[SAC] [OSGeo] #2152: Mailman: mass "Bounce action notification" ongoing

[OSGeo]

#2152: Mailman: mass "Bounce action notification" ongoing
---------------------------+---------------------------------------
 Reporter:  neteler        |       Owner:  sac@…
     Type:  task           |      Status:  new
 Priority:  blocker        |   Milestone:  Sysadmin Contract 2018-I
Component:  Systems Admin  |  Resolution:
 Keywords:                 |
---------------------------+---------------------------------------

Comment (by neteler):

 As per IRC chat with !TemptorSent:

 <!TemptorSent> I think what's happening is that mailman is resending
 messages with the id of the sender, which is getting blocked because of
 DKIM/DMARC (yahoo.com.br is known for spammers), which is then causing a
 bounce to every recipient it tries sending to.

 <!TemptorSent> This may be an issue with the way mailman handles rewriting
 author lines.

 <!TemptorSent> The questionable domain showing up in the From or From:
 line are likely the trigger.

 Example copied here for reference:

 {{{

 ---------- Forwarded message ----------
 From: Mail Delivery System <MAILER-DAEMON at osgeo6.osgeo.osuosl.org>
 To: grass-user-bounces at lists.osgeo.org
 Cc:
 Bcc:
 Date: Mon, 16 Apr 2018 06:33:04 -0700 (PDT)
 Subject: Undelivered Mail Returned to Sender
 This is the mail system at host lists.osgeo.org.

 I'm sorry to have to inform you that your message could not
 be delivered to one or more recipients. It's attached below.

 For further assistance, please send mail to postmaster.

 If you do so, please include this problem report. You can
 delete your own text from the attached returned message.

                    The mail system

 <neteler.osgeo at gmail.com> (expanded from <neteler at osgeo.org>): host
     gmail-smtp-in.l.google.com[74.125.197.26] said: 550-5.7.1
 Unauthenticated
     email from yahoo.com.br is not accepted due to 550-5.7.1 domain's
 DMARC
     policy. Please contact the administrator of 550-5.7.1 yahoo.com.br
 domain
     if this was a legitimate mail. Please visit 550-5.7.1
     https://support.google.com/mail/answer/2451690 to learn about the 550
 5.7.1
     DMARC initiative. e6si10463926pfn.174 - gsmtp (in reply to end of DATA
     command)

 Final-Recipient: rfc822; neteler.osgeo at gmail.com
 Original-Recipient: rfc822;neteler at osgeo.org
 Action: failed
 Status: 5.7.1
 Remote-MTA: dns; gmail-smtp-in.l.google.com
 Diagnostic-Code: smtp; 550-5.7.1 Unauthenticated email from yahoo.com.br
 is not
     accepted due to 550-5.7.1 domain's DMARC policy. Please contact the
     administrator of 550-5.7.1 yahoo.com.br domain if this was a
 legitimate
     mail. Please visit 550-5.7.1
     https://support.google.com/mail/answer/2451690 to learn about the 550
 5.7.1
     DMARC initiative. e6si10463926pfn.174 - gsmtp
 }}}

 Triggering email (which does not contain any spam!):

 https://lists.osgeo.org/pipermail/grass-user/2018-April/078097.html

-- 
Ticket URL: <https://trac.osgeo.org/osgeo/ticket/2152#comment:2>
OSGeo <http://www.osgeo.org/>
OSGeo committee and general foundation issue tracker.