received DMARC / DKIM failure reports. Is it possible to solve this > problem and if so how? > That is why DMARC took 10 years of heated discussions, before it was actually implemented - in first place by big boys who will never hear/listen. DMARC breaks mail forwarding. Period. Breaks normal way mail lists were operating, but mail lists found work around: I maintain mail lists for the department, mailman is mail list server we use. There is setting: Replace the From: if set to "Munge from" then mail list will replace sender with mail list itself and it will appear as send by ... through mail list. DMARC enforcing folks/servers will be happy. Just my $0.02 Valeri > This is the first report: > > > This is an email abuse report for an email message received from IP > 208.100.23.70 on Tue, 17 Sep 2019 15:56:25 +0200. > The message below did not meet the sending domain's DMARC policy. > For more information about this format please > seehttp://tools.ietf.org/html/rfc6591 . > > Feedback-Type: auth-failure > User-Agent: Lua/1.0 > Version: 1.0 > Original-Mail-From:centos-bounces at centos.org > Original-Rcpt-To:obodor at vub.sk > Arrival-Date: Tue, 17 Sep 2019 15:56:25 +0200 > Message-ID:<5502e8ac-6b01-18dd-e028-7d2dd666063b at intar.cz> > Authentication-Results: dmarc=fail (p=none, dis=none) header.from=intar.cz > Source-IP: 208.100.23.70 > Delivery-Result: smg-policy-action > Auth-Failure: dmarc > Reported-Domain: intar.cz > > ------------ > This is the seconf report: > > This is an authentication failure report for an email message received > from IP > 208.100.23.70 on Tue, 17 Sep 2019 15:56:32 +0200 (CEST). > > > > Feedback-Type: auth-failure > Version: 1 > User-Agent: OpenDMARC-Filter/1.3.2 > Auth-Failure: dmarc > Authentication-Results: mx.bitactive.com; dmarc=fail header.from=intar.cz > Original-Envelope-Id: 46Xl5X0Ss6z1ltXM > Original-Mail-From:centos-bounces at centos.org > Source-IP: 208.100.23.70 (mail.centos.org) > Reported-Domain: intar.cz > > > > Authentication-Results: mx.bitactive.com; > dkim=fail reason="signature verification failed" (1024-bit key) > header.d=intar.czheader.i=@intar.cz header.b="rSnG4eyi" > Received: from mail.centos.org (mail.centos.org [208.100.23.70]) > (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) > (No client certificate requested) > by mx.bitactive.com (Postfix) with ESMTPS id 46Xl5X0Ss6z1ltXM > for<mwanat at forall.pl>; Tue, 17 Sep 2019 15:56:32 +0200 (CEST) > Received: from mail.centos.org (localhost [IPv6:::1]) > by mail.centos.org (Postfix) with ESMTP id 011EE3C1F16; > Tue, 17 Sep 2019 13:56:03 +0000 (UTC) > X-Original-To:centos at centos.org > Delivered-To:centos at centos.org > Received-SPF: Pass (sender SPF authorized) identity=mailfrom; > client-ip=81.19.4.73; helo=nirvana.intar.cz;envelope-from=mg at intar.cz; > receiver=centos at centos.org Received: from nirvana.intar.cz > (nirvana.intar.cz [81.19.4.73]) > by mail.centos.org (Postfix) with ESMTPS id 640643C1F0F > for<centos at centos.org>; Tue, 17 Sep 2019 13:55:59 +0000 (UTC) > Received: from larix.intarnet.cz (larix.intarnet.cz [192.168.1.53]) > by nirvana.intar.cz (Postfix) with ESMTPS id 74992C045CD1; > Tue, 17 Sep 2019 15:55:57 +0200 (CEST) > Received: from [192.168.1.176] (nirvana.intar.cz [81.19.4.73]) > by larix.intarnet.cz (Postfix) with ESMTPSA id 5EB62104F460; > Tue, 17 Sep 2019 15:55:57 +0200 (CEST) > DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=intar.cz; s=larix; > t=1568728557; bh=ezgga1YmsO9WxPgAc+7ouaZ9HJlG9XkA8LJjbiJd0yA=; > h=Subject:To:References:From:Date:In-Reply-To; > b=rSnG4eyiHg6tTDdBdCJyp1/ACUczgG+9usycftG3BMz1EwN0zPMPyo0gSkpvxwJUf > aM/jvd/gzFJVz7Z6MEw1A9iCE0ZzJy931WvXG+rIJR+Set5hb3fMpu1PgaOz1MIYTF > 7Z24H3X1KwUPof1RaKHrFQLYFbr011IbEwz613Xo= > To: CentOS mailing list<centos at centos.org>, > Mauricio Tavares<raubvogel at gmail.com> > References:<b3f926b0-711f-4a32-4a61-644e707a8db8 at intar.cz> > <CAHEKYV42BVbAiPmCPnDPhQm53=+t6PVpjheXvjEY535kHFttSg at mail.gmail.com> > <ea092741-5941-c49d-7fe2-b4e8df9944ed at intar.cz> > <CAHEKYV5T8UJNB-PVoj=Aujje3MjN-HiAxKp9kcB24ZK6z8d2Kg at mail.gmail.com> > From: Miroslav Geisselreiter<mg at intar.cz> > Organization: INTAR a.s. > Message-ID:<5502e8ac-6b01-18dd-e028-7d2dd666063b at intar.cz> > Date: Tue, 17 Sep 2019 15:55:57 +0200 > User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 > Firefox/52.0 SeaMonkey/2.49.4 > MIME-Version: 1.0 > In-Reply-To:<CAHEKYV5T8UJNB-PVoj=Aujje3MjN-HiAxKp9kcB24ZK6z8d2Kg at mail.gmail.com> > > Subject: Re: [CentOS] CentOS7 sometimes don't detect NIC after reboot > X-BeenThere:centos at centos.org > X-Mailman-Version: 2.1.15 > Precedence: list > List-Id: CentOS mailing list <centos.centos.org> > List-Unsubscribe:<https://lists.centos.org/mailman/options/centos>, > <mailto:centos-request at centos.org?subject=unsubscribe> > List-Archive:<http://lists.centos.org/pipermail/centos/> > List-Post:<mailto:centos at centos.org> > List-Help:<mailto:centos-request at centos.org?subject=help> > List-Subscribe:<https://lists.centos.org/mailman/listinfo/centos>, > <mailto:centos-request at centos.org?subject=subscribe> > Reply-To: CentOS mailing list<centos at centos.org> > Content-Transfer-Encoding: base64 > Content-Type: text/plain; charset="utf-8"; Format="flowed" > Errors-To:centos-bounces at centos.org > Sender: "CentOS"<centos-bounces at centos.org> > > > > _______________________________________________ > CentOS mailing list > CentOS at centos.org > https://lists.centos.org/mailman/listinfo/centos -- ++++++++++++++++++++++++++++++++++++++++ Valeri Galtsev Sr System Administrator Department of Astronomy and Astrophysics Kavli Institute for Cosmological Physics University of Chicago Phone: 773-702-4247 ++++++++++++++++++++++++++++++++++++++++