From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail-io0-x22f.google.com (mail-io0-x22f.google.com [IPv6:2607:f8b0:4001:c06::22f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by lists.bufferbloat.net (Postfix) with ESMTPS id BA4FF3B2AE for ; Mon, 3 Oct 2016 17:17:39 -0400 (EDT) Received: by mail-io0-x22f.google.com with SMTP id i202so53718032ioi.2 for ; Mon, 03 Oct 2016 14:17:39 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:references:in-reply-to:from:date:message-id:subject:to; bh=lWKPIah3fHcJWEli4nkYWxdh4aOMVaBc+7ZDwzHDxLE=; b=JGExtGQigc2YJ6ivjPfUkYCBCBez2UhBInzKMuwoZK11MKQk28dpLWJAKnayudg1z6 x7fSoi0r3TBZo5sQ2L1Yh5DtO8FZ2U+B3cTUPsKKQ3Sqj0uz4rPPBxlwE+lq3V/YKQIv r3GmBcC9jboSmyuryVqoStqVyrJG6fsaJsXL4x0Q8yQKwQARRYnzGSwYutD/40hHghqf vx8EtNZlxtaSw5c7lJpHwllxpaA9vNyS5a4fARj/jVgxF0k+FxVnCxeF3HUrnLt6XL2b PTm2EUl5IXkgmQRq9eqa1kHd2TgKilcThFHxLd5UZ3JLSHqc2f5kewU9EQwOXHmOoVZA lKqQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to; bh=lWKPIah3fHcJWEli4nkYWxdh4aOMVaBc+7ZDwzHDxLE=; b=hE9ClD+BpZvATR2O54y0tctiZ7bnfitHAfztbc7uVsSQqv3/hTs9QHbYwlKKpFWtOY 4NWCcAJ5XoPtg+vlAiy1Pp+DfBZE3xko4wrE5o430fgXUST55vQ/CibU0PO7LbsyVkYo +cCFWSx85jZnmlWIZRuFUDo7So0rGnwq7woldcT2mIntGskS34l4HUYg6RT7n6iNXJ6B 1mzE7AJhkwd0ygoHXhGiCMDoQCSUSOrj4UNlovcFG0PnoZo8fcwW8CTgxxCpoMNeRkE0 HJ2j+7JVQF8ayYJbR+o4U7R2+4jSOfZRtXt4RfIIWx7G93Uf5sN81h/MJdRmVGCsySsB iJoQ== X-Gm-Message-State: AA6/9RmE8NAPkbdvecxsklD9mGM8Sinw4lK0Bgs7ZCjjd22Du1tORoU3IQYDU29iISCEs+tweV5+W/oq6x7g2A== X-Received: by 10.107.134.98 with SMTP id i95mr828275iod.151.1475529459168; Mon, 03 Oct 2016 14:17:39 -0700 (PDT) MIME-Version: 1.0 References: <06273A79-CAEB-4981-9BEE-22939D333D66@gmail.com> <30DC0151-C918-4664-A1FE-9179E08DE833@gmail.com> <874m4xbyt4.fsf@toke.dk> <50625ff6-5baf-6c4b-6e1b-55d55a37c199@taht.net> In-Reply-To: From: Neil Shepperd Date: Mon, 03 Oct 2016 21:17:28 +0000 Message-ID: To: =?UTF-8?Q?Dave_T=C3=A4ht?= , cake@lists.bufferbloat.net Content-Type: multipart/alternative; boundary=001a113ec86a44faca053dfc79de Subject: Re: [Cake] cake for net-next 4.8 X-BeenThere: cake@lists.bufferbloat.net X-Mailman-Version: 2.1.20 Precedence: list List-Id: Cake - FQ_codel the next generation List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 03 Oct 2016 21:17:39 -0000 --001a113ec86a44faca053dfc79de Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Gmail spam team got back to me; they have apparently "fixed the problem", which I guess means messages here should stop being marked as spam soon. Because gmail's spam filters are top secret business, I couldn't tell you anything else :) On Fri, 30 Sep 2016 at 17:10 Dave T=C3=A4ht wrote: > > > On 9/30/16 1:37 PM, Neil Shepperd wrote: > > Disabling ipv6 (at least in the mail server, in outgoing direction) is > > probably the easiest option... > > It looks like the simplest thing I could do to allow inbound while > stopping outbound ipv6 would be to: > > /etc/postfix/main.cf: > smtp_bind_address6 =3D ::1 > > > > I see on most messages here