From: Alessandro Di Federico via <qemu-devel@nongnu.org>
To: "Philippe Mathieu-Daudé via" <qemu-devel@nongnu.org>,
"Philippe Mathieu-Daudé" <f4bug@amsat.org>,
"Alex Bennée" <alex.bennee@linaro.org>
Cc: "Mark Cave-Ayland" <mark.cave-ayland@ilande.co.uk>,
"Ross Lagerwall" <ross.lagerwall@citrix.com>,
"Stefano Stabellini" <sstabellini@kernel.org>,
"Cédric Le Goater" <clg@kaod.org>,
"Ed Maste" <emaste@freebsd.org>, "Thomas Huth" <thuth@redhat.com>,
"Michael Tokarev" <mjt@tls.msk.ru>,
"Daniel P . Berrangé" <berrange@redhat.com>,
"Li-Wen Hsu" <lwhsu@freebsd.org>,
"Stefan Hajnoczi" <stefanha@redhat.com>,
"Xiang Chen" <chenxiang66@hisilicon.com>,
"Jonathan Cameron" <Jonathan.Cameron@Huawei.com>,
Longpeng <longpeng2@huawei.com>,
"Yifei Jiang" <jiangyifei@huawei.com>,
"Vasilev Oleg" <vasilev.oleg@huawei.com>,
"Anton Johansson" <anjo@rev.ng>,
"Michael Roth" <michael.roth@amd.com>
Subject: Re: [PATCH v6 0/7] tests: Refresh lcitool submodule & remove libxml2
Date: Mon, 31 Jan 2022 08:04:59 +0100 [thread overview]
Message-ID: <20220131080459.456a0b55@orange> (raw)
In-Reply-To: <c1dcf128-84e8-a3ce-8b9f-f0a409b34b00@amsat.org>
On Tue, 25 Jan 2022 11:59:38 +0100
Philippe Mathieu-Daudé via <qemu-devel@nongnu.org> wrote:
> I'm seeing the same issue with these domains since mid december:
>
> ...
> - rev.ng
>
> ...
> https://lore.kernel.org/qemu-devel/20220105185720.0d4fc159@orange/
> ...
I've tried to look into this and it looks like our set up should be OK.
We enabled SPF (i.e., a rule stating that only our mailserver can send
e-mail with our domain in "From:") and DKIM (i.e., our mailserver signs
certain portions of the e-mail). We also enabled DMARC which
coordinates the two.
Now, as far as I understand, mailing lists can either rewrite the
"From" header (as qemu-devel does) or leave it as it is. In the latter
situation, SPF will fail but DMARC should instruct MTAs to check
DKIM, and that should pass.
https://begriffs.com/posts/2018-09-18-dmarc-mailing-list.html
https://dmarc.org/wiki/FAQ#I_operate_a_mailing_list_and_I_want_to_interoperate_with_DMARC.2C_what_should_I_do.3F
DKIM signature can be corrupted in case the mailing list tampers with
the subject or the body of the e-mail, but this doesn't seem to be the
case: I've tried to manually verify the DKIM signature of the same
e-mail that I got both from the mailing list and directly from the
sender (I was in Cc), and they both verify correctly.
tl;dr I *think* rewriting the From header should not be necessary for
our domain.
If you guys think this is not the case and there's something we can do
to improve the situation (other than adding gmail.com to our SPF
record), let me know.
--
Alessandro Di Federico
rev.ng Labs
next prev parent reply other threads:[~2022-01-31 7:35 UTC|newest]
Thread overview: 16+ messages / expand[flat|nested] mbox.gz Atom feed top
2022-01-21 15:41 [PATCH v6 0/7] tests: Refresh lcitool submodule & remove libxml2 Philippe Mathieu-Daudé via
2022-01-21 15:41 ` [PATCH v6 1/7] MAINTAINERS: Cover lcitool submodule with build test / automation Philippe Mathieu-Daudé via
2022-01-21 15:41 ` [PATCH v6 2/7] gitmodules: Correct libvirt-ci submodule URL Philippe Mathieu-Daudé via
2022-01-21 15:41 ` [PATCH v6 3/7] tests/lcitool: Include local qemu.yml when refreshing cirrus-ci files Philippe Mathieu-Daudé via
2022-01-21 15:41 ` [PATCH v6 4/7] drop libxml2 checks since libxml is not actually used (for parallels) Philippe Mathieu-Daudé via
2022-01-21 15:41 ` [PATCH v6 5/7] tests/lcitool: Refresh submodule and remove libxml2 Philippe Mathieu-Daudé via
2022-01-21 15:41 ` [PATCH v6 6/7] tests: Manually remove libxml2 on MSYS2 runners Philippe Mathieu-Daudé via
2022-01-21 15:41 ` [PATCH v6 7/7] tests/lcitool: Install libibumad to cover RDMA on Debian based distros Philippe Mathieu-Daudé via
2022-01-24 9:16 ` [PATCH v6 0/7] tests: Refresh lcitool submodule & remove libxml2 Alex Bennée
2022-01-24 10:55 ` Alex Bennée
2022-01-24 18:29 ` Philippe Mathieu-Daudé via
2022-01-24 19:16 ` Alex Bennée
2022-01-24 19:33 ` Philippe Mathieu-Daudé via
2022-01-25 10:59 ` Philippe Mathieu-Daudé via
2022-01-31 7:04 ` Alessandro Di Federico via [this message]
2022-01-26 7:38 ` Mark Cave-Ayland
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20220131080459.456a0b55@orange \
--to=qemu-devel@nongnu.org \
--cc=Jonathan.Cameron@Huawei.com \
--cc=ale@rev.ng \
--cc=alex.bennee@linaro.org \
--cc=anjo@rev.ng \
--cc=berrange@redhat.com \
--cc=chenxiang66@hisilicon.com \
--cc=clg@kaod.org \
--cc=emaste@freebsd.org \
--cc=f4bug@amsat.org \
--cc=jiangyifei@huawei.com \
--cc=longpeng2@huawei.com \
--cc=lwhsu@freebsd.org \
--cc=mark.cave-ayland@ilande.co.uk \
--cc=michael.roth@amd.com \
--cc=mjt@tls.msk.ru \
--cc=ross.lagerwall@citrix.com \
--cc=sstabellini@kernel.org \
--cc=stefanha@redhat.com \
--cc=thuth@redhat.com \
--cc=vasilev.oleg@huawei.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).