<div dir="ltr">Gmail spam team got back to me; they have apparently "fixed the problem", which I guess means messages here should stop being marked as spam soon. Because gmail's spam filters are top secret business, I couldn't tell you anything else :)</div><br><div class="gmail_quote"><div dir="ltr">On Fri, 30 Sep 2016 at 17:10 Dave Täht <<a href="mailto:dave@taht.net">dave@taht.net</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><br>
<br>
On 9/30/16 1:37 PM, Neil Shepperd wrote:<br>
> Disabling ipv6 (at least in the mail server, in outgoing direction) is<br>
> probably the easiest option...<br>
<br>
It looks like the simplest thing I could do to allow inbound while<br>
stopping outbound ipv6 would be to:<br>
<br>
/etc/postfix/<a href="http://main.cf" rel="noreferrer" target="_blank">main.cf</a>:<br>
smtp_bind_address6 = ::1<br>
<br>
<br>
> I see on most messages here DKIM-Signature headers apparently from<br>
> gmail: "v=1; a=rsa-sha256; c=relaxed/relaxed; d=<a href="http://gmail.com" rel="noreferrer" target="_blank">gmail.com</a><br>
> <<a href="http://gmail.com" rel="noreferrer" target="_blank">http://gmail.com</a>>; s=20120113;". These signatures are failing because<br>
> of the added message footer. No sign of a DKIM-Signature<br>
> for <a href="http://lists.bufferbloat.net" rel="noreferrer" target="_blank">lists.bufferbloat.net</a> <<a href="http://lists.bufferbloat.net" rel="noreferrer" target="_blank">http://lists.bufferbloat.net</a>>. You'd need to<br>
> set that up in the list MTA.<br>
<br>
Honestly my "email-fu" has declined considerably in recent years.<br>
Despite the apparent simplicity of this idea, my brain just crashed<br>
multiple times on setting it up with postfix + mailman 2.<br>
<br>
And thank you for poking so deeply into this, I was A) really annoyed by<br>
the bloat-list-as-spam thing and B) clueless.<br>
<br>
> On Fri, 30 Sep 2016 at 15:42 Dave Täht <<a href="mailto:dave@taht.net" target="_blank">dave@taht.net</a><br>
> <mailto:<a href="mailto:dave@taht.net" target="_blank">dave@taht.net</a>>> wrote:<br>
><br>
><br>
><br>
> On 9/30/16 1:02 AM, Toke Høiland-Jørgensen wrote:<br>
> > Neil Shepperd <<a href="mailto:nshepperd@gmail.com" target="_blank">nshepperd@gmail.com</a> <mailto:<a href="mailto:nshepperd@gmail.com" target="_blank">nshepperd@gmail.com</a>>><br>
> writes:<br>
> ><br>
> >> I think I have now accumulated enough spam/nonspam classified emails<br>
> >> to make a statistically signification observation: it seems like all<br>
> >> emails classified as spam from these lists were send from ipv6:<br>
> >><br>
> >> SPF: PASS with IP 2600:3c03:0:0:f03c:91ff:fe61:86ce<br>
> >><br>
> >> All emails from <a href="http://bufferbloat.net" rel="noreferrer" target="_blank">bufferbloat.net</a> <<a href="http://bufferbloat.net" rel="noreferrer" target="_blank">http://bufferbloat.net</a>> lists<br>
> are failing DKIM (because of the<br>
> >> mailing list footer breaking the DKIM signature) which might be worth<br>
> >> fixing, and failing DMARC because all mailing lists fails DMARC<br>
> >> (however google does not have a strict DMARC policy so that shouldn't<br>
> >> matter, I hope).<br>
> >><br>
> >> By the way, it's not just you, either. I have emails from others on<br>
> >> these lists in my spam folder.<br>
> >><br>
> >> The distinguishing factor seems to be whether the email was sent from<br>
> >> the <a href="http://lists.bufferbloat.net" rel="noreferrer" target="_blank">lists.bufferbloat.net</a> <<a href="http://lists.bufferbloat.net" rel="noreferrer" target="_blank">http://lists.bufferbloat.net</a>> ipv6<br>
> address. Unless this address<br>
> >> corresponds to some kind of tunnel broker possibly also used by<br>
> >> spammers, I can only assume this is some kind of bug (after all, it<br>
> >> was spf validated so the address shouldn't matter at that point?).<br>
> ><br>
> > Indeed, gmail requires extra measures for IPv6:<br>
> > <a href="https://support.google.com/mail/answer/81126" rel="noreferrer" target="_blank">https://support.google.com/mail/answer/81126</a> (scroll down to<br>
> "Additional<br>
> > guidelines for IPv6").<br>
> ><br>
> > Fixing DKIM might be worthwhile :)<br>
><br>
> But it passes the spf check?? And the reverse lookup is correct.<br>
><br>
> How about I just disable ipv6?<br>
><br>
> Have no idea why dkim doesn't work.<br>
><br>
> ><br>
> > -Toke<br>
> > _______________________________________________<br>
> > Cake mailing list<br>
> > <a href="mailto:Cake@lists.bufferbloat.net" target="_blank">Cake@lists.bufferbloat.net</a> <mailto:<a href="mailto:Cake@lists.bufferbloat.net" target="_blank">Cake@lists.bufferbloat.net</a>><br>
> > <a href="https://lists.bufferbloat.net/listinfo/cake" rel="noreferrer" target="_blank">https://lists.bufferbloat.net/listinfo/cake</a><br>
> ><br>
> _______________________________________________<br>
> Cake mailing list<br>
> <a href="mailto:Cake@lists.bufferbloat.net" target="_blank">Cake@lists.bufferbloat.net</a> <mailto:<a href="mailto:Cake@lists.bufferbloat.net" target="_blank">Cake@lists.bufferbloat.net</a>><br>
> <a href="https://lists.bufferbloat.net/listinfo/cake" rel="noreferrer" target="_blank">https://lists.bufferbloat.net/listinfo/cake</a><br>
><br>
</blockquote></div>