<div dir="ltr">Grr, looks like things are still getting spam-marked for me. I'll have to reopen the report with gmail... In the mean time, I suppose we'll have to keep fiddling with DKIM or turn off ipv6 again.<div><br></div><div>Damnit, so close.<br><div class="gmail_extra"><br><div class="gmail_quote">On 4 October 2016 at 12:09, Dave Täht <span dir="ltr"><<a href="mailto:dave@taht.net" target="_blank">dave@taht.net</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class=""><br>
<br>
On 10/3/16 2:17 PM, Neil Shepperd wrote:<br>
> Gmail spam team got back to me; they have apparently "fixed the<br>
> problem", which I guess means messages here should stop being marked as<br>
> spam soon. Because gmail's spam filters are top secret business, I<br>
> couldn't tell you anything else :)<br>
<br>
</span>It is great to have friends (in places high and low). Thank you!<br>
<br>
That said, I almost, but not quite, got the dkim stuff working the other<br>
day - not that I can intuit that was the source of the problem!<br>
<span class=""><br>
><br>
> On Fri, 30 Sep 2016 at 17:10 Dave Täht <<a href="mailto:dave@taht.net">dave@taht.net</a><br>
</span><span class="">> <mailto:<a href="mailto:dave@taht.net">dave@taht.net</a>>> wrote:<br>
><br>
><br>
><br>
> On 9/30/16 1:37 PM, Neil Shepperd wrote:<br>
> > Disabling ipv6 (at least in the mail server, in outgoing direction) is<br>
> > probably the easiest option...<br>
><br>
> It looks like the simplest thing I could do to allow inbound while<br>
> stopping outbound ipv6 would be to:<br>
><br>
</span>> /etc/postfix/<a href="http://main.cf" rel="noreferrer" target="_blank">main.cf</a> <<a href="http://main.cf" rel="noreferrer" target="_blank">http://main.cf</a>>:<br>
<span class="">> smtp_bind_address6 = ::1<br>
><br>
><br>
> > I see on most messages here DKIM-Signature headers apparently from<br>
> > gmail: "v=1; a=rsa-sha256; c=relaxed/relaxed; d=<a href="http://gmail.com" rel="noreferrer" target="_blank">gmail.com</a><br>
> <<a href="http://gmail.com" rel="noreferrer" target="_blank">http://gmail.com</a>><br>
> > <<a href="http://gmail.com" rel="noreferrer" target="_blank">http://gmail.com</a>>; s=20120113;". These signatures are failing because<br>
> > of the added message footer. No sign of a DKIM-Signature<br>
> > for <a href="http://lists.bufferbloat.net" rel="noreferrer" target="_blank">lists.bufferbloat.net</a> <<a href="http://lists.bufferbloat.net" rel="noreferrer" target="_blank">http://lists.bufferbloat.net</a>><br>
> <<a href="http://lists.bufferbloat.net" rel="noreferrer" target="_blank">http://lists.bufferbloat.net</a>><wbr>. You'd need to<br>
> > set that up in the list MTA.<br>
><br>
> Honestly my "email-fu" has declined considerably in recent years.<br>
> Despite the apparent simplicity of this idea, my brain just crashed<br>
> multiple times on setting it up with postfix + mailman 2.<br>
><br>
> And thank you for poking so deeply into this, I was A) really annoyed by<br>
> the bloat-list-as-spam thing and B) clueless.<br>
><br>
> > On Fri, 30 Sep 2016 at 15:42 Dave Täht <<a href="mailto:dave@taht.net">dave@taht.net</a><br>
> <mailto:<a href="mailto:dave@taht.net">dave@taht.net</a>><br>
</span><span class="">> > <mailto:<a href="mailto:dave@taht.net">dave@taht.net</a> <mailto:<a href="mailto:dave@taht.net">dave@taht.net</a>>>> wrote:<br>
> ><br>
> ><br>
> ><br>
> > On 9/30/16 1:02 AM, Toke Høiland-Jørgensen wrote:<br>
> > > Neil Shepperd <<a href="mailto:nshepperd@gmail.com">nshepperd@gmail.com</a><br>
</span>> <mailto:<a href="mailto:nshepperd@gmail.com">nshepperd@gmail.com</a>> <mailto:<a href="mailto:nshepperd@gmail.com">nshepperd@gmail.com</a><br>
<div><div class="h5">> <mailto:<a href="mailto:nshepperd@gmail.com">nshepperd@gmail.com</a>>>><br>
