Mail to addreses with strict DMARC enforcement via centos-devel@lists.centos.org are getting Spam-filtered. Example headers:
ARC-Seal: i=1; s=201903; d=dkim.mimecast.com; t=1750233470; a=rsa-sha256; cv=none; b=o9L9pvD9H/DutjYVMXVkgE8+kBgRs+F+TlUxYySr622yYGU5GEZhIsX8aqGRA422Kuzev2 cuFTFb1BQrROagLyMoeXMlZs60eO0tiWwKOdCI5E8pahhGFpAy2F7cxQlLXxlvmLfkuWi1 0Nq1hwafVMkfHowx+Ans1h+xviBcSCg0O1sQ7JGSis0An3Us3ztoVVaY+UQgWzZDrLHy2n WI3HF3tBFYGF5kOdKeebgJA1ezcltqDMzktoYN7HnLENhqaf8BwKzroDnnVmRl9UFe4blA tHT5ZwBi9XJi0FWZygZcjYKF7/O3+Z9F9zR2pH6CWnsgbtpfgLMPpM4gzBl3EA== ARC-Authentication-Results: i=1; relay.mimecast.com; dkim=none; dmarc=fail reason="SPF not aligned (relaxed), No valid DKIM" header.from=hotmail.com (policy=none); spf=pass (relay.mimecast.com: domain of devel-bounces@lists.centos.org designates 8.43.84.214 as permitted sender) smtp.mailfrom=devel-bounces@lists.centos.org Authentication-Results: relay.mimecast.com; dkim=none; dmarc=fail reason="SPF not aligned (relaxed), No valid DKIM" header.from=hotmail.com (policy=none); spf=pass (relay.mimecast.com: domain of devel-bounces@lists.centos.org designates 8.43.84.214 as permitted sender) smtp.mailfrom=devel-bounces@lists.centos.org Received: from mail.centos.org (mmx1.rdu2.centos.org [8.43.84.214]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.3, cipher=TLS_AES_256_GCM_SHA384) id us-mta-522-eYb6S7ZrPM-G5qE-KELCdg-1; Wed, 18 Jun 2025 03:57:46 -0400
Metadata Update from @arrfab: - Issue tagged with: feature-request, high-gain, high-trouble, investigation
We are full focused on the DC move operation but can you elaborate on this ? Can you point to specific mail that was considered as spam by Red Hat ? Based on just log above, it seems to complain about a mail from hotmail.com not following DKIM and SPF. For CentOS we do have SPF but mailman3 (and lists in general) have issue as they send "on behalf" of senders, which breaks SPF and Dkim etc ... For that reason, mailman3 implements solutions, like munging From: in email (see https://docs.mailman3.org/projects/mailman/en/latest/src/mailman/handlers/docs/dmarc-mitigations.html) That's enabled on devel list so I'd like to see full example and also see why Red Hat is refusing mails ..
munging
PS : browsing archives and the mail I sent to devel list showed up in my RH inbox but other mails weren't .. so I confirm that the way Red Hat implemented dmarc is confusing
Due to centos infra tracker migration (https://lists.centos.org/hyperkitty/list/devel@lists.centos.org/thread/V3ZLBYFHMWSZFXOVGVU7R6P2X6ELGY5V/), this ticket is now closed but you can find corresponding ticket open at https://gitlab.com/CentOS/infra/tracker/-/issues/1710 Metadata for this ticket is imported in new gitlab tracker but not ownership, so feel free to visit migrated ticket to subscribe and get status update.
Metadata Update from @arrfab: - Issue close_status updated to: Ticket moved to Gitlab tracker - Issue status updated to: Closed (was: Open)
Log in to comment on this ticket.