1 Topic by p.schumacher

  • p.schumacher
  • Member
  • Offline
  • Registered: 2018-02-04
  • Posts: 40

Topic: mlmmj + DMARC + rejects

==== Required information ====
- iRedMail version (check /etc/iredmail-release): 0.9.8
- Linux/BSD distribution name and version: Ubuntu 18.04 Server LTS
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): MySQL
- Web server (Apache or Nginx): Nginx
- Manage mail accounts with iRedAdmin-Pro? Yes
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====

mlmmj is a nice list tool, but it seems to miss some features.

If I run my DMARC rules with a "reject" policy, all mails from the mlmmj list are rejected by receiving mail servers which enforce DMARC rules. As it should be.

mlmmj is modifying  the headers - so they don't match anymore.

Mailman has options to fix this - are there any hidden settings for mlmmj to do the same?

Greetings,
Peter

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,088

Re: mlmmj + DMARC + rejects

- Could you show me your full DMARC DNS record?
- Email sent out by mlmmj will go through Amavisd and DKIM should be signed.

3 Reply by p.schumacher (edited by p.schumacher 2018-07-20 04:58:06)

  • p.schumacher
  • Member
  • Offline
  • Registered: 2018-02-04
  • Posts: 40

Re: mlmmj + DMARC + rejects

Here ist TXT record:
_DMARC.4d-consulting.de

TXT

v=DMARC1; p=reject; rua=mailto:p.schumacher@4d-consulting.de; ruf=mailto:p.schumacher@4d-consulting.de; fo=0; adkim=s; aspf=s; pct=100; rf=afrf; ri=86400; sp=reject

Apple, Yahoo and Google reject the mails because the orginal header of the mail is altered by mlmmj - and this messes up DKIM.

Apple looked at it and suggested to us a different list-mailer.

4 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,088

Re: mlmmj + DMARC + rejects

Wait a sec:

- Does email sent by mlmmj mailing list contain the DKIM header?
- Do you configure Amavisd and Postfix to integrate mlmmj by follow our tutorial?

Postfix integration: https://docs.iredmail.org/integration.m … ntegration
Amavisd integration: https://docs.iredmail.org/integration.m … ntegration


- Does file /var/vmail/mlmmj/<domain>/<list-name>/control/smtpport of your mlmmj mailing list exist? what's the content in this file?

5 Reply by p.schumacher

  • p.schumacher
  • Member
  • Offline
  • Registered: 2018-02-04
  • Posts: 40

Re: mlmmj + DMARC + rejects

ZhangHuangbin wrote:

- Do you configure Amavisd and Postfix to integrate mlmmj by follow our tutorial?

Postfix integration: https://docs.iredmail.org/integration.m … ntegration
Amavisd integration: https://docs.iredmail.org/integration.m … ntegration

sorry, I'm a little late...

* compared all the config files with the manual - everything is there


ZhangHuangbin wrote:

Does file /var/vmail/mlmmj/<domain>/<list-name>/control/smtpport of your mlmmj mailing list exist? what's the content in this file?.

Yes, port 10027

6 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,088

Re: mlmmj + DMARC + rejects

Please show me one sample email sent out by mlmmj, and what header do you expect to be added?

7 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,088

Re: mlmmj + DMARC + rejects

Dear Peter,

I sent you email moment ago, but your mail server rejected it with message: "554 mail server permanently rejected message (#5.3.0)".

Please help fix this rejection and mail me: zhb _at_ iredmail _dot_ org.

8 Reply by p.schumacher (edited by p.schumacher 2018-11-12 19:23:22)

  • p.schumacher
  • Member
  • Offline
  • Registered: 2018-02-04
  • Posts: 40

Re: mlmmj + DMARC + rejects

Oops. Done.