DKIM-Signature headers apparently from > > gmail: "v=3D1; a=3Drsa-sha256; c=3Drelaxed/relaxed; d=3Dgmail.com > > ; s=3D20120113;". These signatures are failing becaus= e > > of the added message footer. No sign of a DKIM-Signature > > for lists.bufferbloat.net . You'd need to > > set that up in the list MTA. > > Honestly my "email-fu" has declined considerably in recent years. > Despite the apparent simplicity of this idea, my brain just crashed > multiple times on setting it up with postfix + mailman 2. > > And thank you for poking so deeply into this, I was A) really annoyed by > the bloat-list-as-spam thing and B) clueless. > > > On Fri, 30 Sep 2016 at 15:42 Dave T=C3=A4ht > > wrote: > > > > > > > > On 9/30/16 1:02 AM, Toke H=C3=B8iland-J=C3=B8rgensen wrote: > > > Neil Shepperd > > > writes: > > > > > >> I think I have now accumulated enough spam/nonspam classified > emails > > >> to make a statistically signification observation: it seems like > all > > >> emails classified as spam from these lists were send from ipv6: > > >> > > >> SPF: PASS with IP 2600:3c03:0:0:f03c:91ff:fe61:86ce > > >> > > >> All emails from bufferbloat.net lists > > are failing DKIM (because of the > > >> mailing list footer breaking the DKIM signature) which might be > worth > > >> fixing, and failing DMARC because all mailing lists fails DMARC > > >> (however google does not have a strict DMARC policy so that > shouldn't > > >> matter, I hope). > > >> > > >> By the way, it's not just you, either. I have emails from others > on > > >> these lists in my spam folder. > > >> > > >> The distinguishing factor seems to be whether the email was sent > from > > >> the lists.bufferbloat.net ipv6 > > address. Unless this address > > >> corresponds to some kind of tunnel broker possibly also used by > > >> spammers, I can only assume this is some kind of bug (after all, > it > > >> was spf validated so the address shouldn't matter at that point?= ). > > > > > > Indeed, gmail requires extra measures for IPv6: > > > https://support.google.com/mail/answer/81126 (scroll down to > > "Additional > > > guidelines for IPv6"). > > > > > > Fixing DKIM might be worthwhile :) > > > > But it passes the spf check?? And the reverse lookup is correct. > > > > How about I just disable ipv6? > > > > Have no idea why dkim doesn't work. > > > > > > > > -Toke > > > _______________________________________________ > > > Cake mailing list > > > Cake@lists.bufferbloat.net > > > https://lists.bufferbloat.net/listinfo/cake > > > > > _______________________________________________ > > Cake mailing list > > Cake@lists.bufferbloat.net > > https://lists.bufferbloat.net/listinfo/cake > > > --001a113ec86a44faca053dfc79de Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Gmail spam team got back to me; they have apparently "= ;fixed the problem", which I guess means messages here should stop bei= ng marked as spam soon. Because gmail's spam filters are top secret bus= iness, I couldn't tell you anything else :)

