Home / server / Questions / 340584
In Process
Ode
Asked: 2011-12-14 11:09:38 +0800 CST

Mailman "from" spoofing

  • 772

It seems mailman, by default, spoofs its outgoing message with the "from" address of the person who posted the message. The envelope mail-from is not spoofed, but rather the P2 FROM. Is this configurable to d a send-on-behalf or simply change to some other static address?

email mailman mailing-list

1 Answers

  1. A bit old question, but here some suggestion solution.

    I will try to explain how the default mailman behavior.

    Email from [email protected] was sent to [email protected] (a mailman list). Both envelope sender and [email protected] have value "[email protected]".

    As mailman receive it, it rewrites envelope sender to [email protected]. Now mailman forward it to other members with envelope sender: [email protected] and From header: [email protected].

    The problem is, as April 2014 the Big Email Provider Yahoo activates DMARC in their domains. As the result, if DMARC-aware mail server spot the Yahoo address in From header but it wasn't sent from Yahoo server, the server will reject it.

    Mailman developer adding fix in Mailman version 2.1.16. It now has option from_is_list

    from_is_list

    Replace the sender with the list address to conform with policies like ADSP and DMARC. It replaces the poster's address in the From: header with the list address and adds the poster to the Reply-To: header, but the anonymous_list and Reply-To: header munging settings below take priority. If setting this to Yes, it is advised to set the MTA to DKIM sign all emails. If this is set to Wrap Message, just wrap the message in an outer message From: the list with Content-Type: message/rfc822

    • 5