[BALUG-Admin] (forw) Bounce action notification
Hoover Chan
hoover.chan@gmail.com
Sat Jul 30 23:13:36 UTC 2022
Rick, thanks for explaining what was happening and apologies to all who
were affected by the way I had things set up for my ewind.com domain. A
little bit of backstory. I had to quickly set up workarounds when I lost
several servers due to hardware failures and had to rebuild on existing
cloud based systems (anybody else using Nephohosting or have heard good or
bad about them?) and where gaps in coverage appeared, tried to cover them
with forwarding.
That being said, I'd like to keep my BALUG mailing lists presence based on
my hoover.chan@gmail.com address.
Also, any pointers to documentation on current best practices for building
network services (e-mail, Web, DNS)? Especially on cloud hosted platforms?
(e.g. Nephosting (or equivalent), AWS, etc). Most of the "How Tos" that
I've learned from in the past are now outdated.
Speaking of which, I also had to rebuild my collection of GNU Mailman
mailing lists on cloud hosted services since my hardware disasters also
swept those away. I'm guessing that the SPF/DMARC issues may be affecting
these too. Partly due to pricing and what reviews I was able to find at the
time, I ended up going to "Mailmanlists.net". Is the BALUG universe also on
a 3rd party hosted service which everyone is happy with? I'd be curious to
learn more.
Thanks all for your patience.
- Hoover Chan (hoover.chan@gmail.com)
On Sat, Jul 30, 2022 at 2:58 PM Rick Moen <rick@linuxmafia.com> wrote:
> It took me a moment to figure this out, because I was in a security talk
> at SCaLE 19x and was distracted.
>
> Hoover Chan did something that many people think is a good idea, but is
> not: Hoover subscribed "hchan@mail.ewind.com" but set that mailbox to
> forward to his GMail mailbox, hoover.chan@gmail.com .
>
> Hoover, sorry, in 2022 you can no longer do mail forwarding with wild
> abandon, because of increasing deployment of anti-forgery blocking
> technologies (SPF and DMARC).
>
> In this case, my posting to balug-admin was processed by list.balug.org
> and re-mailed to all subscribers including your hchan@mail.ewind.com .
> Host nephoscale.ewind.com (IP 198.89.112.140) tried re-lobbing your
> subscriber copy to GMail, which rejected it because IP 198.89.112.140
> is not a permitted originator for mail from domain balug.org, i.e.,
> that IP as an SMTP source violates balug.org's SPF and DMARC
> declarations.
>
> I am deleting your subscriptions of hchan@mail.ewind.com from
> balug-admin and from any other BALUG mailing list it might be on.
> (I haven't yet checked the other three.) I will also have Mailman
> send an "invitation" to quick-subscribe Hoover Chan <hoover.chan@gmail.com>
> ,
> if you so wish.
>
> Please review your subscriptions to any _other_ mailing lists, and stop
> relying on hchan@mail.ewind.com -> hoover.chan@gmail.com forwarding.
> You really cannot rely on that, any more. TY.
>
> -- Rick Moen
> for the BALUG sysadmin team
>
>
> ----- Forwarded message from mailman@lists.balug.org -----
>
> Date: Sat, 30 Jul 2022 20:35:00 +0000
> From: mailman@lists.balug.org
> To: balug-admin-owner@lists.balug.org
> Subject: Bounce action notification
> X-Spam-Status: No, score=-2.6 required=4.0
> tests=BAYES_00,MAILING_LIST_MULTI,
> NO_REAL_NAME,SPF_PASS,T_TVD_MIME_NO_HEADERS autolearn=ham
> version=3.3.1
>
> This is a Mailman mailing list bounce action notice:
>
> List: BALUG-Admin
> Member: hchan@mail.ewind.com
> Action: Subscription disabled.
> Reason: Excessive or fatal bounces.
>
>
>
> The triggering bounce notice is attached below.
>
> Questions? Contact the Mailman site administrator at
> mailman@lists.balug.org.
>
> Received: from static-198.89.112.140.nephohosting.com ([198.89.112.140]
> helo=nephoscale.ewind.com)
> by balug-sf-lug-v2.balug.org with esmtps
> (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
> (Exim 4.92)
> id 1oHtAp-00053A-No
> for balug-admin-bounces@lists.balug.org; Sat, 30 Jul 2022
> 20:34:59 +0000
> Received: from localhost (localhost)
> by nephoscale.ewind.com (8.14.4/8.14.4) id 26UKUlVD005544;
> Sat, 30 Jul 2022 13:30:47 -0700
> Date: Sat, 30 Jul 2022 13:30:47 -0700
> From: Mail Delivery Subsystem <MAILER-DAEMON@nephoscale.ewind.com>
> Message-Id: <202207302030.26UKUlVD005544@nephoscale.ewind.com>
> To: <balug-admin-bounces@lists.balug.org>
> MIME-Version: 1.0
> Content-Type: multipart/report; report-type=delivery-status;
> boundary="26UKUlVD005544.1659213047/nephoscale.ewind.com"
> Subject: Returned mail: see transcript for details
> Auto-Submitted: auto-generated (failure)
> Received-SPF: none client-ip=198.89.112.140; helo=nephoscale.ewind.com
>
> The original message was received at Sat, 30 Jul 2022 13:30:41 -0700
> from balug.org [96.86.170.229]
>
> ----- The following addresses had permanent fatal errors -----
> hoover.chan@gmail.com
> (reason: 550-5.7.26 This message does not pass authentication checks
> (SPF and DKIM both)
> (expanded from: <hchan@mail.ewind.com>)
>
> ----- Transcript of session follows -----
> ... while talking to gmail-smtp-in.l.google.com.:
> >>> DATA
> <<< 550-5.7.26 This message does not pass authentication checks (SPF and
> DKIM both
> <<< 550-5.7.26 do not pass). SPF check for [lists.balug.org] does not
> pass with ip:
> <<< 550-5.7.26 [198.89.112.140].To best protect our users from spam, the
> message
> <<< 550-5.7.26 has been blocked. Please visit
> <<< 550-5.7.26
> https://support.google.com/mail/answer/81126#authentication for more
> <<< 550 5.7.26 information.
