From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail2.tohojo.dk (mail2.tohojo.dk [77.235.48.147]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by lists.bufferbloat.net (Postfix) with ESMTPS id B61373B25E for ; Fri, 30 Sep 2016 04:02:23 -0400 (EDT) X-Virus-Scanned: amavisd-new at mail2.tohojo.dk DKIM-Filter: OpenDKIM Filter v2.10.3 mail2.tohojo.dk DBE0E41622 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=toke.dk; s=201310; t=1475222536; bh=sxanvTfYiYJfXvfVh+CE+iGqhOPNEVPv8e+/o5cKiSk=; h=From:To:Cc:Subject:References:Date:In-Reply-To:From; b=hywL3ame2YHUSqsT99WKrvTBZNzgoUzYjjjFUpuOU02SkYfdL7JOjKPmUzFJe3THW QDTPrAXK4vyzI3LgS4mu5bqCKqz2O3R4/3rB4Gn6XBrx5yphoWAlKqBBXtF05H7XUB Ajch+zP/o7u4Mfh3hZVZJZAv4bfOl/81ied9FH+c= Sender: toke@toke.dk Received: by alrua-karlstad.karlstad.toke.dk (Postfix, from userid 1000) id 8CE74868E9B; Fri, 30 Sep 2016 10:02:15 +0200 (CEST) From: =?utf-8?Q?Toke_H=C3=B8iland-J=C3=B8rgensen?= To: Neil Shepperd Cc: Jonathan Morton , Dave Taht , cake@lists.bufferbloat.net References: <06273A79-CAEB-4981-9BEE-22939D333D66@gmail.com> <30DC0151-C918-4664-A1FE-9179E08DE833@gmail.com> Date: Fri, 30 Sep 2016 10:02:15 +0200 In-Reply-To: (Neil Shepperd's message of "Thu, 29 Sep 2016 23:22:23 +0000") X-Clacks-Overhead: GNU Terry Pratchett Message-ID: <874m4xbyt4.fsf@toke.dk> MIME-Version: 1.0 Content-Type: text/plain Subject: Re: [Cake] cake for net-next 4.8 X-BeenThere: cake@lists.bufferbloat.net X-Mailman-Version: 2.1.20 Precedence: list List-Id: Cake - FQ_codel the next generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 30 Sep 2016 08:02:23 -0000 Neil Shepperd writes: > I think I have now accumulated enough spam/nonspam classified emails > to make a statistically signification observation: it seems like all > emails classified as spam from these lists were send from ipv6: > > SPF: PASS with IP 2600:3c03:0:0:f03c:91ff:fe61:86ce > > All emails from bufferbloat.net lists are failing DKIM (because of the > mailing list footer breaking the DKIM signature) which might be worth > fixing, and failing DMARC because all mailing lists fails DMARC > (however google does not have a strict DMARC policy so that shouldn't > matter, I hope). > > By the way, it's not just you, either. I have emails from others on > these lists in my spam folder. > > The distinguishing factor seems to be whether the email was sent from > the lists.bufferbloat.net ipv6 address. Unless this address > corresponds to some kind of tunnel broker possibly also used by > spammers, I can only assume this is some kind of bug (after all, it > was spf validated so the address shouldn't matter at that point?). Indeed, gmail requires extra measures for IPv6: https://support.google.com/mail/answer/81126 (scroll down to "Additional guidelines for IPv6"). Fixing DKIM might be worthwhile :) -Toke