On Fri, 30 Sep 2016 at 17:10 Dave T=C3=A4ht <<= a href=3D"mailto:dave@taht.net">dave@taht.net> wrote:


On 9/30/16 1:37 PM, Neil Shepperd wrote:
> Disabling ipv6 (at least in the mail server, in outgoing direction) is=
> probably the easiest option...

It looks like the simplest thing I could do to allow inbound while
stopping outbound ipv6 would be to:

/etc/postfix/main.cf:
=C2=A0 =C2=A0 smtp_bind_address6 =3D ::1


> I see on most messages here DKIM-Signature headers apparently from
> gmail: "v=3D1; a=3Drsa-sha256; c=3Drelaxed/relaxed; d=3Dgmail.com > <= http://gmail.com>; s=3D20120113;". These signatures are failing= because
> of the added message footer. No sign of a DKIM-Signature
> for lists.bufferbloat.net <http://lists.bufferbloat.net>. You'd need to
> set that up in the list MTA.

Honestly my "email-fu" has declined considerably in recent years.=
Despite the apparent simplicity of this idea, my brain just crashed
multiple times on setting it up with postfix + mailman 2.

And thank you for poking so deeply into this, I was A) really annoyed by the bloat-list-as-spam thing and B) clueless.

> On Fri, 30 Sep 2016 at 15:42 Dave T=C3=A4ht <dave@taht.net
> <mailto:dave@tah= t.net>> wrote:
>
>
>
>=C2=A0 =C2=A0 =C2=A0On 9/30/16 1:02 AM, Toke H=C3=B8iland-J=C3=B8rgense= n wrote:
>=C2=A0 =C2=A0 =C2=A0> Neil Shepperd <nshepperd@gmail.com <mailto:nshepperd@gmail.com>&g= t;
>=C2=A0 =C2=A0 =C2=A0writes:
>=C2=A0 =C2=A0 =C2=A0>
>=C2=A0 =C2=A0 =C2=A0>> I think I have now accumulated enough spam= /nonspam classified emails
>=C2=A0 =C2=A0 =C2=A0>> to make a statistically signification obse= rvation: it seems like all
>=C2=A0 =C2=A0 =C2=A0>> emails classified as spam from these lists= were send from ipv6:
>=C2=A0 =C2=A0 =C2=A0>>
>=C2=A0 =C2=A0 =C2=A0>> SPF: PASS with IP 2600:3c03:0:0:f03c:91ff:= fe61:86ce
>=C2=A0 =C2=A0 =C2=A0>>
>=C2=A0 =C2=A0 =C2=A0>> All emails from bufferbloat.net <http://b= ufferbloat.net> lists
>=C2=A0 =C2=A0 =C2=A0are failing DKIM (because of the
>=C2=A0 =C2=A0 =C2=A0>> mailing list footer breaking the DKIM sign= ature) which might be worth
>=C2=A0 =C2=A0 =C2=A0>> fixing, and failing DMARC because all mail= ing lists fails DMARC
>=C2=A0 =C2=A0 =C2=A0>> (however google does not have a strict DMA= RC policy so that shouldn't
>=C2=A0 =C2=A0 =C2=A0>> matter, I hope).
>=C2=A0 =C2=A0 =C2=A0>>
>=C2=A0 =C2=A0 =C2=A0>> By the way, it's not just you, either.= I have emails from others on
>=C2=A0 =C2=A0 =C2=A0>> these lists in my spam folder.
>=C2=A0 =C2=A0 =C2=A0>>
>=C2=A0 =C2=A0 =C2=A0>> The distinguishing factor seems to be whet= her the email was sent from
>=C2=A0 =C2=A0 =C2=A0>> the lists.bufferbloat.net <ht= tp://lists.bufferbloat.net> ipv6
>=C2=A0 =C2=A0 =C2=A0address. Unless this address
>=C2=A0 =C2=A0 =C2=A0>> corresponds to some kind of tunnel broker = possibly also used by
>=C2=A0 =C2=A0 =C2=A0>> spammers, I can only assume this is some k= ind of bug (after all, it
>=C2=A0 =C2=A0 =C2=A0>> was spf validated so the address shouldn&#= 39;t matter at that point?).
>=C2=A0 =C2=A0 =C2=A0>
>=C2=A0 =C2=A0 =C2=A0> Indeed, gmail requires extra measures for IPv6= :
>=C2=A0 =C2=A0 =C2=A0> https://support.google.com/= mail/answer/81126 (scroll down to
>=C2=A0 =C2=A0 =C2=A0"Additional
>=C2=A0 =C2=A0 =C2=A0> guidelines for IPv6").
>=C2=A0 =C2=A0 =C2=A0>
>=C2=A0 =C2=A0 =C2=A0> Fixing DKIM might be worthwhile :)
>
>=C2=A0 =C2=A0 =C2=A0But it passes the spf check?? And the reverse looku= p is correct.
>
>=C2=A0 =C2=A0 =C2=A0How about I just disable ipv6?
>
>=C2=A0 =C2=A0 =C2=A0Have no idea why dkim doesn't work.
>
>=C2=A0 =C2=A0 =C2=A0>
>=C2=A0 =C2=A0 =C2=A0> -Toke
>=C2=A0 =C2=A0 =C2=A0> ______________________________________________= _
>=C2=A0 =C2=A0 =C2=A0> Cake mailing list
>=C2=A0 =C2=A0 =C2=A0> Cake@lists.bufferbloat.net <mailto:Cake@lists.bufferbloat.net= >
>=C2=A0 =C2=A0 =C2=A0> https://lists.bufferbloat.ne= t/listinfo/cake
>=C2=A0 =C2=A0 =C2=A0>
>=C2=A0 =C2=A0 =C2=A0_______________________________________________
>=C2=A0 =C2=A0 =C2=A0Cake mailing list
>=C2=A0 =C2=A0 =C2=A0Cake@lists.bufferbloat.net <mailto:Cake@lists.bufferbloat.net&= gt;
>=C2=A0 =C2=A0 =C2=A0https://lists.bufferbloat.net/lis= tinfo/cake
>
--001a113ec86a44faca053dfc79de--