Vincent DEFERT <20.100%defert.com@localhost> writes: > I'm receiving DMARC reports such as the one below. The 199.233.217.200 > source_ip points at mail.netbsd.org. Presumably you have configured your own domain for DMARC/DKIM/SPF. > My understanding is that when NetBSD's mailing-list software forwards > my posts to other subscribers, it keeps my email as sender address > instead of replacing it with netbsd-users%netbsd.org@localhost. > And because mail.netbsd.org is not listed in my SPF record (of > course), those forwarded emails are considered as spam. > > Am I correct? No. The From: remains you (as it should) and the MAIL FROM (aka Return-Path:) is set to a NetBSD.org address, so that bounces go to the list software, not the author. SPF is required to check Return-Path: rather than From:. I suggest you read this in its entirety, but see especially 1.1.3, 2.3, 2.4, 11.2: https://tools.ietf.org/html/rfc7208 Your message (that I am replying to) arrived at my server and passed both SPF and DKIM validation. It could be that some validators are not doing SPF correctly. I note that in your report there also seem to be DKIM failures. But your message and Ottavio's both passed DKIM at my verifier. Are you finding that every DMARC verifier fails? Or just some?
Attachment:
signature.asc
Description: PGP signature