> f5-20020a62db05000000b0052c708707dbsi7062217pfg.121 - gsmtp
> 554 5.0.0 Service unavailable
>
> Reporting-MTA: dns; nephoscale.ewind.com
> Received-From-MTA: DNS; balug.org
> Arrival-Date: Sat, 30 Jul 2022 13:30:41 -0700
>
> Final-Recipient: RFC822; hchan@mail.ewind.com
> X-Actual-Recipient: RFC822; hoover.chan@gmail.com
> Action: failed
> Status: 5.7.26
> Remote-MTA: DNS; gmail-smtp-in.l.google.com
> Diagnostic-Code: SMTP; 550-5.7.26 This message does not pass
> authentication checks (SPF and DKIM both
> Last-Attempt-Date: Sat, 30 Jul 2022 13:30:42 -0700
>
> Return-Path: <balug-admin-bounces@lists.balug.org>
> Received: from balug-sf-lug-v2.balug.org (balug.org [96.86.170.229])
> by nephoscale.ewind.com (8.14.4/8.14.4) with ESMTP id
> 26UKUfVD005543
> for <hchan@mail.ewind.com>; Sat, 30 Jul 2022 13:30:41 -0700
> Received: from localhost ([127.0.0.1] helo=balug.org)
> by balug-sf-lug-v2.balug.org with esmtp (Exim 4.92)
> (envelope-from <balug-admin-bounces@lists.balug.org>)
> id 1oHtAc-00052G-8o; Sat, 30 Jul 2022 20:34:46 +0000
> Received: from linuxmafia.com ([96.95.217.99])
> by balug-sf-lug-v2.balug.org with esmtps
> (TLS1.0:RSA_AES_256_CBC_SHA1:256)
> (Exim 4.92) (envelope-from <rick@linuxmafia.com>) id 1oHtAZ-000526-W5
> for balug-admin@lists.balug.org; Sat, 30 Jul 2022 20:34:44 +0000
> Received: from rick by linuxmafia.com with local (Exim 4.72)
> (envelope-from <rick@linuxmafia.com>) id 1oHtAX-0001P2-QB
> for balug-admin@lists.balug.org; Sat, 30 Jul 2022 13:34:41 -0700
> Date: Sat, 30 Jul 2022 13:34:41 -0700
> From: Rick Moen <rick@linuxmafia.com>
> To: balug-admin@lists.balug.org
> Message-ID: <20220730203441.GI13985@linuxmafia.com>
> References: <20220726022507.GV13985@linuxmafia.com>
> MIME-Version: 1.0
> Content-Disposition: inline
> In-Reply-To: <20220726022507.GV13985@linuxmafia.com>
> Organization: If you lived here, you'd be $HOME already.
> X-Mas: Bah humbug.
> X-Clacks-Overhead: GNU Terry Pratchett
> User-Agent: Mutt/1.5.20 (2009-06-14)
> X-SA-Exim-Connect-IP: <locally generated>
> X-SA-Exim-Mail-From: rick@linuxmafia.com
> X-SA-Exim-Scanned: No (on linuxmafia.com); SAEximRunCond expanded to false
> Received-SPF: pass client-ip=96.95.217.99; envelope-from=
> rick@linuxmafia.com;
> helo=linuxmafia.com
> Subject: Re: [BALUG-Admin] Spamtraps and
> http://www.uceprotect.net/en/rblcheck.php?ipr=96.86.170.229
> X-BeenThere: balug-admin@lists.balug.org
> X-Mailman-Version: 2.1.29
> Precedence: list
> List-Id: Discussion among those who make BALUG work
> <balug-admin.lists.balug.org>
> List-Unsubscribe: <
> https://lists.balug.org/cgi-bin/mailman/options/balug-admin>,
> <mailto:balug-admin-request@lists.balug.org?subject=unsubscribe>
> List-Archive: <https://lists.balug.org/pipermail/balug-admin/>
> List-Post: <mailto:balug-admin@lists.balug.org>
> List-Help: <mailto:balug-admin-request@lists.balug.org?subject=help>
> List-Subscribe: <
> https://lists.balug.org/cgi-bin/mailman/listinfo/balug-admin>,
> <mailto:balug-admin-request@lists.balug.org?subject=subscribe>
> Content-Type: text/plain; charset="us-ascii"
> Content-Transfer-Encoding: 7bit
> Errors-To: balug-admin-bounces@lists.balug.org
> Sender: "BALUG-Admin" <balug-admin-bounces@lists.balug.org>
>
>
>
> ----- End forwarded message -----
>
[image: width=]
<http://www.avg.com/email-signature?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail>
Virus-free.www.avg.com
<http://www.avg.com/email-signature?utm_medium=email&utm_source=link&utm_campaign=sig-email&utm_content=webmail>
<#DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.balug.org/pipermail/balug-admin/attachments/20220730/fba3966d/attachment-0001.htm>
More information about the BALUG-Admin
mailing list