> > writes:<br>
> > ><br>
> > >> I think I have now accumulated enough spam/nonspam<br>
> classified emails<br>
> > >> to make a statistically signification observation: it seems<br>
> like all<br>
> > >> emails classified as spam from these lists were send from ipv6:<br>
> > >><br>
> > >> SPF: PASS with IP 2600:3c03:0:0:f03c:91ff:fe61:<wbr>86ce<br>
> > >><br>
> > >> All emails from <a href="http://bufferbloat.net" rel="noreferrer" target="_blank">bufferbloat.net</a> <<a href="http://bufferbloat.net" rel="noreferrer" target="_blank">http://bufferbloat.net</a>><br>
> <<a href="http://bufferbloat.net" rel="noreferrer" target="_blank">http://bufferbloat.net</a>> lists<br>
> > are failing DKIM (because of the<br>
> > >> mailing list footer breaking the DKIM signature) which<br>
> might be worth<br>
> > >> fixing, and failing DMARC because all mailing lists fails DMARC<br>
> > >> (however google does not have a strict DMARC policy so that<br>
> shouldn't<br>
> > >> matter, I hope).<br>
> > >><br>
> > >> By the way, it's not just you, either. I have emails from<br>
> others on<br>
> > >> these lists in my spam folder.<br>
> > >><br>
> > >> The distinguishing factor seems to be whether the email was<br>
> sent from<br>
> > >> the <a href="http://lists.bufferbloat.net" rel="noreferrer" target="_blank">lists.bufferbloat.net</a> <<a href="http://lists.bufferbloat.net" rel="noreferrer" target="_blank">http://lists.bufferbloat.net</a>><br>
> <<a href="http://lists.bufferbloat.net" rel="noreferrer" target="_blank">http://lists.bufferbloat.net</a>> ipv6<br>
> > address. Unless this address<br>
> > >> corresponds to some kind of tunnel broker possibly also used by<br>
> > >> spammers, I can only assume this is some kind of bug (after<br>
> all, it<br>
> > >> was spf validated so the address shouldn't matter at that<br>
> point?).<br>
> > ><br>
> > > Indeed, gmail requires extra measures for IPv6:<br>
> > > <a href="https://support.google.com/mail/answer/81126" rel="noreferrer" target="_blank">https://support.google.com/<wbr>mail/answer/81126</a> (scroll down to<br>
> > "Additional<br>
> > > guidelines for IPv6").<br>
> > ><br>
> > > Fixing DKIM might be worthwhile :)<br>
> ><br>
> > But it passes the spf check?? And the reverse lookup is correct.<br>
> ><br>
> > How about I just disable ipv6?<br>
> ><br>
> > Have no idea why dkim doesn't work.<br>
> ><br>
> > ><br>
> > > -Toke<br>
> > > ______________________________<wbr>_________________<br>
> > > Cake mailing list<br>
> > > <a href="mailto:Cake@lists.bufferbloat.net">Cake@lists.bufferbloat.net</a><br>
> <mailto:<a href="mailto:Cake@lists.bufferbloat.net">Cake@lists.<wbr>bufferbloat.net</a>><br>
</div></div>> <mailto:<a href="mailto:Cake@lists.bufferbloat.net">Cake@lists.<wbr>bufferbloat.net</a> <mailto:<a href="mailto:Cake@lists.bufferbloat.net">Cake@lists.<wbr>bufferbloat.net</a>>><br>
<span class="">> > > <a href="https://lists.bufferbloat.net/listinfo/cake" rel="noreferrer" target="_blank">https://lists.bufferbloat.net/<wbr>listinfo/cake</a><br>
> > ><br>
> > ______________________________<wbr>_________________<br>
> > Cake mailing list<br>
> > <a href="mailto:Cake@lists.bufferbloat.net">Cake@lists.bufferbloat.net</a> <mailto:<a href="mailto:Cake@lists.bufferbloat.net">Cake@lists.<wbr>bufferbloat.net</a>><br>
</span>> <mailto:<a href="mailto:Cake@lists.bufferbloat.net">Cake@lists.<wbr>bufferbloat.net</a> <mailto:<a href="mailto:Cake@lists.bufferbloat.net">Cake@lists.<wbr>bufferbloat.net</a>>><br>
> > <a href="https://lists.bufferbloat.net/listinfo/cake" rel="noreferrer" target="_blank">https://lists.bufferbloat.net/<wbr>listinfo/cake</a><br>
> ><br>
><br>
</blockquote></div><br></div></div></div>